- Home
- GraphQL Tools
- Hot Chocolate
Hot Chocolate
Wilmington, Delaware, United States
What it is
Hot Chocolate is a free, open-source GraphQL server for .NET that runs on ASP.NET Core and builds GraphQL schemas from C# types and resolvers. Developers can define typed schemas using implementation-first or code-first approaches. The server supports GraphQL over HTTP and WebSocket, as well as Server-Sent Events for streamed responses. Its documentation covers schema downloads, a Nitro GraphQL IDE endpoint, and a command-line interface for schema exports. Integrations include Entity Framework, MongoDB, and Marten; DataLoaders and batch resolvers batch and cache related requests to reduce repeated fetching. Security guidance recommends cost analysis, pagination and execution-depth limits, and timeouts for public APIs. Trusted documents can restrict private APIs to registered operations. OpenTelemetry instrumentation covers the server, execution engine, and DataLoader layers. Hot Chocolate implements the GraphQL 2025 specification and GraphQL over HTTP, and supports spec-compliant clients including Strawberry Shake, Relay, and Apollo Client. It is MIT licensed for commercial or private projects and can act as a Fusion subgraph. File uploads are supported by the Upload scalar, but not through a gateway to stitched services.
For and against
For
- Free and MIT licensed for commercial or private projects.
- Supports implementation-first and code-first schemas.
- DataLoaders batch and cache related requests.
- OpenTelemetry instrumentation spans server and data-loading layers.
- Can act as a Fusion subgraph.
Against
- Gateway uploads to stitched services are not supported.
- The getting-started tutorial requires the .NET 8 SDK or later.
- Paid support plans start at $450 per month.
The verdict
Hot Chocolate provides schema authoring, data-loading, observability, and security options for .NET GraphQL services. Note the gateway upload limitation and the .NET 8-or-later requirement for its tutorial.
Who it suits
Hot Chocolate is for .NET developers building GraphQL APIs on ASP.NET Core. Its trusted-document approach is described for private APIs serving known clients, such as an organization's own web or mobile apps.
Plans and prices
Hot Chocolate
MIT licensed · free to use in commercial or private projects
Read 4 Oct 2026 · chillicream.com
On the record
- Authentication and authorization
- The security guide includes authentication and authorization, and says trusted documents can limit private APIs to operations registered with the server.chillicream.com · read 3 Oct 2026
- Company location
- ChilliCream lists its address as 1207 Delaware Ave #3567, Wilmington, DE 19806, United States.chillicream.com · read 4 Oct 2026
- Data access
- Its data middleware supports IQueryable or IExecutable sources, with guidance for Entity Framework Core, MongoDB, and Marten.chillicream.com · read 4 Oct 2026
- Data loading
- Hot Chocolate provides DataLoader and batch resolver options for fetching data efficiently.chillicream.com · read 3 Oct 2026
- Efficient fetching
- DataLoaders batch and cache related data requests to address the GraphQL N+1 problem.chillicream.com · read 4 Oct 2026
- Federation
- A Hot Chocolate server can act as a Fusion subgraph, allowing services to be composed behind a gateway as teams need independent ownership and deployment.chillicream.com · read 4 Oct 2026
- File upload limit
- The Upload scalar supports file uploads, but the documentation says uploads through a gateway to stitched services are not yet supported.chillicream.com · read 3 Oct 2026
- Getting started
- The maker's tutorial requires the .NET 8 SDK or later and says it guides users to a running GraphQL server.chillicream.com · read 3 Oct 2026
- Intended users
- The documentation describes trusted documents as suited to private APIs serving known clients, including an organization's own web or mobile applications.chillicream.com · read 3 Oct 2026
- License
- The product page says Hot Chocolate is MIT licensed and may be used, modified, and distributed in commercial or private projects.chillicream.com · read 4 Oct 2026
- Observability
- The built-in OpenTelemetry integration emits GraphQL request, resolver, and DataLoader spans.chillicream.com · read 4 Oct 2026
- Observability integration
- Hot Chocolate provides OpenTelemetry instrumentation across the server, execution engine, and DataLoader layers.chillicream.com · read 3 Oct 2026
- Purpose
- Hot Chocolate is an open-source GraphQL server for .NET that runs on ASP.NET Core.chillicream.com · read 4 Oct 2026
- Query safeguards
- The security guidance recommends cost analysis for public APIs and trusted documents for private APIs, alongside limits such as pagination, execution depth, and timeouts.chillicream.com · read 4 Oct 2026
- Schema authoring
- It supports implementation-first and code-first schema authoring in C#, and both approaches can be mixed in one project.chillicream.com · read 4 Oct 2026
- Schema operations
- Its server documentation describes schema download, a Nitro GraphQL IDE endpoint, and a command-line interface for exporting schemas.chillicream.com · read 3 Oct 2026
- Security
- Hot Chocolate integrates with ASP.NET Core authentication and supports JWT, cookies, and other authentication schemes.chillicream.com · read 4 Oct 2026
- Standards and clients
- It implements the GraphQL 2025 specification and GraphQL over HTTP, and is compatible with spec-compliant clients including Strawberry Shake, Relay, and Apollo Client.chillicream.com · read 4 Oct 2026
