First-party API (default)

Use this role for an API to be consumed by trusted clients owned by the same organization. This suits the majority of GraphQL deployments.

Intended for

APIs powering websites, mobile and desktop apps.

Recommended practices

• Trusted documents
• Batched execution
• Cursor pagination
• Pagination limits
• Error hardening