ApolloCAUTION

.claude/skills/mcp-apps-sync-docs

.claude/skills/rust-best-practices

let result = client.get("http://192.0.2.1:1").send().await;

let response = Http::get("http://127.0.0.1:1").wait();

@"https://studio.apollographql.com/graph/mcp-example/variant/mcp/explorer?explorerURLState=N4IgJg9gxgrgtgUwHYBcQC4QEcYIE4CeABAOIIoDqCAhigBb4CCANvigM4AUAJOyrQnREAyijwBLJAHMAhAEoiwADpIiRaqzwdOfAUN78UCBc

.application-manifest.json

CLAUDE.md

endpoint: "http://127.0.0.1:4317"

endpoint: "http://127.0.0.1:4317"

endpoint: http://127.0.0.1:4000

Apollo MCP Server validates signed JWT bearer access tokens; it doesn't support opaque access tokens. Each JWT must contain a `kid` header, as well as `exp` and `sub` claims. The token must also conta

You can enable credentials with CORS by setting the `Access-Control-Allow-Credentials` HTTP header to `true`.

# Set to true to add the `Access-Control-Allow-Credentials` header

The base request path sends GraphQL as a structured JSON HTTP request and doesn't invoke an operating-system shell or child process from MCP tool input. Operator-provided Rhai scripts run before outgo

1. Choose the environment-specific command to load environment variables from the provided `.env` file and start the MCP server.

curl -sSL https://rover.apollo.dev/nix/latest | sh

curl -sSL https://mcp.apollo.dev/download/nix/latest | sh

curl -sSL https://mcp.apollo.dev/download/nix/v1.20.0 | sh

curl -sSL https://mcp.apollo.dev/download/nix/v1.20.0-rc.1 | sh

Requests that stream a response — every tool call — now report the full request duration rather than the time to the response head, because the span stays open until the body finishes. This is the dur

The MCP server could become completely unresponsive to POST /mcp requests after hours of uptime while /health remained responsive. This occurred when a peer's transport entered a half-closed state (e.

Apollo MCP Server reads the standard `scope` claim first. This claim is a space-separated string, defined in [RFC 6749](https://datatracker.ietf.org/doc/html/rfc6749) and [RFC 9068](https://datatracke

Avoid header forwarding for sensitive credentials like API keys or access tokens. Apollo MCP Server logs a warning when you forward sensitive headers such as `Authorization`, `Cookie`, `Proxy-Authoriz

**To support credentialed requests, your server's config file must specify individual `origins` or `match_origins`**. If your server enables `allow_any_origin`, your browser will refuse to send creden