---
title: "Discussion on \"GraphQL introspection: disabling it leaves the field open\" | Hashnode"
description: "Discussion on \"GraphQL introspection: disabling it leaves the field open\". GraphQL introspection: disabling it leaves the field open\nGraphQL introspection lets a client ask the server for its whole schema. Turning it off hides the field list, but a client that knows or guess"
url: "https://hashnode.com/posts/graphql-introspection-disabling-it-leaves-the-field-open/6af3c1fede442c2445ddd0fa"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [GraphQL introspection: disabling it leaves the field open](https://excessionlabs.hashnode.dev/graphql-introspection-disabling-it-leaves-the-field-open?utm_source=hashnode&utm_medium=feed)

GraphQL introspection: disabling it leaves the field open GraphQL introspection lets a client ask the server for its whole schema. Turning it off hides the field list, but a client that knows or guess

19h ago · 9 min read · excessionlabs.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#webdev](https://hashnode.com/tag/webdev)
-   [#appsec](https://hashnode.com/tag/appsec)
-   [#graphql](https://hashnode.com/tag/graphql)

## Written by

[Excession Labs](https://hashnode.com/@excessionlabs)

@excessionlabs

  
[View profile](https://hashnode.com/@excessionlabs)

Excession Labs is a security lab. We run authorized penetration tests and AI red teaming for web apps, APIs and AI products.

Excession Labs is a security lab. We run authorized penetration tests and AI red teaming for web apps, APIs and AI products.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.