The IoT Security Solution Analytics API from Microsoft Defender — 2 operation(s) for iot security solution analytics.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/microsoft-defender:microsoft-defender-iot-security-solution-analytics-api"curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Microsoft Defender for Cloud REST API (Microsoft.Security)…
version: stable-composite
description: Composite of the latest stable Microsoft.Security resource-manager swagger files published by Microsoft in Azure/azure-rest-api-specs. Each path keeps its own api-version via x-source.
x-source-repo: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/security/resource-manager/Microsoft.Security/Security
servers:
- url: https://management.azure.com
security:
- azure_auth:
- user_impersonation
tags:
- name: IoT Security Solution Analytics
paths:
? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/iotSecuritySolutions/{solutionName}/analyticsModels
: get:
operationId: IotSecuritySolutionAnalytics_List
tags:
- IoT Security Solution Analytics
description: Use this method to get IoT security Analytics metrics in an array.
parameters:
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
- name: solutionName
in: path
description: The name of the IoT Security solution.
required: true
schema:
type: string
responses:
'200':
description: Azure operation completed successfully.
content:
application/json:
schema:
$ref: '#/components/schemas/IoTSecuritySolutionAnalyticsModelList'
default:
description: An unexpected error response.
content:
application/json:
schema:
$ref: '#/components/schemas/Common.CloudError'
x-ms-examples:
Get Security Solution Analytics:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2019-08-01/examples/IoTSecuritySolutionsAnalytics/GetIoTSecuritySolutionsSecurityAnalyticsList.json
x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2019-08-01/security-IoTSecurity.json
summary: Iot security solution analytics list
x-summary-source: derived
? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/iotSecuritySolutions/{solutionName}/analyticsModels/default
: get:
operationId: IotSecuritySolutionAnalytics_Get
tags:
- IoT Security Solution Analytics
description: Use this method to get IoT Security Analytics metrics.
parameters:
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ResourceGroupNameParameter
- name: solutionName
in: path
description: The name of the IoT Security solution.
required: true
schema:
type: string
responses:
'200':
description: Azure operation completed successfully.
content:
application/json:
schema:
$ref: '#/components/schemas/IoTSecuritySolutionAnalyticsModel'
default:
description: An unexpected error response.
content:
application/json:
schema:
$ref: '#/components/schemas/Common.CloudError'
x-ms-examples:
Get Security Solution Analytics:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2019-08-01/examples/IoTSecuritySolutionsAnalytics/GetIoTSecuritySolutionsSecurityAnalytics.json
x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2019-08-01/security-IoTSecurity.json
summary: Iot security solution analytics get
x-summary-source: derived
components:
schemas:
Common.CloudErrorBody:
type: object
description: The error detail.
properties:
code:
type: string
description: The error code.
readOnly: true
message:
type: string
description: The error message.
readOnly: true
target:
type: string
description: The error target.
readOnly: true
details:
type: array
description: The error details.
items:
$ref: '#/components/schemas/Common.CloudErrorBody'
readOnly: true
x-ms-identifiers: []
additionalInfo:
type: array
description: The error additional info.
items:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorAdditionalInfo
readOnly: true
x-ms-identifiers: []
x-ms-external: true
IoTSecurityAlertedDevicesList:
description: List of devices with open alerts including the count of alerts per device.
type: array
items:
$ref: '#/components/schemas/IoTSecurityAlertedDevice'
IoTSecurityDeviceRecommendationsList:
description: List of aggregated recommendation data, per recommendation type, per device.
type: array
items:
$ref: '#/components/schemas/IoTSecurityDeviceRecommendation'
IoTSecurityDeviceAlertsList:
description: List of alerts with the count of raised alerts
type: array
items:
$ref: '#/components/schemas/IoTSecurityDeviceAlert'
IoTSecuritySolutionAnalyticsModel:
type: object
description: Security analytics of your IoT Security solution
properties:
properties:
x-ms-client-flatten: true
description: Security Solution Aggregated Alert data
$ref: '#/components/schemas/IoTSecuritySolutionAnalyticsModelProperties'
allOf:
- $ref: ./common/v1/types.json#/definitions/Resource
IoTSecurityDeviceRecommendation:
type: object
description: Statistical information about the number of recommendations per device, per recommendation type.
