Making Requests#

All API requests are HTTP POST requests to the GraphQL endpoint with a JSON body.

Endpoint#

POST https://afosto.app/graphql

Name	Type	Required	Description
`Authorization`	Header	Required	Bearer YOUR_API_KEY
`Content-Type`	Header	Required	application/json

Name	Type	Required	Description
`query`	String	Required	Your GraphQL query or mutation
`variables`	Object	Optional	Key/value map of variables referenced in the query

{
  "query": "...",
  "variables": {}
}

Always use variables instead of string interpolation to prevent injection and improve query caching:

# Good
query GetProduct($id: ID!) {
  product(id: $id) {
    id
    name
  }
}

{
  "query": "query GetProduct($id: ID!) { product(id: $id) { id name } }",
  "variables": { "id": "prod_123" }
}

Successful responses return HTTP 200 with:

{
  "data": {
    "product": {
      "id": "prod_123",
      "name": "Blue T-Shirt"
    }
  }
}

Errors are returned in an errors array alongside (or instead of) data. See Error Handling for details.