First-party API (default)

Use this profile for an API to be consumed by trusted clients owned by the same organization. This suits the majority of GraphQL deployments.

Intended for

APIs powering websites, mobile and desktop apps.

Recommended practices

• Trusted documents
• Batched execution
• Cursor pagination
• Pagination limits
• Error hardening

Recommended patterns

• Trusted documents (operation allowlist)
• Cursor Connections
• Batch resolvers
• Validation pagination limits
• Resolver pagination limits