Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Identity.risk Prevention Container API

The identity.riskPreventionContainer API from Microsoft Entra ID (formerly Azure AD) — 12 operation(s) for identity.riskpreventioncontainer.

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 23

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /identity/riskPrevention Get fraud and risk prevention settings · Get riskPrevention from identity #
Ask an LLM
“Where do I see my tenant's fraud and risk prevention configuration for External ID?”
“What third-party risk prevention settings are set up in Microsoft Entra External ID?”
Tell an agent
Show the tenant's risk prevention configuration.
Get the fraud and risk prevention container with its providers.
PATCH /identity/riskPrevention Update the risk prevention configuration · Update the navigation property riskPrevention in identity #
Ask an LLM
“How do I change the fraud protection and firewall providers in one update to the risk prevention container?”
“Can I replace the set of web application firewall verifications on the risk prevention settings?”
Tell an agent
Update risk prevention to use fraud protection providers {fraudProtectionProviders}.
Set the risk prevention firewall providers to {webApplicationFirewallProviders}.
DELETE /identity/riskPrevention Delete the risk prevention configuration · Delete navigation property riskPrevention for identity #
Ask an LLM
“Can I wipe the whole risk prevention configuration from my tenant?”
“How do I remove all fraud and risk prevention settings at once?”
Tell an agent destructive · confirm first
Delete the tenant's entire risk prevention configuration.
Remove the riskPrevention container from identity settings.
GET /identity/riskPrevention/fraudProtectionProviders List fraud protection providers · List fraudProtectionProviders #
Ask an LLM
“Which fraud protection providers are connected to my External ID tenant?”
“How can I see every fraud protection integration and its settings?”
Tell an agent
List all fraud protection providers.
Show fraud protection providers matching {filter}.
POST /identity/riskPrevention/fraudProtectionProviders Add a fraud protection provider · Create fraudProtectionProviders #
Ask an LLM
“How do I connect a new fraud protection provider to my sign-up flows?”
“What do I need to register a fraud protection integration?”
Tell an agent
Create a fraud protection provider named {displayName}.
Register a new fraud protection integration called {displayName}.
GET /identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProvider-id} Get a fraud protection provider · Get fraudProtectionProvider #
Ask an LLM
“How do I look up the settings of one fraud protection provider by ID?”
“What subtype and properties does a specific fraud protection provider have?”
Tell an agent
Get fraud protection provider {provider}.
Show the configuration of fraud protection integration {provider}.
PATCH /identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProvider-id} Update a fraud protection provider · Update fraudProtectionProvider #
Ask an LLM
“How do I rename or reconfigure an existing fraud protection provider?”
“Can I change the settings of a fraud protection integration after creating it?”
Tell an agent
Rename fraud protection provider {provider} to {displayName}.
Update the settings of fraud protection integration {provider}.
DELETE /identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProvider-id} Delete a fraud protection provider · Delete fraudProtectionProviders #
Ask an LLM
“How do I disconnect a fraud protection provider I no longer use?”
“Can I delete one fraud protection integration by its ID?”
Tell an agent destructive · confirm first
Delete fraud protection provider {provider}.
Disconnect the fraud protection integration {provider}.
GET /identity/riskPrevention/fraudProtectionProviders/$count Count fraud protection providers · Get the number of the resource #
Ask an LLM
“How many fraud protection providers are configured in my tenant?”
“What's the total number of fraud protection integrations?”
Tell an agent
Count the fraud protection providers.
Tell me how many fraud protection integrations exist.
GET /identity/riskPrevention/webApplicationFirewallProviders List web application firewall providers · List webApplicationFirewallProvider objects #
Ask an LLM
“Which web application firewall providers are configured for my External ID tenant?”
“How can I see all WAF provider integrations and their properties?”
Tell an agent
List all web application firewall providers.
Show WAF providers matching {filter}.
POST /identity/riskPrevention/webApplicationFirewallProviders Add a web application firewall provider · Create webApplicationFirewallProvider #
Ask an LLM
“How do I register a new web application firewall provider?”
“What's needed to create a WAF provider object for risk prevention?”
Tell an agent
Create a web application firewall provider named {displayName}.
Register a new WAF provider called {displayName}.
GET /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id} Get a web application firewall provider · Get webApplicationFirewallProvider #
Ask an LLM
“How do I read the details of one WAF provider by its ID?”
“What properties does a specific web application firewall provider have?”
Tell an agent
Get web application firewall provider {provider}.
