Microsoft Defender

Microsoft Defender D4API Collection List API

The D4APICollectionList API from Microsoft Defender — 3 operation(s) for d4apicollectionlist.

GitHub OpenAPI

Operations 3

GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/apiCollections Gets a list of API collections within a subscription #
GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/providers/Microsoft.Security/apiCollections Gets a list of onboarded Azure API Management APIs #
GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/apiCollections Gets a list of API collections within a resource group #

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
📖
GettingStarted
https://learn.microsoft.com/en-us/azure/defender-for-cloud/get-started

Specifications

⚙
OpenAPI
https://artifacts.apis.io/microsoft-defender/openapi/microsoft-defender-d4apicollectionlist-api-openapi.yml

Other Resources

🔗
Pricing
https://azure.microsoft.com/en-us/pricing/details/defender-for-cloud/
🔗
ReleaseNotes
https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/microsoft-defender:microsoft-defender-d4apicollectionlist-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

microsoft-defender-d4apicollectionlist-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Microsoft Defender for Cloud REST API (Microsoft.Security)…
  version: stable-composite
  description: Composite of the latest stable Microsoft.Security resource-manager swagger files published by Microsoft in Azure/azure-rest-api-specs. Each path keeps its own api-version via x-source.
  x-source-repo: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/security/resource-manager/Microsoft.Security/Security
servers:
- url: https://management.azure.com
security:
- azure_auth:
  - user_impersonation
tags:
- name: D4APICollectionList
paths:
  /subscriptions/{subscriptionId}/providers/Microsoft.Security/apiCollections:
    get:
      operationId: APICollections_ListBySubscription
      tags:
      - D4APICollectionList
      summary: Gets a list of API collections within a subscription
      description: Gets a list of API collections within a subscription that have been onboarded to Microsoft Defender for APIs.
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiCollectionList'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Gets a list of API collections within a subscription that have been onboarded to Microsoft Defender for APIs:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2023-11-15/examples/ApiCollections/APICollections_ListBySubscription_example.json
      x-ms-pageable:
        nextLinkName: nextLink
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2023-11-15/apiCollections.json
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/providers/Microsoft.Security/apiCollections
  : get:
      operationId: APICollections_ListByAzureApiManagementService
      tags:
      - D4APICollectionList
      summary: Gets a list of onboarded Azure API Management APIs
      description: Gets a list of Azure API Management APIs that have been onboarded to Microsoft Defender for APIs. If an Azure API Management API is onboarded to Microsoft Defender for APIs, the system will monitor the operations within the Azure API Management API for intrusive behaviors and provide alerts for attacks that have been detected.
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      - name: serviceName
        in: path
        description: The name of the API Management service.
        required: true
        schema:
          type: string
          maxLength: 50
          minLength: 1
          pattern: ^[a-zA-Z](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiCollectionList'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Gets a list of Azure API Management APIs that have been onboarded to Microsoft Defender for APIs:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2023-11-15/examples/ApiCollections/APICollections_ListByAzureApiManagementService_example.json
      x-ms-pageable:
        nextLinkName: nextLink
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2023-11-15/apiCollections.json
  /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/apiCollections:
    get:
      operationId: APICollections_ListByResourceGroup
      tags:
      - D4APICollectionList
      summary: Gets a list of API collections within a resource group
      description: Gets a list of API collections within a resource group that have been onboarded to Microsoft Defender for APIs.
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
      responses:
        '200':
          description: The request has succeeded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiCollectionList'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Gets a list of API collections within a resource group that have been onboarded to Microsoft Defender for APIs:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2023-11-15/examples/ApiCollections/APICollections_ListByResourceGroup_example.json
      x-ms-pageable:
        nextLinkName: nextLink
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2023-11-15/apiCollections.json
components:
  schemas:
    ApiCollectionList:
      type: object
      description: Page of a list of API collections as represented by Microsoft Defender for APIs.
      properties:
        value:
          type: array
          description: API collections in this page.
          items:
            $ref: '#/components/schemas/ApiCollection'
          readOnly: true
        nextLink:
          type: string
          description: The URI to fetch the next page.
          readOnly: true
    ApiCollectionProperties:
      type: object
      description: Describes the properties of an API collection.
      properties:
        provisioningState:
          $ref: '#/components/schemas/Common.ProvisioningState'
          description: Gets the provisioning state of the API collection.
          readOnly: true
        displayName:
          type: string
          description: The display name of the API collection.
          readOnly: true
        discoveredVia:
          type: string
          format: arm-id
          description: The resource Id of the resource from where this API collection was discovered.
          readOnly: true
          x-ms-arm-id-details:
            allowedResources:
            - type: Microsoft.ApiManagement/service
        baseUrl:
          type: string
          format: uri
          description: The base URI for this API collection. All endpoints of this API collection extend this base URI.
          readOnly: true
        numberOfApiEndpoints:
          type: integer
          format: int64
          description: The number of API endpoints discovered in this API collection.
          readOnly: true
        numberOfInactiveApiEndpoints:
          type: integer
          format: int64
          description: The number of API endpoints in this API collection that have not received any API traffic in the last 30 days.
          readOnly: true
        numberOfUnauthenticatedApiEndpoints:
          type: integer
          format: int64
          description: The number of API endpoints in this API collection that are unauthenticated.
          readOnly: true
        numberOfExternalApiEndpoints:
          type: integer
          format: int64
          description: The number of API endpoints in this API collection for which API traffic from the internet was observed.
          readOnly: true
        numberOfApiEndpointsWithSensitiveDataExposed:
          type: integer
          format: int64
          description: The number of API endpoints in this API collection which are exposing sensitive data in their requests and/or responses.
          readOnly: true
        sensitivityLabel:
          type: string
          description: The highest priority sensitivity label from Microsoft Purview in this API collection.
          readOnly: true
    Common.ProvisioningState:
      type: string
      description: The current provisioning state of the resource. Indicates the status of the last operation performed on the resource.
      enum:
      - Succeeded
      - Creating
      - Updating
      - Deleting
      - Failed
      - Canceled
      - InProgress
      x-ms-enum:
        name: ProvisioningState
        modelAsString: true
        values:
        - name: Succeeded
          value: Succeeded
          description: The resource has been successfully provisioned and is ready for use.
        - name: Creating
          value: Creating
          description: The resource is being created. This is a transitional state.
        - name: Updating
          value: Updating
          description: The resource is being updated. This is a transitional state.
        - name: Deleting
          value: Deleting
          description: The resource is being deleted. This is a transitional state.
        - name: Failed
          value: Failed
          description: The last operation on the resource failed. Check the error details for more information.
        - name: Canceled
          value: Canceled
          description: The operation was canceled before completion.
        - name: InProgress
          value: InProgress
          description: InProgress
    ApiCollection:
      type: object
      description: An API collection as represented by Microsoft Defender for APIs.
      properties:
        properties:
          $ref: '#/components/schemas/ApiCollectionProperties'
          description: Describes the properties of an API collection.
          x-ms-client-flatten: true
      allOf:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ProxyResource
  securitySchemes:
    azure_auth:
      type: oauth2
      flows:
        implicit:
          scopes:
            user_impersonation: impersonate your user account
          authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
      description: Azure Active Directory OAuth2 Flow.