DatoCMS separates read-oriented GraphQL content delivery from REST content management in its API overview. For the DatoCMS entry, name which task the client performs before selecting an endpoint and token.
Do not send a delivery query to the management base URL or give a public reader unnecessary editing authority. Start with one known published record.