Disclaimer: All findings below are heuristic — based on field/argument names. "Potential" means manual verification is required, not confirmed vulnerability. This tool performs detection-only analysis; mutations are never executed automatically.

gqlhunter — GraphQL Schema Report

Target: https://countries.trevorblades.com/graphql
Scan Run ID: 1
Date: 2026-06-30 10:06:10

Discovered Endpoints

URL	Status
`https://countries.trevorblades.com/graphql`	`enabled`

Schema Overview

Query Type: Query
Mutation Type: —
Subscription Type: —
Total Types: 15

Queries (6)

Field	Return Type	Args
`continent`	`Continent`	[, {, ", n, a, m, e, ", :, , ", c, o, d, e, ", ,, , ", t, y, p, e, ", :, , ", N, O, N, _, N, U, L, L, ", }, ]
`continents`	`—`	[, {, ", n, a, m, e, ", :, , ", f, i, l, t, e, r, ", ,, , ", t, y, p, e, ", :, , ", C, o, n, t, i, n, e, n, t, F, i, l, t, e, r, I, n, p, u, t, ", }, ]
`countries`	`—`	[, {, ", n, a, m, e, ", :, , ", f, i, l, t, e, r, ", ,, , ", t, y, p, e, ", :, , ", C, o, u, n, t, r, y, F, i, l, t, e, r, I, n, p, u, t, ", }, ]
`country`	`Country`	[, {, ", n, a, m, e, ", :, , ", c, o, d, e, ", ,, , ", t, y, p, e, ", :, , ", N, O, N, _, N, U, L, L, ", }, ]
`language`	`Language`	[, {, ", n, a, m, e, ", :, , ", c, o, d, e, ", ,, , ", t, y, p, e, ", :, , ", N, O, N, _, N, U, L, L, ", }, ]
`languages`	`—`	[, {, ", n, a, m, e, ", :, , ", f, i, l, t, e, r, ", ,, , ", t, y, p, e, ", :, , ", L, a, n, g, u, a, g, e, F, i, l, t, e, r, I, n, p, u, t, ", }, ]

Risk Findings

No heuristic risk findings.

Auth Analysis

No auth analysis results. Run gqlhunter auth first.