Common GraphQL Features

Every GraphQL endpoint served by Brightspot—whether built with the GCA, the code generator, or the framework—shares a common, production-grade feature set. These capabilities come from the core plugin and require no per-approach work: build your schema however you like, and you get the same security controls, persisted query support, debugging tools, analytics, and schema management for free.

This section covers each of those features:

Built-in Types — the scalars and object types (dates, numbers, files, geo, rich text, JSON) shared by every schema.

Schema Settings — the core GraphQLSchemaSettings options every endpoint inherits: introspection rules, timeouts, depth and complexity limits, SDL output, and profiling.

Security — API access and keys, CORS, introspection controls, query timeouts, maximum depth, and query complexity analysis.

Persisted Queries — Automatic Persisted Queries (APQ) and statically registered queries for performance and allowlisting.

Analytics — per-endpoint, per-client usage metrics visualized in the CMS.

Debugging — the @debug directive, Dari profiler integration, error extensions, and troubleshooting workflows.

Best Practices — deployment, schema versioning and diffing, monitoring, and operational guidance.

For tooling, the GraphQL Explorer works with every endpoint and is documented separately.