{"uid":"cap_T2IUZoxCIFkNj3BC89qrM","slug":"graphql-endpoint-introspection-check-8a1dbfd9","name":"GraphQL Endpoint Introspection Check","description":"GraphQL endpoint check: sends a minimal introspection query and reports whether the URL is a GraphQL endpoint, whether introspection is enabled (a security signal), the query/mutation/subscription root type names, number of types, the first 40 query fields, and whether GET requests are accepted. $0.01 per endpoint.","url":"https://intel.rallylive.ca/dev/graphql-introspect-hint","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_prbNWbjk98TejBqAJ8Psc","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Probes a URL to detect whether it is a GraphQL endpoint, whether introspection is enabled, and returns schema metadata including root type names, type count, and first 40 query fields.","exampleAgentPrompt":"Can you check whether https://api.example.com/graphql is actually a GraphQL endpoint, and if so, tell me whether introspection is enabled, what the root query type is called, and what the first 40 query fields are?","exampleUseCases":[{"title":"Security audit for exposed introspection","prompt":"I need to check whether our production API at https://api.mycompany.com/graphql has introspection accidentally left on — can you probe it and tell me if it's a security risk?"},{"title":"API discovery before integration","prompt":"Before I start integrating with https://partner.service.io/api, can you confirm it's actually a GraphQL endpoint and show me the available query fields and root types?"},{"title":"Verify third-party GraphQL support","prompt":"I found a potential data source at https://data.provider.net/graphql — can you check if it's a real GraphQL server, whether it accepts GET requests, and how many types the schema has?"}],"resultDescription":"Returns whether the URL is a GraphQL endpoint, whether introspection is enabled (a security signal), the names of the query/mutation/subscription root types, the total number of schema types, the first 40 query field names, and whether the endpoint accepts HTTP GET requests.","failureModes":["URL is not reachable or times out — endpoint reports it is not a GraphQL server","URL returns non-GraphQL responses (e.g. REST or HTML) — reported as not a GraphQL endpoint","Introspection is disabled — returns endpoint is GraphQL but introspection unavailable, so schema details cannot be extracted","Server requires authentication — introspection query rejected with 401/403","Malformed or ambiguous URL input — query fails or returns an error"],"whenToPreferThis":"Use this endpoint when you need to quickly determine if an unknown URL is a GraphQL API, audit a known GraphQL server for security misconfigurations (introspection left on), or gather basic schema shape information before building an integration. It is especially useful for API security reviews and automated discovery pipelines. Prefer this over manual curl-based introspection when you want a structured, single-call result with security framing at low cost ($0.01 per call).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T13:12:58.053Z","isFirstParty":false}