github re-analysis due

blurrah/mcp-graphql

Model Context Protocol server for GraphQL

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

code evidence vv2.0.4 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs blurrah-mcp-graphql-4a50e97/dev/graphql.ts :3 import fs from "node:fs";
fs blurrah-mcp-graphql-4a50e97/src/helpers/introspection.ts :2 import { readFile } from "node:fs/promises";
fs blurrah-mcp-graphql-4a50e97/src/helpers/package.ts :1 import { readFileSync } from "node:fs";

shell blurrah-mcp-graphql-4a50e97/dev/debug-manual-client.ts :4 import { type ChildProcess, spawn } from "node:child_process";

net blurrah-mcp-graphql-4a50e97/dev/graphql.ts :284 return yoga.fetch(request);
net blurrah-mcp-graphql-4a50e97/src/helpers/introspection.ts :14 const response = await fetch(endpoint, {
net blurrah-mcp-graphql-4a50e97/src/index.ts :158 const response = await fetch(env.ENDPOINT, {