GraphQL
Truestamp's authenticated GraphQL endpoint at /gql with an interactive playground at /gql/playground, accepting an API key or OAuth 2.1 bearer token, whose introspectable schema of queries and mutations is generated from the same resource domains as the JSON:API.
Overview
In Truestamp, GraphQL is the authenticated query surface at /gql, accepting the
same Authorization: Bearer credentials as the REST surface, either an
API key or an OAuth 2.1 access token. Its schema is
generated from Truestamp’s resource domains, so the available queries and mutations
mirror the operations of the JSON:API, and the schema is
fully introspectable through the interactive playground at /gql/playground. For
OAuth callers every operation requires the api:read scope and mutations
additionally require api:write; API-key callers are not scope-limited. The full
reference is the GraphQL API concept.