For me, that was because this request header was missing: Accept: application/json Apparently, this header is mandatory for mutations (not queries)