Graphjin MCP Server
by doscoOne governed graph for AI agents — GraphQL + MCP over your databases, files, APIs, and code
Graphjin is an open-source mcp server by dosco, written mainly in Go, with 3,226 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026. The latest npm release is graphjin 3.21.20, published Nov 13, 2026, with 429 downloads last week.
Scan summary: scanned Nov 5, 2026 at commit 6f14910. Seen able to run shell commands. Scan policy
What Graphjin can touch
- Seen in this scan, either in the code or while it ran.Run shell commandsFound in the code by our scan
- Our checks did not find this. The tool may still do it.Run dynamic codeNot seen in this scan
- Our checks did not find this. The tool may still do it.Read or write filesNot seen in this scan
- Our checks did not find this. The tool may still do it.Read environment and secretsNot seen in this scan
- Our checks did not find this. The tool may still do it.Control a web browserNot seen in this scan
- Not checked directly. Its own description suggests it does this.Connect to databasesLikely, from its own description
- Our checks did not find this. The tool may still do it.Read or send messagesNot seen in this scan
- Our checks did not find this. The tool may still do it.Touch money or tradingNot seen in this scan
- Our checks did not find this. The tool may still do it.Connect to the internetNot run in this scan
"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 6f14910, Nov 5, 2026. See the scan policy.
Before you install Graphjin
AgenticMart scanned Graphjin on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.
What it can access
- An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.
- Based on its description and topics, it likely needs to read and write files on your machine.
- Based on its description and topics, it likely needs to connect to a database.
- Based on its description and topics, it likely needs to act on cloud infrastructure.
Before you install
- Point it at one project folder, never your home directory.
- Give it a read-only database user unless it must write.
- Pin the version you reviewed instead of always installing the latest release.
- Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
- Maintained by dosco on GitHub, 3,226 stars and 206 forks. Popularity is not proof of safety.
- Last code change: Nov 1, 2026.
- Open-source license: Apache-2.0.
Graphjin is an open-source mcp server by dosco, written mainly in Go. One governed graph for AI agents — GraphQL + MCP over your databases, files, APIs, and code
At a glance
- Stars
- 3.2k
- Forks
- 206
- Language
- Go
- License
- Apache-2.0
- Created
- Mar 2019
- Last update
- Nov 1, 2026
- Type
- MCP Server
- Price
- Free
Topics
Questions about Graphjin
What is Graphjin?
One governed graph for AI agents — GraphQL + MCP over your databases, files, APIs, and code
Who maintains Graphjin?
Graphjin is maintained by dosco on GitHub (dosco/graphjin). AgenticMart lists it from public repository data.
Is Graphjin safe to use?
AgenticMart scanned Graphjin on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.
What license does Graphjin use?
It is published under the Apache-2.0 license.
Graphjin alternatives
View more →Similar mcp servers in Database Management, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Graphjin (this page) dosco | 3.2k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Codebase Memory MCP DeusData | 48k | MIT | Nov 1, 2026 | Scanned, see report |
| Xerj xerj-org | 19k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MCP Toolbox googleapis | 17k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Nightingale ccfos | 13k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Dbhub bytebase | 3.8k | MIT | Oct 26, 2026 | Scanned, no flagged issues |