Graphql Mesh

GraphQL gateway and API unification layer that converts REST, gRPC, OpenAPI, SOAP, and existing GraphQL APIs into a single unified GraphQL schema. Configure handlers per source in mesh.config.yaml; apply transforms (rename types, filter fields, wrap resolvers) without touching upstream APIs. Custom JavaScript/TypeScript resolvers for cross-source stitching. Federation subgraph support. Confidence is docs-derived.

mesh.config.yaml declarative config: sources (handler: openapi/grpc/graphql/soap), transforms (rename, filterSchema, prefix, encapsulate), and additionalResolvers for custom JS; CLI: mesh build for schema artifact generation, mesh serve for standalone gateway; programmatic API: getMesh() for embedding in Node.js; supports Yoga Server, Envelop plugins, and persisted operations; schema artifacts enable type-safe SDK generation.

No built-in auth layer — auth is delegated to Envelop plugins (JWT, API key, OAuth) or upstream handler headers; source credentials (API keys, tokens) injected via environment variables in mesh.config.yaml using {env.VAR_NAME} syntax; never hardcoded in config; operationHeaders per source for static or dynamic header injection; rate limiting via Envelop Rate Limiter plugin.

Build step compiles merged schema and resolver artifacts for production deployment — avoids runtime schema stitching overhead; schema merging errors surface at build time, not request time; transforms are applied statically where possible; N+1 resolution handled via DataLoader integration for batch source queries; error responses from upstream handlers are mapped to GraphQL errors with extensions; introspection can be disabled in production config.

Documentation covers handler setup per protocol (OpenAPI, gRPC, GraphQL, SOAP), transform reference, custom resolver guide, Federation subgraph config, and Envelop plugin integration. Part of The Guild's GraphQL tooling ecosystem. Active community with regular releases. Confidence is docs-derived.