Hasura V2

Hasura auto-generates a production-grade GraphQL API from your database schema, eliminating the need to manually write resolvers. Introspects Postgres (and other DBs) to expose all tables, relationships, and views as GraphQL types — with filtering, sorting, pagination, and aggregations built in. Authorization is declarative: define row-level and column-level permission rules per role, enforced by Hasura at the engine level. For agents: query any database table via GraphQL (no custom API code needed), subscribe to real-time data changes, trigger webhooks on database events, and compose with custom business logic via Actions. Self-hostable via Docker; Hasura Cloud for managed. Confidence is docs-derived.

GraphQL endpoint: POST /v1/graphql with {query, variables} body. Example: query { users(where: {active: {_eq: true}}) { id email created_at } }. Mutations: insert_users, update_users_by_pk, delete_users_by_pk. Subscriptions: real-time via WebSocket. REST endpoints: POST /api/rest/{endpoint} for defined REST routes. Admin API: POST /v1/metadata for schema/permission management. Event triggers: configured via metadata; Hasura POSTs to webhook on INSERT/UPDATE/DELETE. Actions: custom GraphQL mutations backed by your HTTP endpoint. Remote schemas: federate other GraphQL APIs into Hasura schema. Response: GraphQL standard JSON ({data, errors}).

Two auth modes: (1) Admin secret: x-hasura-admin-secret: {secret} header — bypasses all permission rules (server-side only). (2) JWT: Authorization: Bearer {jwt} — Hasura extracts x-hasura-role and x-hasura-user-id claims from JWT to apply permission rules. JWT integration with Auth0, Clerk, Firebase Auth, Supabase Auth, etc. Row-level permissions: defined per role per operation (select/insert/update/delete) with field-level column restrictions. Webhook mode: Hasura calls your auth endpoint to resolve session variables per-request. HTTPS enforced.

Standard HTTP status codes; GraphQL errors in {errors} array (not HTTP error codes). Partial success possible — some fields succeed, others error. Permission violations: error in GraphQL response (not 403). Postgres connection pooling: configurable max pool size in Hasura config. High-concurrency: Hasura is stateless and horizontally scalable. Event trigger delivery: Hasura retries failed webhook calls (configurable retry count + interval). Subscription: WebSocket reconnect handled by Hasura client libraries. Hasura Cloud uptime at status.hasura.io. Self-hosted reliability is infrastructure-dependent.

hasura.io/docs is excellent — quickstart, GraphQL API reference, authorization guide, event trigger tutorial, Actions walkthrough, and deployment guide (Docker, Kubernetes, Hasura Cloud). Getting started: Docker Compose (one command), connect Postgres, first GraphQL query in under 5 minutes. Hasura Console: visual schema explorer, permission editor, and query runner. Community via Hasura Discord (35k+ members) and GitHub (hasura/graphql-engine, 31k+ stars). Official tutorials for integration with common auth providers. Enterprise features (enterprise edition) for SSO, audit logs, and SLA.