GraphQL

Last updated: Oct 28, 2026

Rationale

GraphQL is the query language of the official API of Fluid Attacks.

These are the primary reasons why Fluid Attacks selected it:

It is open source.
It has a very flexible syntax. With this syntax, end users can get only the data that is necessary for them.
With its schema, front ends can inherit all the API types.
It makes versioning much easier. Fluid Attacks can deprecate individual queries and mutations. Thus, it can continue to change its API, and it is not necessary to break compatibility.
It supports playgrounds, which help you learn and use the API easily.
Because of its flexibility, it is harder to protect a GraphQL API against DoS attacks. But it supports validations like query breadth and depth.

Fluid Attacks examined this alternative, but it did not select it for these reasons:

It has a much more limited syntax for end users.
It makes versioning harder, because Fluid Attacks must deprecate full endpoints. Thus, the granularity decreases, and Fluid Attacks must make large changes to keep compatibility.
Because its flexibility is limited, it is easier to protect it against DoS attacks.

Fluid Attacks uses GraphQL as the query language of its official API.