# Hygraph > Hygraph is a hosted headless CMS from Hygraph GmbH in Berlin. Agents read and write entries, assets and localisations through a GraphQL Content API, change schema through a Management API and SDK, or connect through a hosted MCP server. - Canonical: https://www.anchorterminal.com/tools/hygraph - Markdown: https://www.anchorterminal.com/tools/hygraph.md (~8,300 tokens) - Slim: https://www.anchorterminal.com/tools/hygraph.min.md (~2,430 tokens, same facts, less prose, for token-sensitive contexts) - JSON: https://www.anchorterminal.com/tools/hygraph.json (this page as data, same URL with Accept: application/json) - Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt) - API: https://www.anchorterminal.com/api/v1/index.json - Updated: 2026-10-09 ## Overview **Grade B · 69.3/100 · rank #182 of 842 · #4 in CMS & website publishing · not agent-ready · confidence medium** ## Assessment Tokens are limited by model, stage, locale and action, the GraphQL schema is typed and introspectable, and a hosted MCP server rejects delete and unpublish operations. Error bodies carry a message without a machine code, there are no idempotency keys, audit logs are Enterprise only, and no data processing agreement, sub-processor list or security.txt was found. ## Facts | Field | Value | | --- | --- | | Vendor | Hygraph GmbH (https://hygraph.com) | | Kind | HTTP API | | Category | CMS & website publishing (https://www.anchorterminal.com/categories/cms) | | Transport | HTTP, Streamable HTTP | | Endpoint | `https://mcp.hygraph.com/mcp` | | Auth | OAuth or key · Self-serve. The Content API and Management API take a Permanent Auth Token as a Bearer header. A person creates the token in Project Settings and sets its content permissions (by model, stage, locale, environment and action) and its Management API permissions. A new token has none enabled. Deleting a token invalidates it, and no expiry or rotation was found. The project MCP endpoint takes the same token. The global MCP endpoint uses a browser login through auth.hygraph.com and follows the user's own permissions. OAuth for third-party apps needs a client ID from Hygraph support. No app review or sales approval is needed for tokens. | | Pricing | Freemium ($199 / mo) · The Hobby plan is free with no card and includes 500,000 API calls a month, 1,000 entries, 2 locales and 3 API tokens. Usage past the limit is blocked until the next period. Growth is $199 a month with 1,000,000 API calls, and overage of $0.20 per 10,000 API operations and per GB of asset traffic. Enterprise is sold through sales, with a 30-day trial that needs no card (https://hygraph.com/pricing, checked 2026-10-08). | | x402 | No · No x402, MPP or L402 in the API reference, the MCP server docs or the pricing page (checked 2026-10-08). | | Licence | Proprietary service under Hygraph GmbH's Terms of Service. The `@hygraph/management-sdk` package is MIT | | Tools exposed | 17 | | Packages | npm: `@hygraph/management-sdk` | | Source | https://github.com/hygraph/management-sdk | | Docs | https://hygraph.com/docs/api-reference | | llms.txt | https://hygraph.com/llms.txt | | Last release | 2026-09-30 | | GitHub stars | 52 (as of 2026-10-08) | | npm downloads / week | 8,645 | | Surfaces | GraphQL Content API at `https://.hygraph.com/v2//` for reads and writes, a read endpoint on `.cdn.hygraph.com`, a GraphQL Management API for schema and settings, and a hosted MCP server | | MCP server | Hosted, streamable HTTP. Content tools `list_entity_types`, `get_entity_schema`, `list_entities`, `get_entities_by_id`, `discover_entities`, `search_content`, `execute_graphql`, `create_entry`, `update_entry` and `publish_entry`. Schema tools `get_project_info`, `get_management_operation_schema` and `submit_batch_migration`. Also `get_ai_guidelines`, `list_agents`, `trigger_agents` and `check_progress`. The global endpoint adds `list_projects` and `list_environments`. Available on all projects | | Credentials | Permanent Auth Tokens (JWTs) created in Project Settings, sent as a Bearer header. Hobby allows 3 tokens, Growth 5, Enterprise up to 30. The global MCP endpoint uses OAuth through