# Pothos vs WunderGraph

**Leader by vioscaleAI score:** WunderGraph

| Attribute | Pothos | WunderGraph |
|---|---|---|
| **vioscaleAI score** | 58.8 (48% (low)) | 68.4 (69% (medium)) |
| activity.commits_last_30d | 100 | - |
| adoption.dependent_repos | 316 | - |
| adoption.github_stars | 2,623 | - |
| adoption.package_downloads_weekly | 477,926 | - |
| content.faq | `[{"answer":"Pothos is a GraphQL schema builder for TypeScript that emphasizes type-safety and ease of use. It features a plugin ecosystem for extending functionality while maintaining zero-overhead at runtime. It is indexed under GraphQL Tools.","source":"https://pothos-graphql.dev/","question":"What is Pothos?","confidence":0.6},{"answer":"Pothos is open source, so it can be self-hosted and used at no licence cost. It is released under the ISC licence. Pricing changes often, so verify at source before relying on it.","source":"https://pothos-graphql.dev/","question":"Is Pothos free to use?","confidence":0.6},{"answer":"Pothos supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://pothos-graphql.dev/","question":"What platforms does Pothos support?","confidence":0.6},{"answer":"Yes. Pothos can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://pothos-graphql.dev/","question":"Can Pothos be self-hosted?","confidence":0.6},{"answer":"We have confirmed 6 integrations for Pothos, including Prisma, NestJS, Next.js, Apollo, Mercurius and OpenTelemetry. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://pothos-graphql.dev/","question":"What does Pothos integrate with?","confidence":0.6},{"answer":"Yes. Pothos is published under the ISC licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/hayes/pothos","question":"Is Pothos open source?","confidence":0.99}]` | `[{"answer":"WunderGraph Cosmo is a comprehensive, open-source GraphQL API management platform that enables teams to build and operate federated GraphQL architectures. It includes a schema registry, router/gateway, analytics, security controls, and schema governance capabilities—deployable on-premises or as a managed cloud service. It is indexed under GraphQL Tools.","source":"https://wundergraph.com/plans/self-hosted-open-source","question":"What is WunderGraph?","confidence":0.6},{"answer":"WunderGraph offers a free tier, so you can start without paying. Pricing changes often, so verify at source before relying on it.","source":"https://wundergraph.com/plans/self-hosted-open-source","question":"Is WunderGraph free?","confidence":0.6},{"answer":"WunderGraph supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://wundergraph.com/plans/self-hosted-open-source","question":"What platforms does WunderGraph support?","confidence":0.6},{"answer":"Yes. WunderGraph can be deployed cloud / SaaS, hybrid, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://wundergraph.com/plans/self-hosted-open-source","question":"Can WunderGraph be self-hosted?","confidence":0.6},{"answer":"We have confirmed 18 integrations for WunderGraph, including Apollo Federation, Kubernetes, OpenTelemetry, Prometheus, OpenID Connect, PostgreSQL, ClickHouse and S3, plus 10 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://wundergraph.com/plans/self-hosted-open-source","question":"What does WunderGraph integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, ISO 27001 and HIPAA for WunderGraph. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as WunderGraph not holding them. Always confirm compliance directly before you rely on it.","source":"https://wundergraph.com/","question":"What security certifications does WunderGraph have?","confidence":0.48}]` |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | A GraphQL schema builder that leverages TypeScript's type system to minimize manual type annotations, integrating with databases like Prisma and Drizzle through a modular plugin architecture. | WunderGraph Cosmo is a comprehensive, open-source GraphQL API management platform that enables teams to build and operate federated GraphQL architectures. It includes a schema registry, router/gateway, analytics, security controls, and schema governance capabilities—deployable on-premises or as a managed cloud service. |
| features.capabilities | `{"role":"schema_builder","language":"TypeScript","federation":true,"self_hostable":true,"subscriptions":true,"schema_approach":"code_first","type_generation":true,"db_introspection":true}` | `{"role":"gateway","caching":true,"language":"GraphQL","federation":true,"managed_cloud":true,"self_hostable":true,"subscriptions":true,"auth_directives":true,"schema_approach":"schema_first","type_generation":true}` |
| integrations.count | 12 | 11 |
| integrations.list | `[{"name":"Prisma"},{"name":"NestJS"},{"name":"Next.js"},{"name":"Apollo"},{"name":"Mercurius"},{"name":"OpenTelemetry"},{"name":"Drizzle","native":true,"category":"database","direction":"bidirectional"},{"name":"Zod","native":true,"category":"validation","direction":"inbound"},{"name":"Valibot","native":true,"category":"validation","direction":"inbound"},{"name":"ArkType","native":true,"category":"validation","direction":"inbound"},{"name":"GraphQL Yoga","native":false,"category":"server","direction":"outbound"},{"name":"Apollo Server","native":false,"category":"server","direction":"outbound"},{"name":"Apollo Federation","native":true,"category":"federation","direction":"bidirectional"},{"name":"New Relic","native":true,"category":"observability","direction":"outbound"},{"name":"Dataloader","native":true,"category":"data_loading","direction":"bidirectional"},{"name":"Grafast","native":true,"category":"execution_engine","direction":"bidirectional"}]` | `[{"name":"Apollo Federation"},{"name":"Kubernetes"},{"name":"OpenTelemetry"},{"name":"Prometheus"},{"name":"OpenID Connect"},{"name":"PostgreSQL"},{"name":"ClickHouse"},{"name":"S3"},{"name":"Kafka"},{"name":"NATS"},{"name":"Redis"},{"name":"gRPC"},{"name":"Okta"},{"name":"Auth0"},{"name":"Azure AD"},{"name":"Slack","native":true,"category":"chat","direction":"outbound"},{"name":"Discord","native":true,"category":"chat","direction":"outbound"},{"name":"GitHub","native":true,"category":"ci","direction":"bidirectional"}]` |
