grafbase — security grade SAFE, quality 42/100

Security audit verdict: SAFE · quality 42/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by grafbase · MCP Server · ★ 1.2k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is grafbase safe to install? View the security audit →

About grafbase

[!IMPORTANT] The Guild has acquired Grafbase! Read more [!IMPORTANT] The Grafbase platform, dashboard and app has sunsetted and no longer operational. If you are looking for an alternative schema registry, please refer to Hive Console by The Guild. Grafbase Gateway, Grafbase CLI and other components in this repository are currently on maintenanace mode. During maintenance mode, only high severity security releases and fixes will be made. Grafbase Gateway, Grafbase CLI, and this repository will be archived by end of May 2026. If you are looking for a performant and Federation-compatible GraphQL router, please refer to Hive Router or Hive Gateway the old README is still available here

aiapienterprise-graphqlfederationgraphqlgraphql-federationmcpmodel-context-protocolrustwebassembly

Quick Facts

Stars1,231
Forks75
LanguageRust
CategoryMCP Server
LicenseMPL-2.0
Quality Score42.0249690924286/100
Open Issues12
Last Updated2026-07-01
Created2021-05-24
Platformsbrowser, mcp, rust
Est. Tokens~4717k

grafbase alternative? Top 6 similar tools

Looking for a grafbase alternative? If you're comparing grafbase with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • mcp-context-forge by IBM · ⭐ 4.6k

    An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified e

  • nexus by Nexus-Router · ⭐ 436

    Govern & Secure your AI

  • LAP by Lap-Platform · ⭐ 344

    Your agents are guessing at APIs. Give them the actual Agent-Native spec. 1500+ API's Ready To-Use skills, Co

  • openpencil by ZSeven-W · ⭐ 6.1k

    The world's first open-source AI-native vector design tool and the first to feature concurrent Agent Teams. De

  • klavis by Klavis-AI · ⭐ 5.8k

    Klavis AI: MCP integration platforms that let AI agents use tools reliably at any scale

  • awesome-mcp-servers by appcypher · ⭐ 5.8k

    Awesome MCP Servers - A curated list of Model Context Protocol servers

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Rust Agent Tools

Frequently Asked Questions

What is grafbase?

grafbase is [Acquired by The Guild] The Grafbase GraphQL Federation Gateway. It is categorized as a MCP Server with 1.2k GitHub stars.

What programming language is grafbase written in?

grafbase is primarily written in Rust. It covers topics such as ai, api, enterprise-graphql.

How do I install or use grafbase?

You can find installation instructions and usage details in the grafbase GitHub repository at github.com/grafbase/grafbase. The project has 1.2k stars and 75 forks, indicating an active community.

What license does grafbase use?

grafbase is released under the MPL-2.0 license, making it free to use and modify according to the license terms.

What are the best alternatives to grafbase?

The top alternatives to grafbase on Agent Skills Hub include mcp-context-forge, nexus, LAP. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools