Ultipa GQLDB provides full ACID transaction support with snapshot isolation, savepoints, and read-your-own-writes consistency.
Transactions group multiple read/write operations into a single atomic unit. Either all operations succeed (commit) or none of them take effect (rollback).
| Property | Behavior |
|---|---|
| Atomicity | All changes are applied together on commit, or none at all on rollback. |
| Consistency | The database remains in a valid state after each transaction — data integrity rules are enforced at commit time. |
| Isolation | Each transaction sees a consistent snapshot from the moment it started. |
| Durability | Committed data is persisted to storage. |
NOTEWithout an explicit transaction, each statement runs in a transaction of its own.
INSERT,SET,REMOVE,DELETEandMERGEare atomic on their own: if any element fails, the statement is rolled back as a whole and nothing is applied, and the outcome does not depend on the order the elements were matched in. Use an explicit transaction when you need to group several statements atomically, require rollback capability, or need snapshot isolation.Three things stay outside it.
UPSERTandINSERT OVERWRITEare excluded, because relocating an edge's endpoints works only outside a transaction; so are requests that switch graphs (USE g INSERT ...), since a graph cannot be switched inside a transaction; and bulk-import sessions are a separate path, unaffected. A request joining segments withNEXTis covered.An auto-commit statement never reports a write conflict. Conflict detection is a property of transactions you open yourself, where you have something to retry with; an auto-commit statement waits for a contended key instead.
Setting the environment variable
GQLDB_IMPLICIT_TX=offrestores the previous element-by-element behavior, where a statement could fail with part of its work already applied.
| Limit | Value | Description |
|---|---|---|
| Max concurrent transactions | 10,000 | New transactions are rejected when the limit is reached |
| Max transactions per connection | 1 | Only one active transaction per connection; use savepoints for partial rollback |
| Transaction timeout | 1 hour | Transactions older than this are auto-terminated |
Starts a new transaction. Returns a transaction_id and status.
GQL-- Read-write transaction (default) START TRANSACTION -- Equivalent BEGIN TRANSACTION -- Read-only transaction BEGIN TRANSACTION READ ONLY
A read-only transaction provides snapshot isolation for reads — all queries within the transaction see the same consistent point-in-time view of the data, even if other transactions are writing concurrently. Any write operation is rejected. This is useful for reports or analytics across multiple queries where you need consistent data throughout.
Once a transaction is started, all subsequent queries run within that transaction until an explicit COMMIT or ROLLBACK is issued. There is no need to pass a transaction handle — every query automatically participates in the active transaction.
Applies all buffered operations atomically to storage.
GQLCOMMIT
NOTEA successful
COMMITcan carry a warning — show it, and do not retry on it. On a graph withEDGE_IDenabled, the lookup of edges by_idis written after the transaction's changes are stored. If that write fails, the transaction is already committed, so theCOMMITsucceeds and a warning says the lookup could not be written and that the transaction must not be run again. Retrying it would store its edges a second time.The warning reaches every path: the result's warnings for the
COMMITstatement, for an auto-commit statement and for aCALLof a procedure with anATOMICblock;Tx.Warnings()afterTx.Commit, which returns no error; and, over gRPC, the commit response's message withsuccesstrue.The database records that the lookup is behind and rebuilds it from the stored edges the next time it opens, so the edges answer to their
_idafter a restart. Until thenRETURN db.validate_graph() AS healthreportsindex_rebuild_pendingunderedge_id_cache_drift.
Discards all changes in the current transaction.
GQLROLLBACK
Creates a named snapshot within the transaction. You can later roll back to this point without discarding the entire transaction.
GQLSAVEPOINT my_savepoint
Rolls back all operations performed after the named savepoint was created. The savepoint itself is retained and can be rolled back to again.
GQLROLLBACK TO SAVEPOINT my_savepoint
Releases a savepoint, keeping all changes made since it was created. The savepoint can no longer be rolled back to.
GQLRELEASE SAVEPOINT my_savepoint
Lists all active transactions across all connections.
GQLSHOW TRANSACTIONS
Returns columns: transaction_id, status, read_only, start_time.
Forcibly terminates a running transaction by ID. You can run SHOW TRANSACTIONS to find a transaction's ID.
GQLSTOP TRANSACTION tx_abc123
START TRANSACTION and KILL TRANSACTION are equivalent.
How is this different from COMMIT / ROLLBACK?
COMMIT and ROLLBACK act on your current transaction automatically, you don't need to specify an ID.STOP TRANSACTION requires an explicit transaction ID, so you can use it to terminate any transaction, including ones you don't own.ROLLBACK).An administrative escape hatch that terminates every active transaction at once, equivalent to running STOP TRANSACTION on each one. Each transaction is rolled back (uncommitted changes discarded) and ended; none are left open. Useful for clearing a wedged state.
GQLRESET TRANSACTIONS -- Singular alias, same effect RESET TRANSACTION
It returns one row per affected transaction with transaction_id and result (stopped, or failed: <reason>). Use it sparingly: it terminates other sessions' in-flight work without warning, discarding all their uncommitted changes.
A transaction can span multiple statements. You can either send each statement as a separate query call, or combine them into a single semicolon-separated string. Both approaches are equivalent, semicolons are only needed when packing multiple statements into one query.
Separate queries (no semicolons):
GQLSTART TRANSACTION INSERT (:Person {_id: 'alice', name: 'Alice'}) INSERT (:Person {_id: 'bob', name: 'Bob'}) MATCH (a:Person WHERE a._id = 'alice'), (b:Person WHERE b._id = 'bob') INSERT (a)-[:KNOWS]->(b) COMMIT
Single query (semicolons as delimiters):
GQLSTART TRANSACTION; INSERT (:Person {_id: 'alice', name: 'Alice'}); INSERT (:Person {_id: 'bob', name: 'Bob'}); MATCH (a:Person WHERE a._id = 'alice'), (b:Person WHERE b._id = 'bob') INSERT (a)-[:KNOWS]->(b); COMMIT
When a statement fails inside an explicit transaction, the transaction is left open in an aborted state. It holds no partial work, and it must be ended with ROLLBACK:
| After a failed statement | Result |
|---|---|
| Any further statement | Refused |
COMMIT | Refused |
ROLLBACK | Succeeds, and is how you end the transaction |
GQLSTART TRANSACTION INSERT (:Person {_id: 'alice', name: 'Alice'}) INSERT (:Person {_id: 'alice', name: 'Duplicate'}) -- fails INSERT (:Person {_id: 'carol', name: 'Carol'}) -- refused: the transaction is aborted COMMIT -- refused ROLLBACK -- ends the transaction
An application that keeps issuing statements after one fails must issue ROLLBACK and retry the transaction. Statements sent after a failure are refused rather than applied, so nothing sent after the failure reaches storage.
When a transaction begins, the database captures a point-in-time snapshot. All reads within the transaction see data as it was at that moment, regardless of what other transactions do afterward.
This means:
Within a transaction, you can immediately read data you just wrote. This is critical for patterns like inserting nodes and then creating edges between them:
GQLSTART TRANSACTION INSERT (:Person {_id: 'alice', name: 'Alice'}) INSERT (:Person {_id: 'bob', name: 'Bob'}) -- MATCH can see the nodes just inserted above MATCH (a:Person WHERE a._id = 'alice'), (b:Person WHERE b._id = 'bob') INSERT (a)-[:KNOWS]->(b) COMMIT
When reading data inside a transaction, the database checks in this order:
If two transactions read the same node and then both modify it, the one that commits second is refused at COMMIT with error 3011:
GQL-- Session A START TRANSACTION MATCH (p:Person {_id: 'alice'}) SET p.value = 1 -- (Session B commits its own change to alice here) COMMIT -- [3011] write conflict: node "…" was modified by another transaction after this one -- read it; re-read it and retry
This is a normal, retryable outcome, not a database failure. Re-read the values and run the transaction again. Over gRPC it arrives as the status Aborted, which is the standard "retry the transaction" status.
NOTE
3011is retryable;3010is not.3011is the write conflict above. The other transaction errors under3010— a nestedSTART TRANSACTION, a rollback of a transaction that has already ended — are caller mistakes, and retrying them will not help. Match on the code rather than the message text.
An auto-commit statement never reports a write conflict. Conflict detection belongs to transactions you open yourself, where you have something to retry with; an auto-commit statement waits for a contended key instead.
Savepoints create named snapshots within a transaction. This enables partial rollback without discarding the entire transaction.
GQLSTART TRANSACTION INSERT (:Person {_id: 'p1', name: 'Alice'}) SAVEPOINT sp1 -- snapshot: {Alice} INSERT (:Person {_id: 'p2', name: 'Bob'}) SAVEPOINT sp2 -- snapshot: {Alice, Bob} INSERT (:Person {_id: 'p3', name: 'Charlie'}) ROLLBACK TO SAVEPOINT sp1 -- restore to {Alice}, sp2 invalidated -- Only Alice exists now COMMIT
Savepoint rules:
ROLLBACK TO SAVEPOINT sp1, sp1 is still available for another rollback.RELEASE SAVEPOINT sp1 keeps changes and frees the snapshot memory.