Microsoft Azure Discovery Groups API

The Discovery Groups API from Microsoft Azure — 5 operation(s) for discovery groups.

Documentation GitHub OpenAPI

Operations 6

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /discoGroups List attack surface discovery groups · Microsoft Azure Get Discogroups #

Ask an LLM

“What discovery groups have I set up for external attack surface management?”

“Can I filter and page through my discovery groups?”

Tell an agent

List all my discovery groups.

Show discovery groups matching {filter}, {maxpagesize} per page.

GET /discoGroups/{groupName} Get a discovery group · Microsoft Azure Get Discogroups Groupname #

Ask an LLM

“What seeds and exclusions does a specific discovery group use?”

“Can I look up one discovery group by name?”

Tell an agent

Get discovery group {groupName}.

Show the seeds and schedule of discovery group {groupName}.

PUT /discoGroups/{groupName} Create or replace a discovery group · Microsoft Azure Put Discogroups Groupname #

Ask an LLM

“How do I set up a discovery group to find my organization's internet-facing assets?”

“Can I exclude certain domains or IPs from asset discovery?”

Tell an agent

Create discovery group {groupName} seeded with {seeds}.

Replace discovery group {groupName} with seeds {seeds} and exclusions {excludes}.

POST /discoGroups/{groupName}:run Run a discovery group now · Microsoft Azure Post Discogroups Groupname:run #

Ask an LLM

“Can I kick off an asset discovery run on demand instead of waiting for the schedule?”

“How do I trigger a fresh scan for one discovery group?”

Tell an agent

Run discovery group {groupName} now.

Start a new discovery scan for {groupName}.

GET /discoGroups/{groupName}/runs List past runs of a discovery group · Microsoft Azure Get Discogroups Groupname Runs #

Ask an LLM

“What were the results of previous discovery runs for my group?”

“Can I filter a discovery group's run history?”

Tell an agent

List the run results for discovery group {groupName}.

Show runs of {groupName} matching {filter}.

POST /discoGroups:validate Validate a discovery group definition · Microsoft Azure Post Discogroups:validate #

Ask an LLM

“Can I check a discovery group definition for errors before saving it?”

“Will my seeds and exclusions pass validation?”

Tell an agent

Validate a discovery group named {name} with seeds {seeds}.

