Developer portal

GraphQL

When a single round-trip beats a dozen REST calls. Same auth model, same tenant isolation, same rate limits.

Endpoint

https://app.qehsethos.com/api/graphql

Send POST requests with Content-Type: application/json and a body of { query, variables, operationName }. Introspection is enabled in sandboxes and on-request in production (ask your CSM).

Example query

query RecentIncidents($from: DateTime!) {
  records(moduleKey: "incidents", filter: { createdAt: { gte: $from } }, limit: 50) {
    items {
      id
      payload
      workflowState
      createdAt
      createdBy { id email }
      attachments { id filename sizeBytes }
    }
    nextCursor
  }
}

Constraints

Query depth capped at 8 to prevent hostile traversals.
Alias uniqueness enforced.
Per-request complexity budget — abusive queries get rejected with a clear error.
Subscriptions are not supported — use webhooks instead.