Using the GraphQL playground

The GraphQL playground is an interactive query console for the RollerUp API. It runs in your browser at /playground and is gated by your organization sign-in — you'll need a RollerUp account through your company to open it.

What you can do

• Run live queries and mutations against your own organization's data with a single click.
• Browse every type, field, and argument in the Documentation Explorer.
• Get autocomplete, inline validation, and formatted responses while you type.
• Iterate on a query in the playground before pasting it into your own app or backend.

Sign in

1. Open /playground (or use the Playground link in the top navigation). If you're not signed in, you'll be redirected to the sign-in screen.
2. Enter your company slug — the same identifier you use to sign in to RollerUp (for example, acme). Lowercase letters, numbers, and dashes only.
3. Click Sign in to continue. You'll be sent to your organization's identity provider to authenticate.
4. After a successful sign-in you're returned to the playground with the editor loaded and ready to query.

If sign-in isn't configured on a particular deployment, the page will tell you so instead of starting the redirect.

Run your first query

Paste this into the editor and click the run button:

query Me {
  viewer {
    id
    name
    email
    company {
      name
    }
  }
}

You'll get back the user record for whoever signed in. From there:

• Click any field name in the Documentation Explorer (right side) to drill into the schema.
• Use the Variables panel below the editor to parameterize queries.
• Open new tabs to keep multiple queries side-by-side while you experiment.

Token and session security

Your access token is held in an encrypted, HTTP-only session cookie on the server. A few specifics worth knowing:

• The token is never readable from JavaScript in the browser — there is no localStorage, no in-page token, no exposure to browser extensions or other tabs.
• The playground attaches the token to your queries on the server side. Your browser only sends the session cookie; the token itself never leaves the server.
• Signing out clears the session immediately — both the cookie and the stored tokens.
• Sessions expire when your refresh token does. After expiry, sign in again to get a fresh session.

On a shared device, click Sign out before walking away.

Troubleshooting

• Stuck on the sign-in screen — double-check your company slug (lowercase letters, numbers, dashes). If you've signed in from this browser before, your last slug is remembered for next time.
• "Error fetching schema" — usually means your session has expired. Sign out and sign in again.
• errors: [{ "extensions": { "code": "FORBIDDEN" } }] — your account doesn't have permission for that resource. Talk to your admin.
• Want to call the API from your own code? See the GraphQL API guide.

Need help?

Reach out to your RollerUp contact for sign-in problems or questions about the schema.