GraphQL hype has faded. In 2026 REST is right 70% of the time, GraphQL shines in the other 30%.
REST wins
Simplicity, HTTP caching, universal tooling, known conventions.
GraphQL wins
Multiple clients with divergent needs, variable data shapes, deep nested over-fetching avoidance.
Traps
N+1, complex auth, caching pain, introspection = attack surface in prod.