Skip to content


Repository files navigation


CircleCI codecov npm version Backers on Open CollectiveSponsors on Open Collective

GraphQL Server permissions as another layer of abstraction!


GraphQL Shield helps you create a permission layer for your application. Using an intuitive rule-API, you'll gain the power of the shield engine on every request and reduce the load time of every request with smart caching. This way you can make sure your application will remain quick, and no internal data will be exposed.


  • ✂️ Flexible: Based on GraphQL Middleware.
  • 🤝 Compatible: Works with all GraphQL Servers.
  • 🚀 Smart: Intelligent V8 Shield engine caches all your requests to prevent any unnecessary load.
  • 🎯 Per-Type or Per-Field: Write permissions for your schema, types or specific fields (check the example below).


You can find extensive documentation at


This project exists thanks to all the people who contribute. [Contribute].


Thank you to all our backers! 🙏 [Become a backer]


Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]


We are always looking for people to help us grow graphql-shield! If you have an issue, feature request, or pull request, let us know! For information about development setup and more, see


MIT @ Matic Zavadlal