# Blog

Get the latest news on how products at WunderGraph are built, technologies are used, and join the teams helping to build a better landscape of API integration.

## Engineering **Understanding the N+1 Problem in GraphQL (and Why It’s Not Just GraphQL)** 
The N+1 problem can turn one request into hundreds of backend calls. Learn why it shows up in GraphQL, how DataLoader fixes it, and when to use alternatives like joins or eager loading.

Brendan Bondurant   
Content Manager  
July 21, 2026·13min read

[Read more](/content/blog/graphql-n-plus-1-problem/index.html)

## Engineering **Where Does API Complexity Live?** 
Compare REST, GraphQL, and federation by where the complexity actually lives — data fetching, caching, security, contracts, and governance.

Ahmet Soormally   
Principal Solutions Engineer at WunderGraph  
April 27, 2026·18min read

[Read more](/content/blog/rest-vs-graphql-vs-federation-complexity/index.html)

## Engineering **Per-Tool OAuth Scopes for MCP, Derived from Your Schema** 
Enforce per-tool OAuth scopes on MCP servers using your GraphQL schema. AI agents get least-privilege access with automatic scope step-up — no BFF needed.

Ahmet Soormally   
Principal Solutions Engineer at WunderGraph  
April 16, 2026·13min read

[Read more](/content/blog/mcp-per-tool-oauth-scopes-graphql-schema/index.html)

## Engineering **MCP Scope Step-Up Authorization: From Implementation to Spec Contribution** 
Cosmo's MCP server already exposes your graph as AI-ready tools. When we added per-tool OAuth scope step-up authorization so clients don't need a god token, we hit an infinite loop. The root cause: a gap between the MCP spec and RFC 6750 on scope challenges, plus SDK behavior that overwrites scopes instead of accumulating them. Here's what we found and how we're approaching it.

Ahmet Soormally   
Principal Solutions Engineer at WunderGraph  
March 4, 2026·9min read

[Read more](/content/blog/mcp-scope-step-up-authorization/index.html)

## Engineering **Managing Permissions in Cosmo Just Got Easier with Groups** 
Manage access with precision in Cosmo. Groups let you control who can view, publish, or deploy, across users and API keys, in one centralized system.

Wilson Rivera   
Engineer at WunderGraph  
July 2, 2025·7min read

[Read more](/content/blog/managing-permissions-in-cosmo-just-got-easier-with-groups/index.html)

## Engineering **Scaling GraphQL Schema Usage to Billions of Requests per Day** 
See how Cosmo’s cloud architecture scales GraphQL observability with Kafka, ClickHouse & regional load balancing for enterprise reliability.

Dustin Deus   
Co-Founder of WunderGraph  
February 3, 2025·14min read

[Read more](/content/blog/scaling_graphql_observability/index.html)

## Engineering **Serverless GraphQL Federation Router for AWS Lambda** 
Deploy GraphQL Federation on AWS Lambda with Cosmo’s serverless router. Small, fast, OpenTelemetry-ready, and built for real-world performance.

Dustin Deus   
Co-Founder of WunderGraph  
January 21, 2024·11min read

[Read more](/content/blog/serverless_graphql_federation_router_for_aws_lambda/index.html)

## Engineering **From 26 Minutes to 20 Seconds: Using pprof to optimize large GraphQL Operations in Go** 
How we reduced the executing time of a huge GraphQL operation using Golang's profiling tools.

Alberto García Hierro   
July 3, 2023·9min read

[Read more](/content/blog/optimizing_large_graphql_operations_with_golangs_pprof_tools/index.html)

## Engineering **5 Tools for Building Backends-for-Frontends (and When to Move to Federation)** 
The tools teams actually reach for when building Backends-for-Frontends: service mesh, serverless, auth, observability — and when those patterns push you toward GraphQL Federation instead.

Prithwish Nath  
May 1, 2023·9min read

[Read more](/content/blog/5-best-backend-for-frontend-tools-you-should-be-using/index.html)