Rate limit requests based on go HTTP mux patterns or graphql resolvers names. HTTP mux patterns should looks something like GET /theme/{themeID}, the pattern must be the exact one uses in app-api. Graphql must match the model and field names, or be a wildcard on all fields on a model. For example, Me.isPaymentsVerified will match a single field, while Me.* will match all fields on the Me model.