As per most user-facing dashboard systems, you wouldn’t want to directly expose the Pinot APIs (query or otherwise) to customers. So for one of our clients, they have a Python layer/API (custom, I think) that “fronts” Pinot and generates the actual queries. This helps protect you against things like customers running Groovy code on your Pinot servers :)