When GraphQL converts and executes the queries as Cypher, it may use APOC functions internally, even if you haven't explicitly used APOC functions in your GraphQL queries

For example:

Below is the query run from GraphQL:

type Mutation {
    createUser(name: String) @cypher(statement: """
        CREATE (u:User {name: $name})
        RETURN name
    """)
}

CALL apoc.cypher.doit("
        CREATE (u:User {name: $name})
        RETURN name
")