Overview

The GraphQL API provides full access to the TokenBot platform, including authentication, user management, and admin operations.

Endpoints

Environment	URL
Production	https://gql-api.tokenbot.com/graphql
Development	https://gql-api-dev.tokenbot.com/graphql

Authentication

The GraphQL API uses AWS AppSync with two auth modes:

1. Cognito User Pools — For authenticated user operations. Pass the access token from login in the Authorization header.

2. API Key — For public operations (register, login, forgot_password). Pass via x-api-key header.

Making Requests

curl -X POST https://gql-api.tokenbot.com/graphql \
  -H "Authorization: Bearer <access_token>" \
  -H "Content-Type: application/json" \
  -d '{
    "query": "query { me { success data { id email } } }"
  }'

Response Format

Most operations return a typed response with success, data, and optional error:

{
  "data": {
    "me": {
      "success": true,
      "data": {
        "id": "user_123",
        "email": "[e-mail]"
      }
    }
  }
}

Documentation

• Queries — All query operations

• Mutations — All mutation operations