If you’ve set up a GraphQL endpoint, protected with a JWT and you want to use GraphiQL for local development, here you go… — Step #1 Enable bodyParser.json() middleware in your Express app. This is required for parsing JSON posted by GraphiQL. const express = require('express') const bodyParser = require('body-parser') const app = express() if (process.env.NODE_ENV !== 'production') { // only used for accessing Graphiql with JWT auth, during development