Dry-run check discovery settings with seeds {seeds} and excludes {excludes}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/microsoft-azure:microsoft-azure-discovery-groups-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Microsoft Azure Defender EASM Discovery Groups API
  version: 2023-03-01-preview
  description: Defender EASM discovers and maps your digital attack surface to provide an "outside-in" perspective using probes to discover assets. The assets are provided with detailed metadata associated, including vulnerabilities, configurations and web components, allowing customers to view and prioritize external risk. The EASM REST API enables you to develop clients that integrate with your application.
  x-typespec-generated:
  - emitter: '@azure-tools/typespec-autorest'
security:
- OAuth2Auth:
  - https://easm.defender.microsoft.com/.default
tags:
- name: Discovery Groups
paths:
  /discoGroups:
    get:
      operationId: microsoftAzureDiscoverygroupsListdiscogroup
      tags:
      - Discovery Groups
      description: Retrieve a list of discovery group for the provided search parameters.
      parameters:
      - $ref: '#/components/parameters/Azure.Core.Foundations.ApiVersionParameter'
      - $ref: '#/components/parameters/Azure.Core.FilterQueryParameter'
      - $ref: '#/components/parameters/Azure.Core.SkipQueryParameter'
      - $ref: '#/components/parameters/Azure.Core.MaxPageSizeQueryParameter'
      responses:
        '200':
          description: The request has succeeded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PagedDiscoGroup'
        default:
          description: An unexpected error response.
          headers:
            x-ms-error-code:
              description: String error code indicating what went wrong.
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Azure.Core.Foundations.ErrorResponse'
      x-ms-examples:
        DiscoveryGroups_ListDiscoGroup:
          $ref: ./examples/DiscoveryGroups_ListDiscoGroup_MaximumSet_Gen.json
      x-ms-pageable:
        nextLinkName: nextLink
      summary: Microsoft Azure Get Discogroups
  /discoGroups/{groupName}:
    get:
      operationId: microsoftAzureDiscoverygroupsGetdiscogroup
      tags:
      - Discovery Groups
      description: Retrieve a discovery group with a given groupName.
      parameters:
      - $ref: '#/components/parameters/Azure.Core.Foundations.ApiVersionParameter'
      - name: groupName
        in: path
        description: The caller provided unique name for the resource.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: The request has succeeded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DiscoGroup'
        default:
          description: An unexpected error response.
          headers:
            x-ms-error-code:
              description: String error code indicating what went wrong.
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Azure.Core.Foundations.ErrorResponse'
      x-ms-examples:
        DiscoveryGroups_GetDiscoGroup:
          $ref: ./examples/DiscoveryGroups_GetDiscoGroup_MaximumSet_Gen.json
      summary: Microsoft Azure Get Discogroups Groupname
    put:
      operationId: microsoftAzureDiscoverygroupsCreateorreplacediscogroup
      tags:
      - Discovery Groups
      description: Create a discovery group with a given groupName.
      parameters:
      - $ref: '#/components/parameters/Azure.Core.Foundations.ApiVersionParameter'
      - name: groupName
        in: path
        description: The caller provided unique name for the resource.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: The request has succeeded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DiscoGroup'
        default:
          description: An unexpected error response.
          headers:
            x-ms-error-code:
              description: String error code indicating what went wrong.
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Azure.Core.Foundations.ErrorResponse'
      x-ms-examples:
        DiscoveryGroups_CreateOrReplaceDiscoGroup:
          $ref: ./examples/DiscoveryGroups_CreateOrReplaceDiscoGroup_MaximumSet_Gen.json
      summary: Microsoft Azure Put Discogroups Groupname
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DiscoGroupData'
        required: true
  /discoGroups/{groupName}:run:
    post:
      operationId: microsoftAzureDiscoverygroupsRundiscogroup
      tags:
      - Discovery Groups
      description: Run a discovery group with a given groupName.
      parameters:
      - $ref: '#/components/parameters/Azure.Core.Foundations.ApiVersionParameter'
      - name: groupName
        in: path
        description: The caller provided unique name for the resource.
        required: true
        schema:
          type: string
      responses:
        '204':
          description: 'There is no content to send for this request, but the headers may be useful. '
        default:
          description: An unexpected error response.
          headers:
            x-ms-error-code:
              description: String error code indicating what went wrong.
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Azure.Core.Foundations.ErrorResponse'
      x-ms-examples:
        DiscoveryGroups_RunDiscoGroup:
          $ref: ./examples/DiscoveryGroups_RunDiscoGroup_MaximumSet_Gen.json
      summary: Microsoft Azure Post Discogroups Groupname:run
  /discoGroups/{groupName}/runs:
    get:
      operationId: microsoftAzureDiscoverygroupsListruns
      tags:
      - Discovery Groups
      description: Retrieve a collection of discovery run results for a discovery group with a given groupName.
      parameters:
      - $ref: '#/components/parameters/Azure.Core.Foundations.ApiVersionParameter'
      - $ref: '#/components/parameters/Azure.Core.FilterQueryParameter'
      - $ref: '#/components/parameters/Azure.Core.SkipQueryParameter'
      - $ref: '#/components/parameters/Azure.Core.MaxPageSizeQueryParameter'
      - $ref: '#/components/parameters/DiscoGroupNameParameter'
      responses:
        '200':
          description: The request has succeeded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DiscoRunPageResult'
        default:
          description: An unexpected error response.
          headers:
            x-ms-error-code:
              description: String error code indicating what went wrong.
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Azure.Core.Foundations.ErrorResponse'
      x-ms-examples:
        DiscoveryGroups_ListRuns:
          $ref: ./examples/DiscoveryGroups_ListRuns_MaximumSet_Gen.json
      x-ms-pageable:
        nextLinkName: nextLink
      summary: Microsoft Azure Get Discogroups Groupname Runs
  /discoGroups:validate:
    post:
      operationId: microsoftAzureDiscoverygroupsValidatediscogroup
