Microsoft Defender

Microsoft Defender Settings API

The Settings API from Microsoft Defender — 2 operation(s) for settings.

Documentation GitHub OpenAPI

Operations 3

GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/settings Settings list #

GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/settings/{settingName} Settings get #

PUT /subscriptions/{subscriptionId}/providers/Microsoft.Security/settings/{settingName} Settings update #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/microsoft-defender:microsoft-defender-settings-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Microsoft Defender for Cloud REST API (Microsoft.Security)…
  version: stable-composite
  description: Composite of the latest stable Microsoft.Security resource-manager swagger files published by Microsoft in Azure/azure-rest-api-specs. Each path keeps its own api-version via x-source.
  x-source-repo: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/security/resource-manager/Microsoft.Security/Security
servers:
- url: https://management.azure.com
security:
- azure_auth:
  - user_impersonation
tags:
- name: Settings
paths:
  /subscriptions/{subscriptionId}/providers/Microsoft.Security/settings:
    get:
      operationId: Settings_List
      tags:
      - Settings
      description: Settings about different configurations in Microsoft Defender for Cloud
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SettingsList'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Common.CloudError'
      x-ms-examples:
        Get settings of subscription:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2022-05-01/examples/Settings/GetSettings_example.json
      x-ms-pageable:
        nextLinkName: nextLink
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2022-05-01/settings.json
      summary: Settings list
      x-summary-source: derived
  /subscriptions/{subscriptionId}/providers/Microsoft.Security/settings/{settingName}:
    get:
      operationId: Settings_Get
      tags:
      - Settings
      description: Settings of different configurations in Microsoft Defender for Cloud
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - name: settingName
        in: path
        description: The name of the setting
        required: true
        x-ms-enum:
          name: SettingName
          modelAsString: true
          values:
          - name: MCAS
            value: MCAS
            description: Integration with Microsoft Defender for Cloud Apps (formerly Microsoft Cloud App Security).
          - name: WDATP
            value: WDATP
            description: Integration with Microsoft Defender for Endpoint (formerly Windows Defender ATP).
          - name: WDATP_EXCLUDE_LINUX_PUBLIC_PREVIEW
            value: WDATP_EXCLUDE_LINUX_PUBLIC_PREVIEW
            description: Microsoft Defender for Endpoint integration that excludes the Linux public preview.
          - name: WDATP_UNIFIED_SOLUTION
            value: WDATP_UNIFIED_SOLUTION
            description: Integration with the Microsoft Defender for Endpoint unified agent solution.
          - name: Sentinel
            value: Sentinel
            description: Integration with Microsoft Sentinel.
          - name: current
            value: current
            description: The current Defender for Storage setting for the resource.
        schema:
          type: string
          enum:
          - MCAS
          - WDATP
          - WDATP_EXCLUDE_LINUX_PUBLIC_PREVIEW
          - WDATP_UNIFIED_SOLUTION
          - Sentinel
          - current
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Setting'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Common.CloudError'
      x-ms-examples:
        Get a setting on subscription:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2022-05-01/examples/Settings/GetSetting_example.json
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2022-05-01/settings.json
      summary: Settings get
      x-summary-source: derived
    put:
      operationId: Settings_Update
      tags:
      - Settings
      description: updating settings about different configurations in Microsoft Defender for Cloud
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/SubscriptionIdParameter
      - name: settingName
        in: path
        description: The name of the setting
        required: true
        x-ms-enum:
          name: SettingName
          modelAsString: true
          values:
          - name: MCAS
            value: MCAS
            description: Integration with Microsoft Defender for Cloud Apps (formerly Microsoft Cloud App Security).
          - name: WDATP
            value: WDATP
            description: Integration with Microsoft Defender for Endpoint (formerly Windows Defender ATP).
          - name: WDATP_EXCLUDE_LINUX_PUBLIC_PREVIEW
            value: WDATP_EXCLUDE_LINUX_PUBLIC_PREVIEW
            description: Microsoft Defender for Endpoint integration that excludes the Linux public preview.
          - name: WDATP_UNIFIED_SOLUTION
            value: WDATP_UNIFIED_SOLUTION
            description: Integration with the Microsoft Defender for Endpoint unified agent solution.
          - name: Sentinel
            value: Sentinel
            description: Integration with Microsoft Sentinel.
          - name: current
            value: current
            description: The current Defender for Storage setting for the resource.
        schema:
          type: string
          enum:
          - MCAS
          - WDATP
          - WDATP_EXCLUDE_LINUX_PUBLIC_PREVIEW
          - WDATP_UNIFIED_SOLUTION
          - Sentinel
          - current
      responses:
        '200':
          description: Resource 'Setting' update operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Setting'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Common.CloudError'
      x-ms-examples:
        Update a setting for subscription:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2022-05-01/examples/Settings/UpdateSetting_example.json
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2022-05-01/settings.json
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Setting'
        description: Setting object
        required: true
      summary: Settings update
      x-summary-source: derived
components:
  schemas:
    Common.CloudErrorBody:
      type: object
      description: The error detail.
      properties:
        code:
          type: string
          description: The error code.
          readOnly: true
        message:
          type: string
          description: The error message.
          readOnly: true
        target:
          type: string
          description: The error target.
          readOnly: true
        details:
          type: array
          description: The error details.
          items:
            $ref: '#/components/schemas/Common.CloudErrorBody'
          readOnly: true
          x-ms-identifiers: []
        additionalInfo:
          type: array
          description: The error additional info.
          items:
            $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorAdditionalInfo
          readOnly: true
          x-ms-identifiers: []
      x-ms-external: true
    SettingsList:
      type: object
      description: Subscription settings list.
      properties:
        value:
          type: array
          description: The settings list.
          items:
            $ref: '#/components/schemas/Setting'
        nextLink:
          type: string
          description: The URI to fetch the next page.
    SettingKind:
      type: string
      description: the kind of the settings string
      enum:
      - DataExportSettings
      - AlertSuppressionSetting
      - AlertSyncSettings
      x-ms-enum:
        name: SettingKind
        modelAsString: true
        values:
        - name: DataExportSettings
          value: DataExportSettings
          description: DataExportSettings
        - name: AlertSuppressionSetting
          value: AlertSuppressionSetting
          description: AlertSuppressionSetting
        - name: AlertSyncSettings
          value: AlertSyncSettings
          description: AlertSyncSettings
    Common.CloudError:
      type: object
      description: Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).
      properties:
        error:
          $ref: '#/components/schemas/Common.CloudErrorBody'
          description: The error object.
          x-ms-client-flatten: true
      x-ms-external: true
    Setting:
      type: object
      description: The kind of the security setting
      properties:
        kind:
          $ref: '#/components/schemas/SettingKind'
          description: the kind of the settings string
          x-ms-mutability:
          - read
          - update
          - create
      discriminator:
        propertyName: kind
      required:
      - kind
      allOf:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ProxyResource
  securitySchemes:
    azure_auth:
      type: oauth2
      flows:
        implicit:
          scopes:
            user_impersonation: impersonate your user account
          authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
      description: Azure Active Directory OAuth2 Flow.