# Demystifying GraphQL Misconceptions | Top Five GraphQL Myths Debunked

DevFeed: [Demystifying GraphQL Misconceptions | Top Five GraphQL Myths Debunked](<https://devfeed.tech/articles/demystifying-graphql-misconceptions-top-five-graphql-myths-debunked-23268.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/demystifying-graphql-misconceptions-top-five-graphql-myths-debunked>)

Author: Kurt Kemple

Published: 2021-10-19T09:18:15Z

Content type: article

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [Security](<https://devfeed.tech/topics/security.md>), [Caching](<https://devfeed.tech/topics/caching.md>), [API](<https://devfeed.tech/topics/api.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [tracing](<https://devfeed.tech/topics/tracing.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [caching](<https://devfeed.tech/tags/caching.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [security](<https://devfeed.tech/tags/security.md>), [tracing](<https://devfeed.tech/tags/tracing.md>)

## AI overview

This article addresses five common misconceptions about GraphQL, focusing on security, caching, scaling, team fit, and how GraphQL fits into an application stack. It explains that GraphQL APIs require deliberate security controls, can use established authentication and authorization patterns, and introduce risks such as query-depth, query-complexity, and batch-query attacks.

## Source excerpt

Trying to get buy-in to adopt GraphQL can be challenging when voices in the room provide inaccurate information about the technology. FUD (fear, uncertainty, and doubt) about things like security and caching can grind decision-making to a halt. These topics can be challenging to address without having access to and gathering the proper resources.