# Secure your GraphQL platform by safelisting known queries

DevFeed: [Secure your GraphQL platform by safelisting known queries](<https://devfeed.tech/articles/secure-your-graphql-platform-by-safelisting-known-queries-23511.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/secure-your-graphql-platform-by-safelisting-known-queries>)

Author: Vivek Ravishankar

Published: 2023-08-10T15:32:45Z

Content type: release

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [GraphOS](<https://devfeed.tech/topics/graphos.md>), [Security](<https://devfeed.tech/topics/security.md>), [API Platform](<https://devfeed.tech/topics/api-platform.md>), [gateway](<https://devfeed.tech/topics/gateway.md>)

Tags: [announcement](<https://devfeed.tech/tags/announcement.md>), [api-platform](<https://devfeed.tech/tags/api-platform.md>), [audit](<https://devfeed.tech/tags/audit.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [gateway](<https://devfeed.tech/tags/gateway.md>), [graphos](<https://devfeed.tech/tags/graphos.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [preview](<https://devfeed.tech/tags/preview.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

Apollo introduces persisted query safelisting for GraphOS to help API teams restrict GraphQL operations and reduce performance and security risks from overly complex queries. The preview supports configurations ranging from audit-only logging to accepting only requests with known hashes, and is available to GraphOS Enterprise customers.

## Source excerpt

GraphQL is designed to offer a more flexible, self-serve developer experience, but its open-ended approach often raises questions about its security model. The most common objection is that GraphQL APIs allow unbounded operations -- a trait that can degrade performance or result in denial-of-service if too many complex queries are sent to the endpoint.