Show the configuration of WAF provider {provider}.
PATCH /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id} Update a web application firewall provider · Update webApplicationFirewallProvider #
Ask an LLM
“How do I rename or change settings on an existing WAF provider?”
“Can I edit a web application firewall provider after it's registered?”
Tell an agent
Rename web application firewall provider {provider} to {displayName}.
Update the settings of WAF provider {provider}.
DELETE /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id} Delete a web application firewall provider · Delete webApplicationFirewallProvider #
Ask an LLM
“How do I remove a WAF provider I no longer use?”
“Can I delete one web application firewall provider by ID?”
Tell an agent destructive · confirm first
Delete web application firewall provider {provider}.
Remove WAF provider {provider} from risk prevention.
POST /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProvider-id}/microsoft.graph.verify Verify a host with a WAF provider · Invoke action verify #
Ask an LLM
“How do I check that my domain is actually protected by my web application firewall provider?”
“Can I trigger a WAF verification for a specific host name?”
Tell an agent
Verify host {hostName} with WAF provider {provider}.
Run a firewall verification of {hostName} using provider {provider}.
GET /identity/riskPrevention/webApplicationFirewallProviders/$count Count web application firewall providers · Get the number of the resource #
Ask an LLM
“How many WAF providers are set up in my tenant?”
“What's the number of web application firewall providers configured?”
Tell an agent
Count the web application firewall providers.
Tell me how many WAF providers exist.
GET /identity/riskPrevention/webApplicationFirewallVerifications List WAF verification results · List webApplicationFirewallVerificationModel objects #
Ask an LLM
“Which hosts have been verified against a web application firewall, and what were the results?”
“How do I see all past WAF verification records?”
Tell an agent
List all web application firewall verification results.
Show WAF verifications matching {filter}.
POST /identity/riskPrevention/webApplicationFirewallVerifications Record a WAF verification result · Create new navigation property to webApplicationFirewallVerifications for… #
Ask an LLM
“Can I store a web application firewall verification record for a host directly?”
“What fields go into a new WAF verification model entry?”
Tell an agent
Create a WAF verification record for host {verifiedHost}.
Record a firewall verification of {verifiedHost} with provider type {providerType}.
GET /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id} Get a WAF verification result · Get webApplicationFirewallVerificationModel #
Ask an LLM
“How do I read one web application firewall verification by its ID?”
“What was the outcome of a specific WAF host verification?”
Tell an agent
Get WAF verification {verification}.
Show the result of firewall verification {verification}.
PATCH /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id} Update a WAF verification result · Update the navigation property webApplicationFirewallVerifications in identity #
Ask an LLM
“How do I change the verified host or result on an existing WAF verification?”
“Can I edit a web application firewall verification record after it's stored?”
Tell an agent
Set the verified host of WAF verification {verification} to {verifiedHost}.
Update the result of firewall verification {verification} to {verificationResult}.
DELETE /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id} Delete a WAF verification result · Delete webApplicationFirewallVerificationModel #
Ask an LLM
“Can I delete an old web application firewall verification record?”
“How do I remove one WAF verification by ID?”
Tell an agent destructive · confirm first
Delete WAF verification {verification}.
Remove firewall verification record {verification}.
GET /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModel-id}/provider Get the WAF provider behind a verification · Get provider from identity #
Ask an LLM
“Which firewall provider was used for a particular WAF verification?”
“How do I find the provider linked to a web application firewall verification record?”
Tell an agent
Show the WAF provider used by verification {verification}.
Which provider verified the host in record {verification}? Get it.
GET /identity/riskPrevention/webApplicationFirewallVerifications/$count Count WAF verification results · Get the number of the resource #
Ask an LLM
“How many web application firewall verifications have been recorded?”
“What's the total count of WAF verification records?”
Tell an agent
Count the web application firewall verifications.
Tell me how many WAF verification records exist.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identity-riskpreventioncontainer-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-identity-riskpreventioncontainer-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-identity-riskpreventioncontainer-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Identity.SignIns Identity.risk Prevention Container API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (39 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identity-riskpreventioncontainer-api-openapi.yml