How can i protect my prisma endpoint from this type of attacks?

If you want to protect prisma you have application server in front of prisma. Regarding that https://blog.apollographql.com/securing-your-graphql-api-from-malicious-queries-16130a324a6b

ok, thanks

Prisma client has it own dataloader (i'm not sure, but seems prisma have it too) https://www.prisma.io/docs/understand-prisma/prisma-introduction-what-why-how-j9ff/#building-graphql-servers