GraphQL Query Builder

A lightweight Python utility for generating GraphQL queries, mutations, schema-derived wordlists, and GraphQL enumeration helpers from GraphQL introspection schemas.

This project is designed to complement Clarence, a GraphQL schema recovery tool. Once a schema has been recovered, GraphQL Query Builder automates the generation of reusable artifacts that assist with manual GraphQL security testing.

---

Workflow

GraphQL Endpoint
        │
        ▼
    Clarence
(Schema Recovery)
        │
        ▼
Introspection JSON
        │
        ▼
GraphQL Query Builder
        ├── Query Templates
        ├── Mutation Templates
        ├── Wordlists
        ├── Path Enumeration
        └── Field Discovery
        │
        ▼
Manual Security Testing

---

Features

• Generate GraphQL query templates
• Generate GraphQL mutation templates
• Generate schema-derived wordlists
• Generate graphql-path-enum helper commands
• Discover sensitive object types
• Enumerate object fields
• Generate nested GraphQL queries
• Classify GraphQL schema types

---

Installation

git clone https://github.com/soham23/graphql-query-builder.git
cd graphql-query-builder

---

Documentation

Detailed documentation is available in the docs/ directory.

• docs/workflow.md
• docs/usage.md

---

Related Project

This tool is intended to be used alongside Clarence, which recovers GraphQL schemas when introspection is unavailable.

---

License

MIT License.