POST https://vendordesk.marello.com/api/graphql

Response
200 OK
IP
141.138.147.155
Profiled on
Token
e7b7eb

EntrypointAction

Request

GET Parameters

None

POST Parameters

None

Uploaded Files

None

Request Attributes

Key Value
_controller 
"api_platform.graphql.action.entrypoint"
_firewall_context 
"security.firewall.map.context.api"
_graphql 
true
_route 
"api_graphql_entrypoint"
_route_params 
[
  "_graphql" => true
]
_stopwatch_token 
"9450d0"

Request Headers

Header Value
accept 
"*/*"
accept-encoding 
"br, gzip, deflate"
accept-language 
"*"
authorization 
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ2ZW5kb3JkZXNrLXBvcnRhbCIsImlhdCI6MTc5MTQ1MTI2Ny40ODUxNjksImV4cCI6MTc5MTQ1NDg2Ny40ODUxNjksInN1YiI6IjEwIiwib3JnIjoiMSIsImNobiI6IjciLCJyb2xlcyI6WyJST0xFX0NVU1RPTUVSX1VTRVIiXSwidHlwIjoiY3VzdG9tZXIifQ.KcHd2DkpiIdro4w9uLQ8UQKWZQaxvgUJ1JLYPVOrZjk"
connection 
"keep-alive"
content-length 
"134"
content-type 
"application/json"
host 
"vendordesk.marello.com"
sec-fetch-mode 
"cors"
user-agent 
"node"
x-marello-portal-signature 
"vendordesk-portal.marello.com"
x-php-ob-level 
"1"

Request Content

Pretty

{
    "query": "query CheckShoppingList($id: ID!) { portalItemShoppingList(id: $id) { id } }",
    "variables": {
        "id": "\/api\/shopping_lists\/9729"
    }
}

Raw

{"query":"query CheckShoppingList($id: ID!) { portalItemShoppingList(id: $id) { id } }","variables":{"id":"/api/shopping_lists/9729"}}

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"application/json"
date 
"Thu, 08 Oct 2026 10:08:34 GMT"
permissions-policy 
"camera=(), microphone=(), geolocation=()"
referrer-policy 
"strict-origin-when-cross-origin"
x-content-type-options 
"nosniff"
x-debug-token 
"e7b7eb"
x-frame-options 
"SAMEORIGIN"
x-xss-protection 
"1; mode=block"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
AI_CLOUD_ENABLED 
"false"
ALERT_EMAIL_TO 
"falco@marello.com"
ANTHROPIC_API_KEY 
"your-api-key-here"
ANTHROPIC_MODEL 
"claude-sonnet-4-6"
APP_BASE_DOMAIN 
"vendordesk-dev.marello.com"
APP_CANONICAL_SCHEME 
"http"
APP_ENCRYPTION_KEY 
"B5osHya/ixRGVWp+0yy4pCAqUSOR7E22427AS7JjJ6Y="
APP_ENV 
"dev"
APP_GOTENBERG_URL 
"https://pdf-renderer.marello.com"
APP_JWT_SECRET 
"cREzp2kzUVcKz37TMtXxJCpqwMCZuJ2ew6yNRl5hhPo="
APP_PLATFORM_DOMAIN 
"vendordesk-dev.marello.com"
APP_SECRET 
"3c1191e47e1dcdb796941dcd4e3f0444"
APP_SHARE_DIR 
"var/share"
APP_URL 
"http://localhost:8000"
BRANDFETCH_API_KEY 
""
CORS_ALLOW_ORIGIN 
"^https?://([a-z0-9-]+\.)?localhost(:[0-9]+)?$"
DATABASE_URL 
"postgresql://vdeskbackoffice_db:wiJwcWdS9MUUpOQ3@127.0.0.1:5432/vdeskbackoffice_db?serverVersion=16&charset=utf8"
DB_NAME 
"app"
DB_PASSWORD 
"!ChangeMe!"
DB_USER 
"app"
DEFAULT_URI 
"https://vendordesk-dev.marello.com"
ELASTICSEARCH_INDEX 
"products"
ELASTICSEARCH_URL 
"http://localhost:9200"
LINKEDIN_CLIENT_ID 
""
LINKEDIN_CLIENT_SECRET 
""
LOCK_DSN 
"postgresql://vdeskbackoffice_db:wiJwcWdS9MUUpOQ3@127.0.0.1:5432/vdeskbackoffice_db?serverVersion=16&charset=utf8"
MAILER_DSN 
"native://default"
MAILER_FROM 
"noreply@localhost"
MESSENGER_TRANSPORT_DSN 
"doctrine://default?auto_setup=0"
OLLAMA_CHAT_MODEL 
"llama3.2"
OLLAMA_EMBED_MODEL 
"nomic-embed-text"
OLLAMA_URL 
"http://127.0.0.1:11434"
PORTAL_DNS_SKIP 
"false"
TAILWIND_CLI_VERSION 
"4.1.11"
TURNSTILE_SECRET_KEY 
""
TURNSTILE_SITE_KEY 
""

