Building Relay Spec Compliance in Federation

Mark Faga

Apollo MCP Server started with a simple ask. When MCP first came out, customers wanted their agents to reach their own GraphQL APIs, so we built a server that turns GraphQL operations into MCP tools, with no hand-written tool per endpoint.

Is My Graph Healthy? Natural Language Access to GraphOS

Join Faisal Waseem, Staff Solutions Architect at Apollo, as he walks through the security architecture of Apollo Router and GraphOS, covering control plane governance, router-level authentication and authorization, demand control, and what it means to govern a GraphQL API in a world where AI agents are active consumers of your data.

GraphQL API Security in the Agentic AI Era

In one hour, we’re going to take a working OAuth-protected Apollo MCP Server — the kind you probably already have — and walk through exactly what’s wrong with it, why, and what to do about it

MCP Server Auth: Scopes, Step-Up Flows, and Token Exchange


This talk is an overview of the Relay spec, implementing it in federation, and open sourcing a NodeJS implementation (maybe a rust one too)

CNCF's flagship conference brings together the open source communities advancing cloud native computing and the infrastructure behind modern AI systems.

KubeCon + CloudNativeCon North America

Apollo Engineering Manager Alex Mann and former Apollo SVP of Engineering Smruti Patel and will argue that fleet-managed infrastructure was never the hard part of platform engineering – the missing layer is the capability APIs and lifecycle contracts between infrastructure and autonomous agents – illustrated with a case study on giving agents scoped, revocable data access instead of all-ornothing keys.

QCon

Apollo Summit 2026 Recap: What's New in GraphOS for Agents and Apps

Building Relay Spec Compliance in Federation

Meet your speaker

About this session

More recordings

Is My Graph Healthy? Natural Language Access to GraphOS

GraphQL API Security in the Agentic AI Era

MCP Server Auth: Scopes, Step-Up Flows, and Token Exchange