# GraphQL Endpoint Introspection Check

> GraphQL Endpoint Introspection Check is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Probes a URL to detect whether it is a GraphQL endpoint, whether introspection is enabled, and returns schema metadata including root type names, type count, and first 40 query fields.

## Facts

- Endpoint: GET https://intel.rallylive.ca/dev/graphql-introspect-hint
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/graphql-endpoint-introspection-check-8a1dbfd9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_T2IUZoxCIFkNj3BC89qrM

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability graphql-endpoint-introspection-check-8a1dbfd9
```

Example prompt: Can you check whether https://api.example.com/graphql is actually a GraphQL endpoint, and if so, tell me whether introspection is enabled, what the root query type is called, and what the first 40 query fields are?

## When to prefer this

Use this endpoint when you need to quickly determine if an unknown URL is a GraphQL API, audit a known GraphQL server for security misconfigurations (introspection left on), or gather basic schema shape information before building an integration. It is especially useful for API security reviews and automated discovery pipelines. Prefer this over manual curl-based introspection when you want a structured, single-call result with security framing at low cost ($0.01 per call).

## Known failure modes

- URL is not reachable or times out — endpoint reports it is not a GraphQL server
- URL returns non-GraphQL responses (e.g. REST or HTML) — reported as not a GraphQL endpoint
- Introspection is disabled — returns endpoint is GraphQL but introspection unavailable, so schema details cannot be extracted
- Server requires authentication — introspection query rejected with 401/403
- Malformed or ambiguous URL input — query fails or returns an error

## How this service works

GraphQL endpoint check: sends a minimal introspection query and reports whether the URL is a GraphQL endpoint, whether introspection is enabled (a security signal), the query/mutation/subscription root type names, number of types, the first 40 query fields, and whether GET requests are accepted. $0.01 per endpoint.

## Output

Returns whether the URL is a GraphQL endpoint, whether introspection is enabled (a security signal), the names of the query/mutation/subscription root types, the total number of schema types, the first 40 query field names, and whether the endpoint accepts HTTP GET requests.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/graphql-endpoint-introspection-check-8a1dbfd9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)