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_PROJECT_DIR 
"/var/www/vdeskbackoffice/application/releases/546"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/var/www/vdeskbackoffice/application/releases/546"
]
CONTENT_LENGTH 
"134"
CONTENT_TYPE 
"application/json"
DOCUMENT_ROOT 
"/var/www/vdeskbackoffice/public_html"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www/vdeskbackoffice"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_ACCEPT_ENCODING 
"br, gzip, deflate"
HTTP_ACCEPT_LANGUAGE 
"*"
HTTP_AUTHORIZATION 
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ2ZW5kb3JkZXNrLXBvcnRhbCIsImlhdCI6MTc5MTQ1MTI2Ny40ODUxNjksImV4cCI6MTc5MTQ1NDg2Ny40ODUxNjksInN1YiI6IjEwIiwib3JnIjoiMSIsImNobiI6IjciLCJyb2xlcyI6WyJST0xFX0NVU1RPTUVSX1VTRVIiXSwidHlwIjoiY3VzdG9tZXIifQ.KcHd2DkpiIdro4w9uLQ8UQKWZQaxvgUJ1JLYPVOrZjk"
HTTP_CONNECTION 
"keep-alive"
HTTP_CONTENT_LENGTH 
"134"
HTTP_CONTENT_TYPE 
"application/json"
HTTP_HOST 
"vendordesk.marello.com"
HTTP_SEC_FETCH_MODE 
"cors"
HTTP_USER_AGENT 
"node"
HTTP_X_MARELLO_PORTAL_SIGNATURE 
"vendordesk-portal.marello.com"
PHP_SELF 
"/index.php"
QUERY_STRING 
""
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"141.138.147.155"
REMOTE_PORT 
"64064"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1791454113
REQUEST_TIME_FLOAT 
1791454113.966
REQUEST_URI 
"/api/graphql"
SCRIPT_FILENAME 
"/var/www/vdeskbackoffice/public_html/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"5.22.211.244"
SERVER_NAME 
"vendordesk-dev.marello.com"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"nginx/1.22.1"
SYMFONY_DOTENV_PATH 
"/var/www/vdeskbackoffice/application/releases/546/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,APP_SHARE_DIR,APP_ENCRYPTION_KEY,APP_BASE_DOMAIN,APP_URL,APP_PLATFORM_DOMAIN,DEFAULT_URI,DATABASE_URL,MESSENGER_TRANSPORT_DSN,MAILER_DSN,MAILER_FROM,OLLAMA_URL,OLLAMA_CHAT_MODEL,OLLAMA_EMBED_MODEL,ANTHROPIC_API_KEY,ANTHROPIC_MODEL,APP_GOTENBERG_URL,BRANDFETCH_API_KEY,AI_CLOUD_ENABLED,LINKEDIN_CLIENT_ID,LINKEDIN_CLIENT_SECRET,ELASTICSEARCH_URL,ELASTICSEARCH_INDEX,ALERT_EMAIL_TO,CORS_ALLOW_ORIGIN,TURNSTILE_SITE_KEY,TURNSTILE_SECRET_KEY,DB_PASSWORD,DB_USER,DB_NAME,PORTAL_DNS_SKIP,APP_JWT_SECRET,APP_CANONICAL_SCHEME,TAILWIND_CLI_VERSION,LOCK_DSN"
USER 
"vdeskbackoffice"