GraphQL Weekly - Newsletter about GraphQL, Apollo and more

Issue 403• Feb 8, 2026

Releases

GraphQL Hive replaced its GraphQL Playground with a new Laboratory, redesigned around familiar code editor interaction patterns. It focuses on improving the day-to-day experience of writing operations, managing execution context, and debugging.

Apollo Skills: Teaching AI Agents How to Use Apollo and GraphQL

Apollo published a set of Skills for AI coding assistants. Install them into Claude Code, Cursor, or Copilot and your agent starts writing proper nullability, named operations, and error handling without you having to repeat yourself every session.

Tutorials

PortSwigger's New Learning Path for GraphQL API Security

New learning path from Web Security Academy: endpoint discovery, introspection bypass, unsanitized arguments, brute-force and CSRF defenses. Covers both exploitation and mitigation.

Articles

Hacking Moltbook

RLS disabled, a Supabase API Key exposed in client-side JavaScript. Full write access to the DB. GraphQL Introspection and Supabase PostgREST error messages to learn what's inside. Gal Nagli describes how he hacked the social media website for AI agents.

Announcements

The Graph Launches MCP Agent for Natural Language GraphQL Queries

AI agents can now query The Graph using natural language. An MCP agent converts plain English requests into GraphQL queries for The Graph Network, with full x402 Subgraph Gateway compatibility in development for autonomous agent payments.

View issue 402

Share the goods

Found a cool GraphQL resource? Tell us all about it!

Join the community

Follow on Twitter

Join us on Slack

Recent issues

Issue 403 Issue 402 Issue 401 Issue 399 Issue 398 Issue 397 Issue 396 Issue 395 Issue 394 Issue 393 Issue 392

A weekly newsletter of the best news, articles and projects about GraphQL

Releases

Tutorials

Articles

Announcements

Submit a new link to the
GraphQL Weekly newsletter!