security-configuration.md

group	title
graphql	GraphQL security configuration

The Framework app/etc/di.xml file uses the maxPageSize argument to restrict the maximum page size in queries to 300. To override this default value, create a custom module and provide a new value in the module's di.xml file.

The following example changes the limit to 100:

<type name="Magento\Framework\GraphQl\Query\Resolver\Argument\Validator\SearchCriteriaValidator">
    <arguments>
        <argument name="maxPageSize" xsi:type="number">100</argument>
    </arguments>
</type>

API security describes additional arguments that are applicable to web APIs in general.