- Home
- API Security Testing Software
- GraphQL-Cop
On the recordRead 7 Oct 202617 facts
GraphQL-Cop
On the record
- CI/CD
- The project describes itself as suitable for lightweight GraphQL CI/CD checks.github.com · read 7 Oct 2026
- Configuration
- Users can supply request headers, exclude tests, force a scan, configure a proxy, or provide a custom endpoint wordlist.github.com · read 7 Oct 2026
- Deployment
- The README documents running GraphQL-Cop from Python and building and running it as a Docker container.github.com · read 7 Oct 2026
- Detection coverage
- Its listed checks include alias and batch query overloading, CSRF risks, information leaks, and circular introspection queries.github.com · read 7 Oct 2026
- Docker
- The README documents building and running the tool in a Docker container.github.com · read 7 Oct 2026
- Endpoint discovery
- If no GraphQL path is provided, the tool iterates through common GraphQL paths.github.com · read 7 Oct 2026
- Findings
- It tests for issues including alias overloading, batch queries, CSRF, information leaks, field duplication, and denial-of-service risks.github.com · read 7 Oct 2026
- Installation
- The README lists Python 3 and the Requests library as requirements.github.com · read 7 Oct 2026
- Intended users
- The repository describes the tool as suitable for GraphQL security auditing and CI/CD checks.github.com · read 7 Oct 2026
- License
- The repository identifies its license as MIT.github.com · read 7 Oct 2026
- Maintainer
- The repository owner profile identifies dolevf as Dolev Farhi and describes him as a security engineer.github.com · read 7 Oct 2026
- Output
- It supports JSON output and can include cURL reproduction commands in the results.github.com · read 7 Oct 2026
- Purpose
- GraphQL-Cop is a lightweight Python utility for running common security tests against GraphQL APIs, including CI/CD checks.github.com · read 7 Oct 2026
- Reproduction
- For identified vulnerabilities, it provides cURL commands to reproduce the findings.github.com · read 7 Oct 2026
- Requirements
- The listed requirements are Python 3 and the Requests library.github.com · read 7 Oct 2026
- Support
- The README provides command-line help and troubleshooting guidance for Docker file and dependency issues.github.com · read 7 Oct 2026
- Target discovery
- If the target URL omits a GraphQL path, it iterates through a series of common GraphQL paths.github.com · read 7 Oct 2026
