generated: '2026-07-18'
method: searched
source: https://developer.codesignal.com/graphql , https://developer.codesignal.com/webhooks
api_style: graphql
authentication:
  style: bearer-api-key
  header: Authorization
  format: Bearer YOUR_API_KEY
  ref: authentication/codesignal-inc-authentication.yml
endpoints:
  graphql: https://app.codesignal.com/graphql
  playground: https://app.codesignal.com/graphiql
rate_limiting:
  style: per-operation
  common_values:
  - 10 requests/second
  - 5 requests/second
  query_cost_max: 10000
  query_depth_max: 10
  notes: >-
    Rate limits vary per GraphQL operation; queries are additionally bounded by
    a maximum cost of 10,000 and a maximum nesting depth of 10.
idempotency:
  supported: false
  notes: No idempotency-key contract is documented.
pagination:
  style: graphql-connection
  notes: >-
    Follows standard GraphQL conventions; specific connection/cursor fields are
    defined per query in the schema.
error_envelope:
  format: graphql-errors
  notes: >-
    Standard GraphQL response shape (top-level data plus errors); insufficient
    API-key permissions surface as "Access Denied" errors.
webhook_signing:
  header: X-CodeSignal-Signature
  algorithm: HMAC-SHA256
  signed_material: endpoint URL + event type + timestamp
  ref: asyncapi/codesignal-inc-webhooks.yml
versioning:
  ref: lifecycle/codesignal-inc-lifecycle.yml