Hi Bondol Tuon. Actually you can do anything you want at client subscription. Apollo is just another design for client server communication, but when the server receive the request, you can intercept it and choose to add the security you want. In a Node.js Apollo server for example, you can add a Middleware that will check for specific header or token in request.