GraphQL API access controls

Hi @gannonh how were you able to get the graphql working?