properties:
recommendationDisplayName:
readOnly: true
type: string
description: Display name of the recommendation.
reportedSeverity:
readOnly: true
type: string
enum:
- Informational
- Low
- Medium
- High
x-ms-enum:
name: reportedSeverity
modelAsString: true
values:
- value: Informational
- value: Low
- value: Medium
- value: High
description: Assessed recommendation severity.
devicesCount:
readOnly: true
type: integer
format: int64
description: Number of devices with this recommendation.
IoTSeverityMetrics:
type: object
description: IoT Security solution analytics severity metrics.
properties:
high:
type: integer
format: int64
description: Count of high severity alerts/recommendations.
medium:
type: integer
format: int64
description: Count of medium severity alerts/recommendations.
low:
type: integer
format: int64
description: Count of low severity alerts/recommendations.
IoTSecurityDeviceAlert:
type: object
description: Statistical information about the number of alerts per alert type during last set number of days
properties:
alertDisplayName:
readOnly: true
type: string
description: Display name of the alert
reportedSeverity:
readOnly: true
type: string
enum:
- Informational
- Low
- Medium
- High
x-ms-enum:
name: reportedSeverity
modelAsString: true
values:
- value: Informational
- value: Low
- value: Medium
- value: High
description: Assessed Alert severity.
alertsCount:
readOnly: true
type: integer
format: int64
description: Number of alerts raised for this alert type.
IoTSecuritySolutionAnalyticsModelProperties:
description: Security analytics properties of your IoT Security solution
properties:
metrics:
type: object
$ref: '#/components/schemas/IoTSeverityMetrics'
description: Security analytics of your IoT Security solution.
readOnly: true
unhealthyDeviceCount:
type: integer
format: int64
readOnly: true
description: Number of unhealthy devices within your IoT Security solution.
devicesMetrics:
description: List of device metrics by the aggregation date.
type: array
readOnly: true
items:
properties:
date:
type: string
format: date-time
description: Aggregation of IoT Security solution device alert metrics by date.
devicesMetrics:
type: object
$ref: '#/components/schemas/IoTSeverityMetrics'
description: Device alert count by severity.
topAlertedDevices:
description: List of the 3 devices with the most alerts.
type: object
$ref: '#/components/schemas/IoTSecurityAlertedDevicesList'
mostPrevalentDeviceAlerts:
description: List of the 3 most prevalent device alerts.
type: object
$ref: '#/components/schemas/IoTSecurityDeviceAlertsList'
mostPrevalentDeviceRecommendations:
description: List of the 3 most prevalent device recommendations.
type: object
$ref: '#/components/schemas/IoTSecurityDeviceRecommendationsList'
IoTSecuritySolutionAnalyticsModelList:
description: List of Security analytics of your IoT Security solution
required:
- value
properties:
value:
type: array
description: List of Security analytics of your IoT Security solution
items:
$ref: '#/components/schemas/IoTSecuritySolutionAnalyticsModel'
nextLink:
readOnly: true
type: string
description: When there is too much alert data for one page, use this URI to fetch the next page.
IoTSecurityAlertedDevice:
type: object
description: Statistical information about the number of alerts per device during last set number of days.
properties:
deviceId:
readOnly: true
type: string
description: Device identifier.
alertsCount:
readOnly: true
type: integer
format: int64
description: Number of alerts raised for this device.
Common.CloudError:
type: object
description: Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).
properties:
error:
$ref: '#/components/schemas/Common.CloudErrorBody'
description: The error object.
x-ms-client-flatten: true
x-ms-external: true
securitySchemes:
azure_auth:
type: oauth2
flows:
implicit:
scopes:
user_impersonation: impersonate your user account
authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
description: Azure Active Directory OAuth2 Flow.