We'll first explore how we implemented our MCP server for GraphQL APIs and then use Grafbase extensions to federate non-GraphQL datasources to have them all available for agents without increasing the number of tools.

This talk explores the architecture and implementation of OAuth-based authentication for remote-hosted MCP servers. I'll walk through the specific challenges I encountered while building an MCP server at Tigris — including managing dynamic client registrations, token lifecycle management and scope handling across distributed environments.

I'll also cover UX choices like reducing friction in the auth flow, handling token refresh gracefully, and managing session state.

An introductory presentation exploring the 5 Ws (Who, What, When, Where, Why) of GraphQL to understand if you should be using it as your daily API schema.