| language.primary | TypeScript | - |
| license.spdx | ISC | - |
| market.availability | - | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"web":true}` | `{"cli":true,"web":true,"linux":true}` |
| pricing | `{"type":"open_source","sourceUrl":"https://pothos-graphql.dev/","retrievedAt":"2026-08-14T09:17:12.302Z"}` | `{"type":"hybrid","plans":[{"free":true,"name":"Free"},{"free":false,"name":"Pro","contactSales":false},{"free":false,"name":"Enterprise","description":"Custom plans with SLAs, extended data retention, and support","contactSales":true}],"summary":"Free tier available; Pro and Enterprise plans available","currency":"USD","freeTier":true,"sourceUrl":"https://wundergraph.com/plans/enterprise","retrievedAt":"2026-09-18T15:59:33.129Z"}` |
| pricing.free_tier | - | yes |
| pricing.model | commercial | freemium |
| pricing.price_level | free | low |
| pricing.transparent | - | no |
| release.history | `[{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-drizzle%400.20.0","date":"2026-09-14T17:05:23Z","type":"stable","version":"@pothos/plugin-drizzle@0.20.0"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-zod%404.3.2","date":"2026-09-13T21:56:53Z","type":"stable","version":"@pothos/plugin-zod@4.3.2"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-validation%404.3.4","date":"2026-09-13T22:49:26Z","type":"stable","version":"@pothos/plugin-validation@4.3.4"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-validation%404.3.3","date":"2026-09-13T21:56:26Z","type":"stable","version":"@pothos/plugin-validation@4.3.3"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-tracing%401.1.4","date":"2026-09-13T21:56:38Z","type":"stable","version":"@pothos/plugin-tracing@1.1.4"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-sub-graph%404.5.3","date":"2026-09-13T22:49:23Z","type":"stable","version":"@pothos/plugin-sub-graph@4.5.3"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-sub-graph%404.5.2","date":"2026-09-13T21:56:17Z","type":"stable","version":"@pothos/plugin-sub-graph@4.5.2"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-smart-subscriptions%404.1.7","date":"2026-09-13T22:49:14Z","type":"stable","version":"@pothos/plugin-smart-subscriptions@4.1.7"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-smart-subscriptions%404.1.6","date":"2026-09-13T21:56:29Z","type":"stable","version":"@pothos/plugin-smart-subscriptions@4.1.6"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-scope-auth%404.2.1","date":"2026-09-13T22:48:59Z","type":"stable","version":"@pothos/plugin-scope-auth@4.2.1"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-scope-auth%404.2.0","date":"2026-09-13T21:56:35Z","type":"stable","version":"@pothos/plugin-scope-auth@4.2.0"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-relay%404.8.1","date":"2026-09-13T22:49:08Z","type":"stable","version":"@pothos/plugin-relay@4.8.1"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-relay%404.8.0","date":"2026-09-13T21:56:14Z","type":"stable","version":"@pothos/plugin-relay@4.8.0"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-prisma%404.17.0","date":"2026-09-13T21:56:44Z","type":"stable","version":"@pothos/plugin-prisma@4.17.0"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-prisma-utils%401.3.6","date":"2026-09-13T22:49:11Z","type":"stable","version":"@pothos/plugin-prisma-utils@1.3.6"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-prisma-utils%401.3.5","date":"2026-09-13T21:56:59Z","type":"stable","version":"@pothos/plugin-prisma-utils@1.3.5"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-mocks%404.1.4","date":"2026-09-13T21:56:56Z","type":"stable","version":"@pothos/plugin-mocks@4.1.4"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-federation%404.5.3","date":"2026-09-13T22:48:56Z","type":"stable","version":"@pothos/plugin-federation@4.5.3"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-federation%404.5.2","date":"2026-09-13T21:56:50Z","type":"stable","version":"@pothos/plugin-federation@4.5.2"},{"url":"https://github.com/hayes/pothos/releases/tag/%40pothos/plugin-errors%404.9.3","date":"2026-09-13T22:49:17Z","type":"stable","version":"@pothos/plugin-errors@4.9.3"}]` | - |
| reliability.sla_pct | - | 99.99 |
| reliability.status_page | - | yes |
| security.disclosure_policy | - | yes |
| security.hipaa | - | yes |
| security.iso27001 | - | yes |
| security.soc2 | - | yes |
| security.trust_center | - | https://wundergraph.com/cosmo/security |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40pothos%2Fcore&per_page=100","last_12m":0,"max_severity":null}` | - |

## Capabilities (GraphQL Tools)

| Capability | Pothos | WunderGraph |
|---|:--:|:--:|
| **Core** |  |  |
| Role | Schema builder | Gateway / federation |
| Primary language | TypeScript | GraphQL |
| **Modelling** |  |  |
| Schema approach | Code-first | Schema-first |
| **Scale** |  |  |
| Federation / subgraph composition | ✓ | ✓ |
| **Realtime** |  |  |
| Real-time subscriptions | ✓ | ✓ |
| **Performance** |  |  |
| Response / edge caching | - | ✓ |
| **DX** |  |  |
| Typed code generation | ✓ | ✓ |
| **Automation** |  |  |
| Generates API from a database | ✓ | - |
| **Security** |  |  |
| Built-in authz / permissions | - | ✓ |
| **Deployment** |  |  |
| Official hosted offering | - | ✓ |
| Self-hostable | ✓ | ✓ |

*Source: vioscaleAI. Generated 2026-10-16T20:07:52.336Z. "-" = undocumented, not absent.*