GraphQL API

The main dashboard, control, and admin flows are exposed as a single GraphQL endpoint:

POST /graphql      # queries & mutations
WS   /graphql      # subscriptions (graphql-ws protocol)

The schema is built from TypeGraphQL resolvers in src/resolvers/ and src/resolvers/subscriptions/. Introspection is enabled in non-production deployments, so Apollo Sandbox and the GraphQL Playground are usable out of the box.

Schema reference

The full schema reference is auto-generated and lives at:

• GraphQL Schema Reference — every type, field, and argument.

The raw SDL is published at /schema.graphql for tooling.

Try it live (non-production)

In any non-NODE_ENV=production deployment of the API server, navigate to /graphql in your browser — Apollo Sandbox (embedded) lets you browse the schema and run queries/mutations directly. Authentication is handled by sending your session token as either the Authorization header or the session-token cookie.

Subscriptions

Subscriptions live on the same path (/graphql) but speak the graphql-ws subprotocol over WebSocket. The available operations are listed in Schema Reference → Subscription.

Authorization model

Almost every resolver is decorated with @Authorized(...) from typegraphql-authchecker, which inspects the resolved user/organization membership. The accepted roles mirror the RBAC roles defined in src/resolvers/ (admin, super-user, organization roles, etc.). The auth-checker itself lives at src/authorization/graphql/.