August 2026 Summaries
2 posts from Apollo
Filter
Month:
Year:
Post Summaries
Back to Blog
Apollo MCP Server’s self-audit against the OWASP MCP Top 10 concludes that its typed, schema-validated GraphQL tool architecture directly prevents shell-based command injection, while most other protections depend on deployment configuration and operational controls. The server supports authentication checkpoints, global and per-operation OAuth scopes, mutation gating, telemetry, environment-based header configuration, container attestations, and description overrides, but users must configure these features carefully and maintain reviews of tool definitions, scopes, credentials, and source changes. Key residual risks include plaintext static headers, opt-in per-operation authorization, unredacted tracing by default, uneven binary signing, hot-loaded tool changes without approval workflows, and caller tokens being forwarded upstream by default despite MCP specification concerns. The assessment also states that agent instruction injection remains possible within the set of exposed operations, while shadow server discovery and tenant isolation fall outside the server’s control and must be addressed through asset management and deployment topology.
Aug 14, 2026
1,672 words in the original blog post.
Apollo Summit 2026, set to take place in San Francisco from October 6 to 8, is the world's largest GraphQL event, focusing on transforming API platforms into AI platforms. The conference will feature sessions and workshops emphasizing how a well-governed graph can serve as an effective entry point for both applications and AI agents. Highlighted speakers will discuss practical solutions and share insights on managing API strategies, with topics covering agent infrastructure, governance, security, and GraphQL advancements. The event aims to provide attendees—ranging from platform engineers to technical leaders—with actionable patterns and peer connections to enhance their API and AI strategies. Participants can anticipate a combination of educational keynotes, technical workshops, and networking opportunities, with early bird registration priced at $299 and including meals and refreshments.
Aug 04, 2026
910 words in the original blog post.