auth.hygraph.com, whose metadata lists PKCE S256, a registration endpoint and a revocation endpoint | | Permissions | Content permissions per token by model, stage, locale and environment for read, create, update, delete, publish and unpublish. Management API permissions apply to all environments. Public API access is off by default. Custom roles are Enterprise only | | Rate limits | Uncached requests a second, 5 on Hobby, 25 on Growth, up to 500 on Enterprise. Concurrent operations per environment, 10 queries and 5 mutations on Hobby, 30 and 10 on Growth, 60 and 20 on Enterprise. Cached requests are not limited | | Request size | Queries 10 KB and mutations 30 KB on Hobby, 15 KB and 70 KB on Growth, 20 KB and 80 KB on Enterprise. Larger requests return 413 | | Free plan | Hobby, no card. Per the pricing page, 1,000 entries, 500,000 API calls and 100 GB of asset traffic a month, 3 seats, 2 locales, 20 models, 1 environment, 5 webhooks, 50 MB an asset. No version history. Usage past the limit returns 402 until the next period | | Paid plans | Growth $199 a month with 10,000 entries, 1,000,000 API calls, 500 GB of asset traffic, 10 seats, 3 locales and 2 environments. Overage $0.20 per 10,000 API operations and per GB. Enterprise is priced through sales | | Drafts and versions | Mutations write to DRAFT, and publish and unpublish are separate mutations per stage and locale, with batch forms. A version is written on each publish and read through `history` and `Version`. Retention is 14 days on Growth and up to 365 on Enterprise. Restore is documented in Studio only. Scheduled publishing is Enterprise only | | Assets | `createAsset` returns a pre-signed upload URL, or takes a remote URL. Projects created before February 2024 may use a legacy asset system with a different upload API | | Localisation | Per-field localisation with create, update, upsert and delete of a locale inside entry mutations, and publishing per locale. 2 locales on Hobby, 3 on Growth, up to 80 on Enterprise | | Environments | 1 on Hobby, 2 on Growth, up to 10 on Enterprise. The Management SDK can diff one environment against another and apply the result, which replaces the target schema | | Pagination | `first`, `last`, `skip`, `before` and `after`, with Relay connection types. Default 10 entries, maximum 100 | | Errors | HTTP 400, 401, 402, 403, 404, 413, 429 and 500 with a GraphQL `errors` array of messages and `extensions.requestId`. No error code list | | SDKs | `@hygraph/management-sdk` 1.6.1 (19 August 2026), JavaScript and TypeScript, MIT, Node.js 18 or later. No official Content API client. Any GraphQL client works | | Audit | Audit logs on Enterprise with 90 days of retention, recording the member or token behind each change. Webhook logs and a usage metrics query on the Management API | | SLA | The pricing page lists an uptime SLA of up to 99.95% on Enterprise. The SLA document was not found | | Certifications | The site states SOC 2 Type 2 and hosting on ISO 27001 certified infrastructure. No bug bounty or disclosure policy found | | Data location | 3 shared regions (EU, US, APAC) on Hobby and 9 on Growth per the pricing page. The status page lists 11 regions. Sub-processors are not named | | Open source | No. The Management SDK is MIT | | Capabilities | cms.content, cms.publish, cms.assets, cms.localisation, cms.schema | | Tags | official, hosted, mcp, graphql, closed-source, no-card, free-tier, llms-txt, webhooks, typescript, status-page, soc2 | | JSON | https://www.anchorterminal.com/api/v1/tools/hygraph.json | ## Score breakdown (methodology v0.4, October 2026 research run) Assessed 2026-10-08 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points. | Category | Weight | This run | Score (0–100) | Points | | --- | --- | --- | --- | --- | | Reliability | 16% | 20 | 89 | 17.8 | | Performance | 10% | pending | pending | n/a | | Schema & documentation | 13% | 16.2 | 78 | 12.7 | | Agent ergonomics | 13% | 16.2 | 72 | 11.7 | | Security & auth | 14% | 17.5 | 63 | 11.0 | | Payments & pricing | 10% | 12.5 | 35 | 4.4 | | Task success | 10% | pending | pending | n/a | | Maintenance & community | 7% | 8.8 | 74 | 6.5 | | Transparency & trust (editorial 45, provenance 75) | 7% | 8.8 | 60 | 5.2 | | Negative events | up to −15 | up to −15 | none recorded | 0 | | **Total** | | | | **69.3 → B** | ### Why each score - Reliability 89: Graded on the GraphQL Content and Management APIs, with the hosted MCP server noted. Public status page at status.hygraph.com with the API and the asset CDN as components for 11 regions and an incident feed back to 2021 (20). In the 90 days to 8 October 2026 it lists one incident, 36 minutes on 7 August when new sign-ups were unavailable, marked major, with existing users unaffected (26 of 30). Rate limits published by plan as uncached requests a second (5, 25, up to 500) and concurrent operations (15). The docs give exponential backoff guidance with sample code. `Retry-After` is documented only for asset transformation limits, and there are no idempotency keys (10). The pricing page lists an Enterprise uptime SLA of up to 99.95%. The SLA document was not found (8). The APIs and the MCP server carry no beta label (10). - Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes. - Schema & documentation 78: GraphQL introspection is on by default for each project's Content API, so the contract is machine-readable and specific to the project. The Management API answered 401 to an introspection query without a token, and no static schema file was found (20 of 25). A root `llms.txt` with a Markdown copy of every docs section under `/llms-full/` (10). The Management SDK page states when to use it and when not to, and the MCP tools reference gives each of 19 tools one line with a warning on `execute_graphql` (15). Inputs are typed per model with enums and required fields. Rich Text takes an AST and JSON fields are free-form (13). Request and response examples throughout, and an errors page for nine HTTP statuses. Error bodies carry a message only, with no code list (10). The endpoint path carries `/v2/` and the changelog is public and dated. No API versioning policy was found (10). - Agent ergonomics 72: GraphQL field selection sizes every response, `first` defaults to 10 and is capped at 100, and the MCP tool `list_entities` takes a limit and field selection. The project MCP endpoint lists 17 tools (22 of 25). `first`, `last`, `skip`, `before` and `after`, Relay connections, typed `where` filters and ordering (20). Errors use documented HTTP statuses and a `requestId`, with free-text messages and no machine code (11). No idempotency keys. `upsert` mutations key on a unique field, batch migrations apply all or nothing with a `dry_run` on the MCP tool, and MCP rejects delete and unpublish. We couldn't read the tool annotations (12). Only the Bearer header is required and any GraphQL client works. The one official SDK covers the Management API in JavaScript and TypeScript (7). - Security & auth 63: Permanent Auth Tokens are JWTs sent as a Bearer header, each limited by model, stage, locale, environment and action, with separate Management API permissions, and deleting one invalidates it. No expiry or rotation was found. The global MCP endpoint uses OAuth through auth.hygraph.com with PKCE and a registration endpoint, with access following the user's own permissions (25 of 30). New tokens start with no permissions, MCP token presets include read-only and content-only, MCP rejects delete and unpublish, and public API access is off by default. The API itself has no confirmation step (17). The docs warn against always allowing `execute_graphql`. No guidance on treating stored content as untrusted input was found (5). Audit logs are Enterprise only with 90 days of retention and record the token that made a change (7). The site states SOC 2 Type 2 and ISO 27001 certified hosting. `/.well-known/security.txt` answered 404, no disclosure policy or bounty was found, and the trust report on app.drata.com answered 403 (9). - Payments & pricing 35: No x402, MPP or L402 (0). Growth is $199 a month, with overage of $0.20 per 10,000 API operations and per GB of asset traffic. Enterprise is priced through sales (15). The Hobby plan needs no card and includes 500,000 API calls a month (20). A person