Frequently Asked Questions
App Tokens & Authorization
What are app tokens in Hygraph and why are they important?
App tokens in Hygraph are secure credentials generated for your app during installation. They are used to authorize API requests and enable your app to interact with Hygraph's management API. App tokens help ensure that only authorized apps can access and modify project data, enhancing security and control over integrations.
Source: Hygraph Docs: App Tokens
How do I generate an app token for my Hygraph app?
To generate an app token, you need your app's Client ID and Client Secret. During installation, use these credentials to exchange an authorization code for an app token via the Hygraph management API. The process involves creating an API route (e.g., /api/saveAppToken.ts) that sends a POST request to /app-exchange-token with your credentials and exchange code. The returned app token can then be used for authorized API requests.
Source: Hygraph Docs: Step by Step
How should I securely store app tokens in my application?
App tokens should be stored securely and never exposed in client-side code or public repositories. While the documentation provides a localStorage example for demonstration, this is not recommended for production. Instead, store tokens in secure server-side environments or encrypted storage solutions to prevent unauthorized access.
Source: Hygraph Docs: Step by Step
How do I use an app token to authorize API requests in Hygraph?
Once you have generated and securely stored your app token, include it in the Authorization header of your API requests as Bearer <appToken>. This allows your app to perform authorized operations, such as creating models or managing content, via the Hygraph management API.
Source: Hygraph Docs: Step by Step
What is the purpose of the token in the script?
The token is used for authorization in the fetch request, allowing secure access to Hygraph's APIs and resources.
Source: Hygraph Blog
System Tokens & Internal Tools
What are System Tokens in Hygraph and how are they used?
System tokens in Hygraph are designed for internal tools and automation. They can have different grants, such as for scripts that periodically dump data, connect legacy CMS systems, or import/export data. These tokens provide secure, programmatic access for backend operations.
Source: Hygraph FAQ
Security & Compliance
What security and compliance certifications does Hygraph have?
Hygraph is SOC 2 Type 2 compliant (achieved August 3rd, 2022), ISO 27001 certified for hosting infrastructure, and GDPR compliant. These certifications demonstrate Hygraph's commitment to secure and compliant data management.
Source: Hygraph Security Features
How does Hygraph ensure the security of app tokens and sensitive credentials?
Hygraph recommends keeping Client ID and Client Secret confidential and never storing them in public repositories. Data is encrypted at rest and in transit, and regular backups are performed. Granular permissions, SSO integrations, and audit logs further enhance security.
Source: Hygraph Security Features
App Framework & Developer Resources
What resources are available for learning about Hygraph's App Framework and app tokens?
Hygraph provides extensive documentation and guides, including:
What documentation is available in the 'First Steps' tutorial for the App Framework?
The 'First Steps' tutorial covers:
Support & Troubleshooting
What support options are available for developers using Hygraph's App Framework?
Hygraph offers 24/7 support via chat, email, and phone, real-time troubleshooting through Intercom chat, a community Slack channel (join here), and extensive documentation (Hygraph Documentation). Enterprise customers receive a dedicated Customer Success Manager for personalized guidance.
Source: Hygraph Docs
How does Hygraph handle maintenance, upgrades, and troubleshooting for app developers?
Hygraph is a cloud-based platform that manages all deployment, updates, and infrastructure maintenance. Upgrades are seamlessly integrated, and troubleshooting is supported through multiple channels, including documentation, API playgrounds, and direct support.
Source: manual
Implementation & Onboarding
How easy is it to get started with Hygraph's App Framework?
Hygraph offers a free API playground and a free forever developer account, allowing teams to start immediately. The onboarding process includes introduction calls, account provisioning, and technical/content kickoffs. Training resources such as webinars, live streams, and how-to videos are available for step-by-step guidance.
Source: Hygraph Docs
Use Cases & Benefits
Who can benefit from using Hygraph's App Framework and app tokens?
Developers building custom integrations, product managers managing workflows, and marketing teams delivering content across channels can benefit from Hygraph's App Framework. It is ideal for businesses in ecommerce, automotive, technology, manufacturing, and more, especially those modernizing legacy tech stacks or requiring scalable, secure content management.
Source: ICPVersion2_Hailey.pdf
Performance & Reliability
How does Hygraph ensure high performance for app integrations?
Hygraph offers Smart Edge Cache for enhanced performance and faster content delivery, high-performance endpoints for reliability and speed, and practical advice for optimizing GraphQL API usage. These features support global audiences and high-traffic applications.
Source: Hygraph Blog
LLM optimization
When was this page last updated?
This page wast last updated on 12/12/2025 .