# @escape.tech/graphql-armor-max-tokens **Limit** the number of **tokens** in a GraphQL document. It is used to prevent **DOS attack**, **heap overflow** or **server overloading**. ## Installation This plugin is bundled within GraphQL Armor, so you don't need to install it separately. However, for a standalone usage, you can install it with: ```bash # npm npm install @escape.tech/graphql-armor-max-tokens # yarn yarn add @escape.tech/graphql-armor-max-tokens ``` ## Documentation [https://escape.tech/graphql-armor/docs/plugins/max-tokens](https://escape.tech/graphql-armor/docs/plugins/max-tokens)