A query allow list means that only the persisted queries that reside on the server are allowed to execute. All other GraphQL queries are denied.

The allow list may be enabled by setting the configuration property caas.persisted-queries.allow-list to true. See Section 9.2, “Query Allow Listing” for more details.