GraphQL API

A single endpoint, POST /graphql, for queries and mutations that don't map cleanly to REST — mainly dashboard-facing data like plan usage and API key management. It requires a JWT (dashboard session), not an API key.

Example query — current plan usage

query

query {
  getPlanUsage {
    planId
    displayName
    sessionsUsed
    sessionsLimit
    percentUsed
  }
}

Example mutation — create an API key

mutation

mutation {
  createApiKey(name: "Production backend", sdkType: WEB) {
    keyPairId
    publicKey   # certilayer_live_pk_... — safe for frontend
    secretKey   # certilayer_live_sk_... — backend only, shown once
  }
}

curl

curl -X POST https://api.certilayer.net/graphql \
  -H "Authorization: Bearer <your_jwt>" \
  -H "Content-Type: application/json" \
  -d '{"query": "{ getPlanUsage { sessionsUsed sessionsLimit } }"}'

⚠️

The GraphQL endpoint is intended for the CertiLayer dashboard and dashboard-equivalent tooling. Session ingestion and scoring go through the REST endpoints — see REST Endpoints.