Hasura has 2 additional endpoints that are used to manage the database, create migrations, etc. They are used by the console and cli.

Currently there is no option to disable those endpoints. Leaving full access to the database in cases when the access-key gets compromised.

My suggestion is to add an option to disable those metadata endpoints. Where sys-admins can enable it to make modifications/migrations in the database and disable it when the system goes live.

Currently I am manually disabling it in my proxy.

Thanks