Invoke a GraphQL API using the Integrated GraphQL Console

WSO2 API Manager (WSO2 API-M) has an integrated GraphiQL UI for the GraphQL APIs.

GraphQL is the graphical, interactive, web-based GraphQL integrated development environment (IDE) for GraphQL query and it has a reference implementation from the GraphQL Foundation.

GraphiQL UI supports full GraphQL Language Specification (Queries, Mutations, Subscriptions, Fragments, Unions, directives, multiple operations per query, etc.) and it provides interactive schema documentation, real-time error highlighting and reporting for queries and variables, automatic query and variables completion, it automatically adds the required fields to the queries, and also queries the history using local storage.

Try out using Postman

If required, instead of using the integrated GraphQL console you can try out your GraphQL API by downloading your GraphQL Schema as a Postman collection and trying it out on Postman. For more information, see Try out using Postman.

Let's see how to use the GraphQL Console in the Developer Portal to invoke a GraphQL API.


You can only try out HTTPS based APIs via the GraphQL Console because the API Store runs on HTTPS.

The examples here use the StarWarsAPI GraphQL API, which was created in Create a GraphQL API.

  1. Sign in to the WSO2 Developer Portal and click on an API (e.g., StarWarsAPI).


  2. Subscribe to the GraphQL API (e.g., StarWarsAPI 1.0.0) using an application and an available throttling policy.

    Subscribe to the GraphQL API

  3. Click Applications and open the application that you used to subscribe to the API.

  4. Click Production Keys and navigate to OAuth2 Tokens.Navigate to OAuth Token

  5. Scroll down and generate a production key

    Generate production key


    Production and Sandbox Tokens

    To generate keys for the Sandbox endpoint, go to the Sandbox Keys tab. For more details, see Maintaining Separate Production and Sandbox Gateways.


    JWT vs OAuth tokens

    If the application you are using for this example is self-contained (JWT), then copy the generated access token before proceeding to the next step. If the application is of OAuth type, then the GraphQL console will be automatically populated with the generated token in the authorization field.

  6. Click APIs to navigate to the APIs and select the GraphQL API that you want to invoke.

  7. Click Try Out in the Overview tab.

    Test GraphQL API

    This opens the GraphiQL UI (GraphQL Console) to test the StarWarsAPI.

  8. Copy the generated access token to the Authorization field as shown below.

    Copy Access Token for tryout GraphQL API

  9. Enter the following sample query.

  10. Click Execute.

    Execute GraphQL Query


    If you cannot invoke the API's HTTPS endpoint (this causes the SSLPeerUnverified exception), it could be because the security certificate issued by the server is not trusted by your browser.

    To resolve this issue, access the HTTPS endpoint directly from your browser and accept the security certificate.

    If the API Manager has a certificate signed by a Certificate Authority (CA), the HTTPS endpoints should work out-of-the-box.

    Note the successful response for the API invocation.

    Response of GraphQL Query

You have now successfully invoked a GraphQL API using the GraphQL API Console.