      tags:
      - Discovery Groups
      description: Validate a discovery group with a given groupName.
      parameters:
      - $ref: '#/components/parameters/Azure.Core.Foundations.ApiVersionParameter'
      responses:
        '200':
          description: The request has succeeded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidateResult'
        default:
          description: An unexpected error response.
          headers:
            x-ms-error-code:
              description: String error code indicating what went wrong.
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Azure.Core.Foundations.ErrorResponse'
      x-ms-examples:
        DiscoveryGroups_ValidateDiscoGroup:
          $ref: ./examples/DiscoveryGroups_ValidateDiscoGroup_MaximumSet_Gen.json
      summary: Microsoft Azure Post Discogroups:validate
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DiscoGroupData'
        required: true
components:
  schemas:
    DiscoGroupData:
      type: object
      description: A request body used to create a discovery group.
      properties:
        name:
          type: string
          description: The name for a disco group.
        description:
          type: string
          description: The description for a disco group.
        tier:
          type: string
          description: The tier for the disco group which will affect the algorithm used for the disco runs in this group.
        frequencyMilliseconds:
          type: integer
          format: int64
          description: The frequency at which the disco group is supposed to be rerun in milliseconds.
        seeds:
          type: array
          description: The list of seeds used for the disco group runs.
          items:
            $ref: '#/components/schemas/DiscoSource'
          x-ms-identifiers: []
        names:
          type: array
          description: The list of names used for the disco group runs.
          items:
            type: string
        excludes:
          type: array
          description: The list of excludes used for the disco group runs, aka assets to exclude from the discovery algorithm.
          items:
            $ref: '#/components/schemas/DiscoSource'
          x-ms-identifiers: []
        templateId:
          type: string
          description: The unique identifier for the disco template used for the disco group creation.
    ErrorDetail:
      type: object
      description: This is the top-level error object whose code matches the x-ms-error-code response header.
      properties:
        code:
          type: string
          description: This is one of a server-defined set of error codes.
        message:
          type: string
          description: This is a human-readable representation of the error.
        target:
          type: string
          description: This is the error target.
        details:
          type: array
          description: This is an array of details about specific errors that led to this reported error.
          items:
            $ref: '#/components/schemas/ErrorDetail'
          x-ms-identifiers: []
        innererror:
          $ref: '#/components/schemas/InnerError'
          description: This is an object containing more specific information than the current object about the error.
      required:
      - code
      - message
    DiscoRunResult:
      type: object
      description: The latest run of this disco group with some limited information, null if the group has never been run.
      properties:
        submittedDate:
          type: string
          format: date-time
          description: The date for when the disco run was created in the system.
        startedDate:
          type: string
          format: date-time
          description: The date for when the disco run was actually started by the system.
        completedDate:
          type: string
          format: date-time
          description: The date for when the disco run was completed by the system.
        tier:
          type: string
          description: The tier which will affect the algorithm used for the disco run.
        state:
          $ref: '#/components/schemas/DiscoRunState'
          description: The State of the disco run.
        totalAssetsFoundCount:
          type: integer
          format: int64
          description: The total count of assets that were found this disco run.
        seeds:
          type: array
          description: The list of seeds used for the disco run.
          items:
            $ref: '#/components/schemas/DiscoSource'
          x-ms-identifiers: []
        excludes:
          type: array
          description: The list of excludes used for the disco run, aka assets to exclude from the discovery algorithm.
          items:
            $ref: '#/components/schemas/DiscoSource'
          x-ms-identifiers: []
        names:
          type: array
          description: The list of names used for the disco run.
          items:
            type: string
    DiscoGroup:
      type: object
      properties:
        id:
          type: string
          description: The system generated unique id for the resource.
        name:
          type: string
          description: The caller provided unique name for the resource.
          readOnly: true
        displayName:
          type: string
          description: The name that can be used for display purposes.
        description:
          type: string
          description: The description for a disco group.
        tier:
          type: string
          description: The tier for the disco group which will affect the algorithm used for the disco runs in this group.
        frequencyMilliseconds:
          type: integer
          format: int64
          description: The frequency at which the disco group is supposed to be rerun in milliseconds.
        seeds:
          type: array
          description: The list of seeds used for the disco group runs.
          items:
            $ref: '#/components/schemas/DiscoSource'
          x-ms-identifiers: []
        names:
          type: array
          description: The list of names used for the disco group runs.
          items:
            type: string
        excludes:
          type: array
          description: The list of excludes used for the disco group runs, aka assets to exclude from the discovery algorithm.
          items:
            $ref: '#/components/schemas/DiscoSource'
          x-ms-identifiers: []
        latestRun:
          $ref: '#/components/schemas/DiscoRunResult'
          description: The latest run of this disco group with some limited information, null if the group has never been run.
        createdDate:
          type: string
