getMcpServers

Get a paginated, filterable, sortable list of MCP servers in the VibeSec BOM.

Examples

GraphQL

query GetMcpServers($input: GetMcpServersInput) {
  getMcpServers(input: $input) {
    items {
      name
      identifier
      connectionType
      description
      totalUsers
      totalCalls
      totalTools
      lastActivity
      userTotalCalls
      userLastUsedAt
      firstSeen
      verdict
      findingsCount
      packageId
      metadata {
        transport
        publisher
        registryVersion
        toolsExposed
        prevalencePercent
        aiVerdict
        aiConfidence
        stars
        downloads
        lastScannedAt
        registryPublishedAt
        remoteHost
      }
      repository {
        url
        source
        id
      }
      registryStatus
    }
    total
    totalUsers
    totalCalls
  }
}

Variables

This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.

{
  "input": {
    "filter": {
      "identifier": ["https://mcp.example.com/sse"],
      "name": ["github-mcp"],
      "user": ["[e-mail]"],
      "toolName": ["search_repositories"],
      "verdict": ["Dangerous"]
    },
    "sort": {
      "field": "Name",
      "direction": "Asc"
    },
    "limit": 100,
    "offset": 0,
    "dateRange": {
      "from": 1749000000000,
      "to": 1749900000000
    }
  }
}

cURL

curl -X POST \
https://api.cloud.ox.security/api/apollo-gateway \
-H 'Content-Type: application/json' \
-H 'Authorization: YOUR_API_TOKEN' \
-d '{
 "query": "query GetMcpServers($input: GetMcpServersInput) { getMcpServers(input: $input) { items { name identifier connectionType description totalUsers totalCalls totalTools lastActivity userTotalCalls userLastUsedAt firstSeen verdict findingsCount packageId metadata { transport publisher registryVersion toolsExposed prevalencePercent aiVerdict aiConfidence stars downloads lastScannedAt registryPublishedAt remoteHost } repository { url source id } registryStatus } total totalUsers totalCalls } }",
 "variables": {
    "input": {
      "filter": {
        "identifier": ["https://mcp.example.com/sse"],
        "name": ["github-mcp"],
        "user": ["[e-mail]"],
        "toolName": ["search_repositories"],
        "verdict": ["Dangerous"]
      },
      "sort": {
        "field": "Name",
        "direction": "Asc"
      },
      "limit": 100,
      "offset": 0,
      "dateRange": {
        "from": 1749000000000,
        "to": 1749900000000
      }
    }
  }
}'

Node.js

const query = 'query GetMcpServers($input: GetMcpServersInput) { getMcpServers(input: $input) { items { name identifier connectionType description totalUsers totalCalls totalTools lastActivity userTotalCalls userLastUsedAt firstSeen verdict findingsCount packageId metadata { transport publisher registryVersion toolsExposed prevalencePercent aiVerdict aiConfidence stars downloads lastScannedAt registryPublishedAt remoteHost } repository { url source id } registryStatus } total totalUsers totalCalls } }';

fetch("https://api.cloud.ox.security/api/apollo-gateway", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  body: JSON.stringify({
    query: query,
    // This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    variables: {
      input: {
        filter: {
          identifier: ["https://mcp.example.com/sse"],
          name: ["github-mcp"],
          user: ["[e-mail]"],
          toolName: ["search_repositories"],
          verdict: ["Dangerous"]
        },
        sort: {
          field: "Name",
          direction: "Asc"
        },
        limit: 100,
        offset: 0,
        dateRange: {
          from: 1749000000000,
          to: 1749900000000
        }
      }
    }
  })
})
.then(response => response.json())
.then(result => console.log(JSON.stringify(result, null, 2)))
.catch(error => console.error('Error:', error));

Python

import requests

query = 'query GetMcpServers($input: GetMcpServersInput) { getMcpServers(input: $input) { items { name identifier connectionType description totalUsers totalCalls totalTools lastActivity userTotalCalls userLastUsedAt firstSeen verdict findingsCount packageId metadata { transport publisher registryVersion toolsExposed prevalencePercent aiVerdict aiConfidence stars downloads lastScannedAt registryPublishedAt remoteHost } repository { url source id } registryStatus } total totalUsers totalCalls } }'

response = requests.post(
  "https://api.cloud.ox.security/api/apollo-gateway",
  headers={
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  json={
    "query": query,
    # This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    "variables": {
      "input": {
        "filter": {
          "identifier": ["https://mcp.example.com/sse"],
          "name": ["github-mcp"],
          "user": ["[e-mail]"],
          "toolName": ["search_repositories"],
          "verdict": ["Dangerous"]
        },
        "sort": {
          "field": "Name",
          "direction": "Asc"
        },
        "limit": 100,
        "offset": 0,
        "dateRange": {
          "from": 1749000000000,
          "to": 1749900000000
        }
      }
    }
  }
)

if response.status_code == 200:
    result = response.json()
    print(result)
else:
    print(f"Error: {response.status_code}")
    print(response.text)

Arguments

You can use the following argument(s) to customize your getMcpServers query.

Argument	Description	Supported fields
input GetMcpServersInput		filter AiBomFilterInput sort AiBomSortInput limit Int offset Int dateRange VibeSecDateRange

Fields

Return type: GetMcpServersResponse!

You can use the following field(s) to specify what information your getMcpServers query will return. Please note that some fields may have their own subfields.

Field	Description	Supported fields
items [McpServerItem!]!	List of MCP servers matching the query criteria	name String! identifier String! connectionType String description String totalUsers Int! totalCalls Int! totalTools Int! lastActivity DateTime userTotalCalls Int userLastUsedAt DateTime firstSeen DateTime verdict McpVerdict findingsCount Int packageId String metadata McpReputationMetadata repository McpReputationRepository registryStatus String
data [McpServerItem!]! ⚠️	Deprecated: Use items	name String! identifier String! connectionType String description String totalUsers Int! totalCalls Int! totalTools Int! lastActivity DateTime userTotalCalls Int userLastUsedAt DateTime firstSeen DateTime verdict McpVerdict findingsCount Int packageId String metadata McpReputationMetadata repository McpReputationRepository registryStatus String
total Int!	Total number of MCP servers matching the query criteria
totalUsers Int!	Total number of distinct users across the matching MCP servers
totalCalls Int!	Total number of calls across the matching MCP servers