Skip to main content
Send GraphQL operations to POST https://api.boxpressd.com/graphql. Every request requires a developer key.

Available queries

Public catalog queries include:
  • node, cigar, and searchCigars
  • brand and brands
  • product, products, and productByBarcode
  • venue and venues
  • event and events
  • user, with public profile fields only unless you query your own scoped profile
Connected-user queries require an OAuth Bearer token and the corresponding scope:
Send both credentials for this operation:

Pagination and limits

Connections use first and opaque after cursors. The default page size is 20; the maximum is 100. The API rejects operations that exceed these limits before resolver execution:
  • Maximum depth: 8
  • Maximum aliases: 20
  • Maximum root fields: 10
  • Default maximum calculated cost: 1,000
Batched GraphQL HTTP operations are disabled. The initial schema has no mutation root. Introspection exposes only the curated public schema.
Mutations that write data on behalf of a connected user are coming soon. Requesting a write-oriented OAuth scope does not make a mutation available today.