I dont need them to be public available on my GraphQL

In this case, you would set up your own graphql server as a middleware which only exposes certain mutations/queries