GraphQL is a technology that constantly grows in popularity. More and more enterprise-grade companies start investigating and betting on it. In this talk, we will explore why you might consider using GraphQL for building a public API that is there for consumption by customers or third-party users and also when you probably should avoid doing so. Furthermore, we will explore all the new challenges and attack vectors that arise from building a GraphQL API that is open to the public internet, explore the tooling that you can utilize for improving your API consumer’s developer experience, and how to evolve the GraphQL schema over time without breaking existing clients by monitoring the API usage.