Automatic composition when subgraphs publish, layered schema checks before production, and a single source of truth for SDL. Contracts, feature flags, and a simple path from monograph to federation when you are ready.
Federation v1 and v2, declarative auth, and CI-native checks. Integrated with Studio and the Cosmo Router.
Federated GraphQL only stays healthy if composition, validation, and visibility keep pace with how fast subgraphs change. Cosmo merges subgraph schemas when you publish, records every composition outcome, and blocks changes that would break peers or active operations, before a new router config ships.
Subgraph lifecycle operations (create, publish, check, update, and delete) live in the same CLI and Studio workflows as those checks, so teams are not juggling ad-hoc scripts, mystery schema files, or unclear graph membership rules.
Distributed schemas, multiple subgraph owners, and production clients amplify small mistakes. Generic repos and one-off scripts do not give you composition history, traffic-aware checks, or a single registry the whole org trusts.
Teams scaling federated GraphQL tend to hit the same walls.
Conflicts, missing references, and directive mismatches are painful when you only find them after deploy, or when a peer subgraph changes underneath you.
Static review misses what real clients still query. Without operation-aware checks, removals and type changes surprise apps that were “fine” in staging.
Schemas scattered across repositories go stale the moment someone copies a file. Codegen, docs, and support all drift from what routers actually serve.
Duplicating graphs for public, partner, and internal consumers multiplies maintenance. Tag-based contracts and runtime feature subgraphs need first-class support.
Cosmo ties composition, checks, registry, and delivery workflows into one platform, with a router-ready artifact path you can self-host.
Complete compatibility with both Apollo Federation v1 and v2 so you can unify microservices into one API, run mixed-version subgraphs, and migrate gradually. Built on a mature GraphQL engine implemented in Go.
Free / Pro / Enterprise
Full directive support for entity relationships, field sharing, visibility, and declarative authorization. No workarounds or custom middleware for patterns the spec already covers.
Free / Pro / Enterprise
| If you need to… | Start here |
|---|---|
| Running Federation v1 and v2 subgraphs together | GraphQL Federation v1 & v2 |
| Declaring @shareable, @authenticated, and related patterns | Federation Directives |
| Registering and publishing subgraphs from CI or the terminal | Subgraph Management |
| Understanding why a composition failed after a publish | Schema Composition |
| Blocking breaking changes before they hit production routers | Schema Checks |
| Downloading the current supergraph or a subgraph SDL | Schema Registry |
| Serve different audiences different slices of the same graph | Schema Contracts |
| Canary or segment-based schema rollout with instant rollback | Feature Flags & Progressive Delivery |
| Enforce company-specific lint checks or compliance gates on every check | Subgraph Check Extensions |
| Start with one GraphQL service and migrate to federation later | Monograph Support |
Rows summarize positioning called out across capability briefs (self-hosting, composition automation, history, checks, and subgraph membership). Not an exhaustive vendor matrix.
| Cosmo | Apollo Studio | DIY / scripts | Partial tooling | |
|---|---|---|---|---|
| Self-hosted Cosmo stack | Yes | No | Yes | Varies |
| Automatic composition on publish | Yes | Yes | Manual | Partial |
| Composition history & diffs | Full | Limited | None | Uncommon |
| Traffic-aware operation checks (same flow) | Yes | Yes | No | Rare |
| Label-based subgraph-to-graph matching | Yes | No (variants) | Custom | Custom |
Scenarios drawn from Cosmo capability briefs: migration, CI safety, multi-audience schemas, and progressive delivery.
A company has many subgraphs on Federation v1 and wants v2 capabilities for new services without freezing the whole graph.
Teams keep v1 subgraphs unchanged while new services use v2 directives. Cosmo composes both into one graph and handles compatibility and query planning across versions.
New capabilities ship on new services; legacy subgraphs move when they are ready, without a forced big-bang migration.
A developer removes a deprecated field and needs to know whether any real clients still request it.
CI runs subgraph check: composition against peers, breaking-change detection, and operation checks over recent client traffic. Failing checks show which operations would break.
Safe merges when traffic confirms the change is clear; risky changes get flagged for review instead of surprising production.
The same federated graph serves internal apps and external partners, but sensitive fields must never appear on the public surface.
Sensitive areas carry @tag metadata. A public contract excludes those tags and gets its own router deployment that stays synchronized when the source graph evolves.
One graph to maintain, multiple tailored APIs. No duplicated schemas, no manual drift between the public and full SDL.
A team is splitting a monolithic GraphQL API into subgraphs and needs to validate behavior against real traffic before switching everyone over.
Feature subgraphs and shadow mode compare new implementations to the base graph; activation by claims or headers controls who sees the new composition.
Measured migration with rollback by toggling flags, without coordinating emergency redeploys across every client.
Federation versions, schema checks, contracts versus feature flags, monographs, custom check extensions, and directive behavior.
Yes. Cosmo supports both Federation v1 and v2 protocols out of the box. Teams can run mixed environments, migrate gradually from v1 to v2, or start fresh with v2 features. The router handles directive compatibility and query planning across both versions, so you are not forced to pick one version for the whole organization. See GraphQL Federation v1 & v2 for protocol support and migration paths.
Product
Resources
Related Projects
Certified & Compliant
SOC 2 Type II
HIPAA
ISO 27001© 2026 WunderGraph, Inc. All rights reserved.