signs up in a browser by email or social login and creates the token in Studio (0). - Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. - Maintenance & community 74: The changelog's newest entry is 30 September 2026 (30). Entries on 30 July, 31 August and 30 September, and `@hygraph/management-sdk` 1.6.1 on 19 August (20). Public changelog, a community Slack, in-app chat and email support on Growth. The SDK's GitHub repository shows 9 open issues and no push since 13 September 2024 (9 of 15). The Management SDK is current on npm. The official MCP registry returned no Hygraph entry (11). npm has three SDK releases since June 2026, and the public repository does not carry them, so CI could not be seen (4). - Transparency & trust 60: Closed service under published Terms of Service from Hygraph GmbH, with the Management SDK under MIT (15 of 30). The privacy policy, last updated 19 March 2025, covers the service and lists six categories of service provider without naming them. Retention is stated only as the legal period, the terms disclaim liability for deleted content, and no data processing agreement was found (12). Dated notices for the 2025 move off the legacy asset system and a statement that the old `@graphcms/management` SDK is deprecated. The terms allow the service to change without prior notice (10). The status page and pricing page name 11 hosting regions. Sub-processors are not named (8). Fix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (17 items): https://www.anchorterminal.com/fixes/hygraph.md (JSON https://www.anchorterminal.com/fixes/hygraph.json) ### What we couldn't check - unchecked: the trust report linked from hygraph.com/security-and-compliance redirects to app.drata.com, which answered 403, so the SOC 2 report, any penetration test summary and any sub-processor list there were unread - unchecked: the MCP tool definitions, their JSON Schemas and their readOnlyHint and destructiveHint annotations, because listing tools needs a token. The tool count comes from the docs - unchecked: whether GitHub CI passes for the Management SDK, because the public repository is behind the npm releases - No data processing agreement, sub-processor list, SLA document, API versioning policy, token expiry or rotation, or a restore mutation for versions was found in the pages read - The yearly price for Growth is drawn by script on the pricing page and was not read. Whether failed requests count as API operations was not found - The lead was right about the vendor and the two GraphQL APIs. It did not mention the hosted MCP server, which the docs list as available on all projects ### Sources - robots.txt, with no Content-Signal line: (seen 2026-10-08) - llms.txt: (seen 2026-10-08) - API reference, Markdown copy: (seen 2026-10-08) - API limits: (seen 2026-10-08) - authorisation and endpoints: (seen 2026-10-08) - errors: (seen 2026-10-08) - mutations: (seen 2026-10-08) - Management SDK: (seen 2026-10-08) - MCP server overview: (seen 2026-10-08) - MCP server setup: (seen 2026-10-08) - MCP tools reference: (seen 2026-10-08) - token permissions, Markdown copy of Get Started: (seen 2026-10-08) - audit logs, backups and versioning: (seen 2026-10-08) - pricing and plan comparison: (seen 2026-10-08) - Terms of Service: (seen 2026-10-08) - privacy policy: (seen 2026-10-08) - imprint: (seen 2026-10-08) - security feature page: (seen 2026-10-08) - changelog: (seen 2026-10-08) - status incidents feed: (seen 2026-10-08) - status components: (seen 2026-10-08) - MCP protected resource metadata: (seen 2026-10-08) - OAuth server metadata: (seen 2026-10-08) - npm, @hygraph/management-sdk: (seen 2026-10-08) - GitHub organisation repositories: (seen 2026-10-08) - official MCP registry search, no result: (seen 2026-10-08) - security.txt, 404: (seen 2026-10-08) - domain registration: (seen 2026-10-08) ## Who's behind it (provenance 75/100, checked 2026-10-08) | Check | Finding | Points | | --- | --- | --- | | Legal entity named | Hygraph GmbH | 20/20 | | Domain age | hygraph.com, registered 2022-03-04 (4 years) | 7/15 | | Endpoint on the vendor's domain | mcp.hygraph.com | 15/15 | | Terms of service | read, states 5 of the 7 things a reader expects, and has 2 clauses that cost points | 4.3/10 | | Privacy policy | read, states 6 of the 8 things a reader expects | 8.5/10 | | Status page | status.hygraph.com | 10/10 | | Changelog | published | 10/10 | | security.txt | not found | 0/10 | The imprint and the privacy policy name Hygraph GmbH, Dircksenstraße 47, 10178 Berlin, registered at Amtsgericht Berlin Charlottenburg under HRB 250696 B. The Terms of Service define the Hygraph Services to include the cloud platform and the Hygraph API. The pricing page lists them as the online terms for Hobby and Growth, with custom terms on Enterprise. The privacy policy has a section on use of the Hygraph service and was last updated on 19 March 2025. It names categories of service provider and no companies. No data processing agreement was found on hygraph.com. The Content API answers at .hygraph.com, the Management API at management.hygraph.com, the MCP server at mcp.hygraph.com and the OAuth server at auth.hygraph.com. https://hygraph.com/.well-known/security.txt answered 404 on 8 October 2026. RDAP for hygraph.com gives a registration date of 2022-03-04. The product was named GraphCMS before that, and the older SDK is still on npm as `@graphcms/management`. ### Terms and privacy, as read A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice. **Terms of service** (https://hygraph.com/terms), read 2026-10-08, gives no date, states 5 of the 7 things a reader expects. - To know. Restricts benchmarking or competitive use (costs points). "You may not access the Hygraph Services for the purpose of bringing an intellectual property infringement claim against Hygraph or for the purpose of creating a product or service competitive with the Hygraph Services." - To know. Says the terms or the service can change without notice (costs points). "You acknowledge and agree that the form and nature of the Hygraph Services which Hygraph provides may change from time to time without prior notice to you, subject to the terms in Section 4.3." - To know. Says access can be ended without notice or for any reason. "9.3 You agree that Hygraph, in its sole discretion and for any or no reason, may terminate your account or any part thereof." - Not found in the text. Gives the date it was last updated. - Names the governing law or courts. The law of Federal Republic of Germany. - Says how changes to the terms are announced. Gives seven days of notice before a change. - Not found in the text. Refers to a service level or uptime commitment. - Also in the text (2026-10-08). Hygraph may use the customer's names, marks and logos in marketing materials and customer lists at its sole discretion. "You agree that Hygraph, in its sole discretion, may use your trade names, trademarks, service marks, logos, domain names and other distinctive brand features in presentations, marketing materials, customer lists, financial reports and Web site listings" - Also in the text (2026-10-08). The customer must export its content before the account ends, and Hygraph says it will give a reasonable opportunity to retrieve it when Hygraph ends the account. "You are solely responsible for exporting your Content and Application(s) from the Hygraph Services prior to termination of your account for any reason, provided that if we terminate your account, we will provide you a reasonable opportunity to retrieve your Content and Application(s)." - Also in the text (2026-10-08). Claims about a charge are waived unless raised within 30 days of the charge. "To the fullest extent permitted by law, you waive all claims relating to charges unless claimed within 30 days after the charge (this does not affect your credit card issuer rights)." **Privacy policy** (https://hygraph.com/privacy), read 2026-10-08, gives no date, states 6 of the 8 things a reader expects. - Not found in the text. Gives the date it was last updated. - Not found in the text. Says whether personal data is sold or shared for advertising. - Gives a privacy contact. Names a data protection officer. - Says where data is transferred or stored. Relies on the Data Privacy Framework. ## Live (updated 2026-10-09 10:14 UTC) - Right now: up, HTTP 401, 161 ms, checked 2026-10-09 10:14 UTC (get on `https://mcp.hygraph.com/mcp`, asks for auth) - Uptime 24h 100.0% (28 probes) · 30 days 100.0% (28 probes) · p50 80 ms · p95 161 ms - Vendor status page: none, All Systems Operational - Always current: https://www.anchorterminal.com/api/v1/live/hygraph.json ## Probe metrics Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score. ## Prices | Item | Price | Unit | Note | | --- | --- | --- | --- | | Growth | $199 | per month (plan) | 10 seats, 1,000,000 API calls and 500 GB of asset traffic included | | Additional API operations on Growth | $0.02 | per 1,000 requests | sold as $0.20 per 10,000 API operations | | Additional asset traffic on Growth | $0.20 | per GB of traffic | per GB past the plan's 500 GB | Across all listings: https://www.anchorterminal.com/prices/index.md ## Strengths - Permanent Auth Tokens are limited by model, stage, locale, environment and action, and a new token starts with no permissions enabled - The hosted MCP server rejects `delete*` and `unpublish*` operations, and `submit_batch_migration` takes `dry_run` and applies schema changes in one transaction - GraphQL field selection, `first`, `skip` and cursor arguments and typed filters size every response. The default page is 10 entries and the maximum 100 - The Hobby plan needs no card and includes 500,000 API calls a month, 1,000 entries and 3 API tokens - `llms.txt` links a Markdown copy of every documentation section, and the changelog has dated entries for 30 July, 31 August and 30 September 2026 ## Weaknesses - GraphQL error bodies carry a message and a `requestId` with no machine-readable code, and only asset transformation 429 responses are documented with `Retry-After` - No idempotency keys in the reviewed documentation. Safe retries rest on `upsert` mutations keyed on a unique field - Audit logs, backups with recovery and an uptime SLA are Enterprise only, and version history is absent on Hobby and 14 days on Growth - No data processing agreement, named sub-processor list, security.txt or disclosure policy was found on hygraph.com. The privacy policy names categories of service provider only - The only official SDK is `@hygraph/management-sdk` for JavaScript and TypeScript, and its public GitHub repository was last pushed on 13 September 2024 ## Before you call it (notes for agents) 1. Send the Permanent Auth Token as `Authorization: Bearer ` to `https://.hygraph.com/v2//`. Read the schema by introspection first, because every type is generated from the project's models 2. Mutations write to DRAFT. Call `publish` with `to: [PUBLISHED]` as a separate mutation, and pass `locales` to write or publish a localisation 3. Stay under the plan's limit for uncached requests (5 a second on Hobby, 25 on Growth) and its concurrent mutations (5 and 10). Back off exponentially on 429 4. Upload an asset with `createAsset`, then POST the file to the returned pre-signed URL, or pass `uploadUrl` for a remote file. The asset stays `ASSET_CREATE_PENDING` until processed 5. Schema changes go to the Management API through `@hygraph/management-sdk` or the MCP tool `submit_batch_migration`. Version restore has no documented mutation, so read `Version` and write the old values back ## Connect Install: ```bash npm install @hygraph/management-sdk ``` Claude Code: ```bash claude mcp add hygraph https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp \ --transport http \ --header "Authorization: Bearer ${HYGRAPH_TOKEN}" ``` MCP client configuration: ```json { "mcpServers": { "hygraph": { "args": [ "mcp-remote", "https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/master/mcp", "--header", "Authorization: Bearer ${HYGRAPH_TOKEN}" ], "command": "npx", "env": { "HYGRAPH_TOKEN": "token_here" } } } } ``` Through letme (picks today, calling later): https://letme.dev/hygraph. