
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
thegraph-mcp
Advanced tools
The Graph decentralized network: run GraphQL against any subgraph via API-key gateway.
The Graph decentralized network: run GraphQL against any subgraph via API-key gateway.
export THEGRAPH_API_KEY=YOUR_KEY
query_subgraph — Run GraphQL against a subgraph on The Graph decentralized network. Example query: '{ _meta { block { number } } }'. Variables as JSON string.get_subgraph_schema — Fetch the GraphQL schema of a subgraph via introspection: entities and fields you can query.get_latest_block — Latest block a subgraph has indexed: chain, number, hash, timestamp.Part of awesome-mcps.
Every tool in this package is free: no licence key, no premium tier, no hosted licence gateway. The paywall machinery this repo once carried (per-tool licence checks and paid hosted endpoints) was removed repo-wide on 2026-10-17. Nothing that this package installs or calls asks you to pay.
FAQs
The Graph decentralized network: run GraphQL against any subgraph via API-key gateway.
The npm package thegraph-mcp receives a total of 88 weekly downloads. As such, thegraph-mcp popularity was classified as not popular.
We found that thegraph-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.