So what am I doing wrong?

what you have there is dql right? You are sending it to /graphql. Try using /query instead.