WunderGraph Cosmo is an open-source platform for GraphQL federation that combines REST and GraphQL services into one unified API gateway. Platform teams define federated graphs from subgraphs, run the Go-based router on their own infrastructure, and manage schemas and access through a self-hosted control plane or the managed Cosmo Cloud. It suits organizations that want federation without handing their gateway to a proprietary control plane.[1][2]
Quick verdict
WunderGraph Cosmo is a credible open-source route to GraphQL federation for teams that must self-host their API layer. Composition, gateway auth, and schema governance are genuinely in the box, while control-plane collaboration and GraphQL-first scope set the adoption boundary.[1][2][3]
Capabilities
Cosmo composes REST and GraphQL services, and databases, into one unified API, so teams expose a single gateway endpoint instead of many service endpoints.[1][2]
The router is written in Go, runs the federated graph, and deploys self-hosted through the all-in-one Docker Compose quickstart or the documented Helm charts.[1]
Subgraphs can be written in any language, with schema checks and contracts guarding the federated graph against breaking changes.[1]
Authentication and authorization run at the gateway: the platform supports any compliant OIDC provider and enforces RBAC from JWT claims.[1]
Field-level instrumentation integrates with OpenTelemetry tooling, and real-time GraphQL subscriptions run over NATS.[1]
Good fit
Platform teams that run many REST and GraphQL services and want one governed entrypoint fit best, since composition, schema checks, and gateway auth are the core workflow.[1][2]
Regulated companies that must keep the API layer on their own infrastructure fit well: the stack is fully open source, self-hosting is free, and the vendor reports approval by leading regulated companies.[1][2]
Limitations
A self-hosted control plane cannot invite members or share a project with others; teams that need that collaboration must use Cosmo Cloud.[1]
The model centers on GraphQL federation, so teams that want a pure REST-transformation gateway without GraphQL semantics should weigh that scope before adopting.[1][2]
Evaluation is quick through Docker Compose, but production federation across subgraphs with checks and Kubernetes operations takes real platform effort.[1][2]
Compatibility
The gateway works with any compliant OIDC identity provider, so teams keep their existing login rather than adopting a vendor directory.[1]
Subgraphs can be written in any language, so existing services join the federated graph without rewrites.[1]
Deployment is portable: the stack runs on any infrastructure including the team's own cloud, via Docker Compose or Kubernetes, or as the managed Cosmo Cloud.[1][2]
Questions worth asking
Is WunderGraph really open source?
Can you self-host WunderGraph?
Does WunderGraph work with REST APIs?
Sources and editorial review
Source research. Reviewed on October 13, 2026. Written by Sanjib Sah. AI assisted; reviewed by a human editor.
We have not run or tested this product.
- WunderGraph homepage
official · Observed October 13, 2026
Vendor homepage stating the product positioning, self-hosting, cloud trial, AI-agent serving, and Apache-2.0 licensing of all components.
- wundergraph/cosmo repository
official · Observed October 13, 2026
Vendor monorepo evidencing the Apache-2.0 license, Go router, subgraph composition, Docker Compose quickstart, Helm charts, and repository activity signals.
- WunderGraph as Hasura Cloud alternative
official · Observed October 13, 2026
Vendor comparison page evidencing unified gateway composition, self-host versus managed control plane, deploy-anywhere, OIDC/RBAC auth, pricing shape, and SOC 2 audit.
- WunderGraph as Apollo GraphOS alternative
official · Observed October 13, 2026
Vendor comparison page evidencing any-language subgraphs, schema checks and contracts, OpenTelemetry instrumentation, NATS subscriptions, and regulated-industry approval.
- Cosmo self-hosting docs
official · Observed October 13, 2026
Vendor docs evidencing the self-hosted control-plane option and its collaboration restrictions.
- KrakenD features
official · Observed October 13, 2026
Published incumbent source evidencing the substitutable self-hosted API-composition gateway workflow for the competitor edge.
Compared with these products
No explicit proprietary baseline is recorded.