“GraphQL”

Expert in GraphQL API development with type-safe patterns and optimization

GraphQL — schema, resolvers, N+1/DataLoader, pagination.

Turn any GraphQL API into MCP tools.

Build GraphQL servers in Go with gqlgen: schema-first generation, resolver structure, the N+1 problem and dataloaders, complexity and depth limits, error…

Designs GraphQL schemas, resolvers, query/mutation/subscription patterns, and protobuf definitions for gRPC services.

Design a schema-first Spring for GraphQL API after /architect:design-api selects GraphQL or a hybrid surface.

GraphQL gateway for LLMs.

Guidelines for developing GraphQL APIs and React applications using Apollo Client for state management, data fetching, and caching

Use when designing GraphQL schemas, implementing Apollo Federation, or building real-time subscriptions.

Use when building or reviewing a graphql-ruby schema, resolver, or mutation.

Debugs REST and GraphQL APIs: unexpected status codes or bodies, auth failures (401/403, OAuth, API keys), schema mismatches, rate limits, pagination, and…

Generate a Spring for GraphQL API layer from approved SDL and resolver contracts — controllers, DTOs, mappers, authorization, batch loading, exception…

GraphQL and hidden parameter testing playbook.

Specialist subagent: Expert GraphQL architect for API design, schema development, and performance optimization

Master modern GraphQL with federation, performance optimization, and enterprise security.

Techniques to solve the N+1 problem using Dataloader.

Accounting knowledge graphs: SEC XBRL filings, QuickBooks ledgers, reports and forecasts.

API design patterns for REST, gRPC, and GraphQL.

Memberful MCP by usefulapi

usefulapi.io

Manage Memberful members, subscriptions, plans, passes and coupons via the GraphQL API.

Team baseline for external-interface contract artifacts: OpenAPI, JSON Schema, AsyncAPI, .proto, and GraphQL SDL, with spectral, ajv, buf, and…

Use when securing REST or GraphQL APIs against common auth, authorization, validation, and abuse risks.

IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR…

Idiomatic Rust guide based on Apollo GraphQL's best practices handbook.

API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection + batching, rate-limit abuse.