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md ## Similar tools Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last. | Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown | | --- | --- | --- | --- | --- | --- | --- | | DatoCMS | BB | 74.4 | 70 | cms.content, cms.publish, cms.assets, cms.localisation, cms.schema | no | https://www.anchorterminal.com/tools/datocms.md | | Sanity | BB | 73.7 | 81 | cms.content, cms.publish, cms.assets, cms.schema, cms.localisation | no | https://www.anchorterminal.com/tools/sanity.md | | Webflow | B | 69.4 | 179 | cms.content, cms.publish, cms.assets, cms.schema, cms.localisation | no | https://www.anchorterminal.com/tools/webflow.md | | Storyblok | B | 67.7 | 226 | cms.content, cms.publish, cms.assets, cms.localisation, cms.schema | no | https://www.anchorterminal.com/tools/storyblok.md | | Directus | B | 67.1 | 244 | cms.content, cms.schema, cms.assets, cms.publish, cms.localisation | no | https://www.anchorterminal.com/tools/directus.md | | Strapi | B | 65.7 | 285 | cms.content, cms.publish, cms.localisation, cms.assets, cms.schema | no | https://www.anchorterminal.com/tools/strapi.md | ## Panel reviews (0) Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): . Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md ## Notable - The hosted MCP server has a project endpoint at `https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp` with 17 tools and a global endpoint at `https://mcp.hygraph.com/mcp` that adds `list_projects` and `list_environments` (source: ) - Delete and unpublish are not supported through MCP, for content or schema, and `execute_graphql` rejects `delete*` and `unpublish*` operations (source: ) - The Claude connector for the MCP server, AI guidelines over MCP and agent runs over MCP were announced in the changelog entry of 31 August 2026 (source: ) - Uncached requests are limited to 5 a second on Hobby, 25 on Growth and up to 500 on Enterprise, with separate limits on concurrent queries and mutations (source: ) - Schema changes go through one `submitBatchChanges` mutation that applies a list of changes in a single transaction and rolls all of them back if one fails (source: ) - The management-sdk repository on GitHub was last pushed on 13 September 2024, and npm shows versions 1.5.3, 1.6.0 and 1.6.1 published between June and August 2026 (source: ) ## Compare - [Contentstack vs Hygraph](https://www.anchorterminal.com/compare/contentstack-vs-hygraph.md): B 64 vs B 69.3 - [DatoCMS vs Hygraph](https://www.anchorterminal.com/compare/datocms-vs-hygraph.md): BB 74.4 vs B 69.3 - [Directus vs Hygraph](https://www.anchorterminal.com/compare/directus-vs-hygraph.md): B 67.1 vs B 69.3 - [Ghost vs Hygraph](https://www.anchorterminal.com/compare/ghost-vs-hygraph.md): C 58.3 vs B 69.3 - [Hygraph vs Payload](https://www.anchorterminal.com/compare/hygraph-vs-payload.md): B 69.3 vs C 55.2 - [Hygraph vs Prismic](https://www.anchorterminal.com/compare/hygraph-vs-prismic.md): B 69.3 vs C 61.9 - [Hygraph vs Sanity](https://www.anchorterminal.com/compare/hygraph-vs-sanity.md): B 69.3 vs BB 73.7 - [Hygraph vs Storyblok](https://www.anchorterminal.com/compare/hygraph-vs-storyblok.md): B 69.3 vs B 67.7 - [Hygraph vs Strapi](https://www.anchorterminal.com/compare/hygraph-vs-strapi.md): B 69.3 vs B 65.7 - [Hygraph vs Webflow](https://www.anchorterminal.com/compare/hygraph-vs-webflow.md): B 69.3 vs B 69.4 - [Hygraph vs WordPress](https://www.anchorterminal.com/compare/hygraph-vs-wordpress.md): B 69.3 vs B 64.8 ## Verify this listing For the vendor. The badge or a plain link to this page verifies the listing, from a page on hygraph.com or one of its subdomains, or the README of github.com/hygraph/management-sdk. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "hygraph", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify HTML badge: ```html Hygraph on Anchor Terminal ``` Markdown badge, for a README: ```markdown [![Hygraph on Anchor Terminal](https://www.anchorterminal.com/badges/hygraph.svg)](https://www.anchorterminal.com/tools/hygraph) ``` Plain link: ```html Hygraph on Anchor Terminal ``` ## Share this listing For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Hygraph is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score. - Dark: https://www.anchorterminal.com/assets/share/hygraph-dark.png - Light: https://www.anchorterminal.com/assets/share/hygraph-light.png