          format: date-time
          description: The date for the disco group was created.
        templateId:
          type: string
          description: The unique identifier for the disco template used for the disco group creation.
      required:
      - name
    DiscoSource:
      type: object
      description: Source entity used to drive discovery.
      properties:
        kind:
          $ref: '#/components/schemas/DiscoSourceKind'
          description: The kind of disco source.
        name:
          type: string
          description: The name for the disco source.
    ValidateResult:
      type: object
      description: Validate result for validate action endpoints
      properties:
        error:
          $ref: '#/components/schemas/ErrorDetail'
          description: This is the top-level error object whose code matches the x-ms-error-code response header.
    Azure.Core.Foundations.ErrorResponse:
      type: object
      description: A response containing error details.
      properties:
        error:
          $ref: '#/components/schemas/Azure.Core.Foundations.Error'
          description: The error object.
      required:
      - error
    InnerError:
      type: object
      description: This is an object containing more specific information than the current object about the error.
      properties:
        code:
          type: string
          description: This is a more specific error code than was provided by the containing error.
        value:
          description: This is an additional field representing the value that caused the error to help with debugging.
    DiscoRunState:
      type: string
      description: The State of the disco run.
      enum:
      - pending
      - running
      - completed
      - failed
      x-ms-enum:
        name: DiscoRunState
        modelAsString: true
    PagedDiscoGroup:
      type: object
      description: Paged collection of DiscoGroup items
      properties:
        value:
          type: array
          description: The DiscoGroup items on this page
          items:
            $ref: '#/components/schemas/DiscoGroup'
        nextLink:
          type: string
          format: uri
          description: The link to the next page of items
        totalElements:
          type: integer
          format: int64
          description: The total number of items available in the full result set.
      required:
      - value
    DiscoRunPageResult:
      type: object
      properties:
        totalElements:
          type: integer
          format: int64
          description: The total number of items available in the full result set.
        nextLink:
          type: string
          description: The link to access the next page of results.  Not set if at the end of the result set.
        value:
          type: array
          description: The items in the current page of results.
          items:
            $ref: '#/components/schemas/DiscoRunResult'
          x-ms-identifiers: []
    Azure.Core.Foundations.Error:
      type: object
      description: The error object.
      properties:
        code:
          type: string
          description: One of a server-defined set of error codes.
        message:
          type: string
          description: A human-readable representation of the error.
        target:
          type: string
          description: The target of the error.
        details:
          type: array
          description: An array of details about specific errors that led to this reported error.
          items:
            $ref: '#/components/schemas/Azure.Core.Foundations.Error'
          x-ms-identifiers: []
        innererror:
          $ref: '#/components/schemas/Azure.Core.Foundations.InnerError'
          description: An object containing more specific information than the current object about the error.
      required:
      - code
      - message
    DiscoSourceKind:
      type: string
      description: The kind of disco source.
      enum:
      - as
      - attribute
      - contact
      - domain
      - host
      - ipBlock
      x-ms-enum:
        name: DiscoSourceKind
        modelAsString: true
    Azure.Core.Foundations.InnerError:
      type: object
      description: An object containing more specific information about the error. As per Microsoft One API guidelines - https://github.com/Microsoft/api-guidelines/blob/vNext/Guidelines.md#7102-error-condition-responses.
      properties:
        code:
          type: string
          description: One of a server-defined set of error codes.
        innererror:
          $ref: '#/components/schemas/Azure.Core.Foundations.InnerError'
          description: Inner error.
  parameters:
    Azure.Core.Foundations.ApiVersionParameter:
      name: api-version
      in: query
      description: The API version to use for this operation.
      required: true
      x-ms-parameter-location: method
      x-ms-client-name: apiVersion
      schema:
        type: string
        minLength: 1
    Azure.Core.MaxPageSizeQueryParameter:
      name: maxpagesize
      in: query
      description: The maximum number of result items per page.
      required: false
      x-ms-parameter-location: method
      schema:
        type: integer
        format: int32
    DiscoGroupNameParameter:
      name: groupName
      in: path
      description: The unique identifier for the discovery group.
      required: true
      x-ms-parameter-location: method
      schema:
        type: string
    Azure.Core.FilterQueryParameter:
      name: filter
      in: query
      description: Filter the result list using the given expression.
      required: false
      x-ms-parameter-location: method
      schema:
        type: string
    Azure.Core.SkipQueryParameter:
      name: skip
      in: query
      description: The number of result items to skip.
      required: false
      x-ms-parameter-location: method
      schema:
        type: integer
        format: int32
        default: 0
  securitySchemes:
    OAuth2Auth:
      type: oauth2
      flows:
        implicit:
          scopes:
            https://easm.defender.microsoft.com/.default: ''
          authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
x-ms-parameterized-host:
  hostTemplate: '{endpoint}'
  useSchemePrefix: false
  parameters:
  - name: endpoint
    in: path
    description: The endpoint hosting the requested resource. For example, https://{region}.easm.defender.microsoft.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/workspaces/{workspaceName}
    required: true
    type: string

Microsoft Azure Discovery Groups API

Operations 6

Documentation

Specifications

Other Resources

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification