Examples of automating tasks and integrating external tools with Ghostwriter via the GraphQL API

Starting in v3.0.0, Ghostwriter includes a GraphQL API powered by the Hasura GraphQL Engine. You can use the API to perform all the same tasks available via the web interface.

The Hasura Console (see Using the Hasura Console) is the easiest option for browsing the GraphQL schema. It’s built into Ghostwriter, offers to autocomplete queries and mutations, and makes …

Furthermore, you can leverage Ghostwriter’s GraphQL API to integrate custom project management, reporting workflows, and external tools into the platform. This site will always have the most up-to …

The Hasura GraphQL Engine offers a web console where you can explore the API. It includes a useful code exporter that can help you develop GraphQL queries and export them as JavaScript or …

To get the correct ID values for activity, role, and provider, you can map those in your script or pull them at run-time using a GraphQL query. The easiest option is mapping the values, which are unlikely to …

The JWT secret key is defined in the environment variables, GRAPHQL_JWT_SECRET_KEY. If you plug a Ghostwriter JWT into a debugger like the one at https://jwt.io/, you will see something similar …

Database Models API Models The API application contains everything needed for the GraphQL API.

Pass BloodHound data to Ghostwriter for inclusion in your reports

In Ghostwriter <= v3.x, the role-based access controls described on this page apply only to the GraphQL API. In those older versions, user privileges are equivalent to every account having the manager role.