Graphql Dos Shield

lazymac2x/graphql-dos-shield-api

This is a Cloudflare Workers-based MCP server that protects GraphQL APIs from denial-of-service attacks. The repository is sparse on implementation details, but the positioning suggests it provides operations for query complexity analysis, rate limiting, and depth checking for GraphQL endpoints. You'd reach for this when you need to harden a GraphQL API against malicious queries that could exhaust server resources through nested fields or expensive operations. It's deployed as a remotely accessible service at api.lazy-mac.com rather than running locally, which means the DoS protection logic runs on Cloudflare's edge network. The mcpize.yaml configuration file indicates it's built with the MCP framework, though the actual shield operations and thresholds aren't visible in the public repository.

tools: 3
transport: HTTP
last updated: May 16, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://api.lazy-mac.com/graphql-dos-shield/mcp --name graphql-dos-shield

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http graphql-dos-shield https://api.lazy-mac.com/graphql-dos-shield/mcp

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 3 tools

Verified live against the running server on Nov 6, 2026.

complexity_meterAnalyze GraphQL query complexity. Returns depth, field count, list multipliers, and a risk level (LOW/MEDIUM/HIGH/CRITICAL). CRITICAL means the query should be rejected.1 params

Analyze GraphQL query complexity. Returns depth, field count, list multipliers, and a risk level (LOW/MEDIUM/HIGH/CRITICAL). CRITICAL means the query should be rejected.

Parameters* required

query*string

GraphQL query string to analyze

rate_limiterCheck and enforce rate limiting for a client. In-memory sliding window — state resets on cold start.3 params

Check and enforce rate limiting for a client. In-memory sliding window — state resets on cold start.

Parameters* required

client_id*string

Unique client identifier

limitinteger

Max requests per window (default: 100)

window_msinteger

Window in ms (default: 60000)

query_rewriterText-level rewrite of an overly complex GraphQL query: strips excess nesting depth and truncates too many fields.3 params

Text-level rewrite of an overly complex GraphQL query: strips excess nesting depth and truncates too many fields.

Parameters* required

max_depthinteger

Max nesting depth (default: 3)

max_fieldsinteger

Max fields (default: 10)

query*string

GraphQL query to simplify

Readme

Details

Repository: github.com/lazymac2x/graphql-dos-shield-api
Category: Cloud & Infrastructure
Transport: HTTP
Registry: MCP registry, active
Tools verified: Nov 6, 2026

Related Cloud & Infrastructure MCP servers

View all

Graphql Rest Bridgelazymac2x/graphql-rest-bridge-apiCloudflare Workers MCP server: graphql-rest-bridge0stars

Interactive Api Playgroundlazymac2x/interactive-api-playground-apiCloudflare Workers MCP server: interactive-api-playground0stars

Llm Output Quality Monitorlazymac2x/llm-output-quality-monitor-apiCloudflare Workers MCP server: llm-output-quality-monitor0stars

Instadomainio.github.nach-dakwale/instadomainDomain registration for AI agents via Stripe or x402 crypto with Cloudflare DNS.0stars

Dockerhubpipeworx-io/mcp-dockerhubDocker Hub MCP — wraps the Docker Hub v2 API (free, no auth required for public data)0stars

Horoscopepipeworx-io/mcp-horoscopeHoroscope MCP — wraps the keyless Horoscope App API. https://horoscope-app-api.vercel.app0stars

Graphql Dos Shield

Install

Tools

Readme

Details

More from lazymac2x

Related Cloud & Infrastructure MCP servers