graphql-engine/docs/graphql/cloud/allow-lists.rst

.. meta::
   :description: Hasura Cloud allow lists
   :keywords: hasura, docs, cloud, security, allow

.. _allow_lists:

Allow lists
===========

.. contents:: Table of contents
  :backlinks: none
  :depth: 1
  :local:

Introduction
------------

You can specify a list of safe operations (GraphQL queries, mutations or subscriptions) for your project. This list restricts your project's GraphQL Engine to execute only queries that are present in the list.

Manage the allow list
---------------------

The manager view offers inspection, export, or removal of operations in the allow list:

.. thumbnail:: /img/graphql/cloud/security/pro-tabs-allowlist.png
   :alt: Hasura Cloud Console allow list tab

Quick-create allowed operations
-------------------------------

This Pro feature lets you add to the allow list with one click from the record of past operations. (With Core, allow lists must be :ref:`managed manually <allow_list>`.)

.. thumbnail:: /img/graphql/cloud/security/allowlist-add-new-op.png
   :alt: Hasura Cloud Console create new allowed operation