Microsoft Endpoint Configuration Management

Microsoft Endpoint Configuration Management Device Actions API

Remote device actions such as wipe, retire, sync, and lock.

Documentation GitHub OpenAPI

Operations 6

POST /deviceManagement/managedDevices/{managedDeviceId}/retire Microsoft Endpoint Configuration Management Retire a device #

POST /deviceManagement/managedDevices/{managedDeviceId}/wipe Microsoft Endpoint Configuration Management Wipe a device #

POST /deviceManagement/managedDevices/{managedDeviceId}/syncDevice Microsoft Endpoint Configuration Management Sync device #

POST /deviceManagement/managedDevices/{managedDeviceId}/remoteLock Microsoft Endpoint Configuration Management Remote lock a device #

POST /deviceManagement/managedDevices/{managedDeviceId}/resetPasscode Microsoft Endpoint Configuration Management Reset passcode #

POST /deviceManagement/managedDevices/{managedDeviceId}/rebootNow Microsoft Endpoint Configuration Management Reboot device #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/microsoft-endpoint-configuration-management-device-actions-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Microsoft Endpoint Configuration Management Microsoft Intune Graph Device Actions API
  description: Microsoft Graph API endpoints for Intune device management, enabling programmatic access to manage devices, apps, compliance policies, and configuration profiles. Supports both v1.0 and beta endpoints. Requires an active Intune license for the tenant.
  version: 1.0.0
  contact:
    name: Microsoft Graph Support
    url: https://developer.microsoft.com/en-us/graph/support
  license:
    name: Microsoft API License
    url: https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph v1.0 production endpoint
- url: https://graph.microsoft.com/beta
  description: Microsoft Graph beta endpoint
security:
- oauth2: []
tags:
- name: Device Actions
  description: Remote device actions such as wipe, retire, sync, and lock.
paths:
  /deviceManagement/managedDevices/{managedDeviceId}/retire:
    post:
      operationId: retireManagedDevice
      summary: Microsoft Endpoint Configuration Management Retire a device
      description: Retire a device, removing corporate data while leaving personal data intact.
      tags:
      - Device Actions
      parameters:
      - name: managedDeviceId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Device retire action initiated.
  /deviceManagement/managedDevices/{managedDeviceId}/wipe:
    post:
      operationId: wipeManagedDevice
      summary: Microsoft Endpoint Configuration Management Wipe a device
      description: Factory reset a device, removing all data.
      tags:
      - Device Actions
      parameters:
      - name: managedDeviceId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                keepEnrollmentData:
                  type: boolean
                keepUserData:
                  type: boolean
                macOsUnlockCode:
                  type: string
      responses:
        '204':
          description: Device wipe action initiated.
  /deviceManagement/managedDevices/{managedDeviceId}/syncDevice:
    post:
      operationId: syncManagedDevice
      summary: Microsoft Endpoint Configuration Management Sync device
      description: Trigger a sync for the managed device with Intune.
      tags:
      - Device Actions
      parameters:
      - name: managedDeviceId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Device sync action initiated.
  /deviceManagement/managedDevices/{managedDeviceId}/remoteLock:
    post:
      operationId: remoteLockManagedDevice
      summary: Microsoft Endpoint Configuration Management Remote lock a device
      description: Remotely lock a managed device.
      tags:
      - Device Actions
      parameters:
      - name: managedDeviceId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Remote lock action initiated.
  /deviceManagement/managedDevices/{managedDeviceId}/resetPasscode:
    post:
      operationId: resetPasscode
      summary: Microsoft Endpoint Configuration Management Reset passcode
      description: Reset the passcode on a managed device.
      tags:
      - Device Actions
      parameters:
      - name: managedDeviceId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Passcode reset action initiated.
  /deviceManagement/managedDevices/{managedDeviceId}/rebootNow:
    post:
      operationId: rebootManagedDevice
      summary: Microsoft Endpoint Configuration Management Reboot device
      description: Remotely reboot a managed device.
      tags:
      - Device Actions
      parameters:
      - name: managedDeviceId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Reboot action initiated.
components:
  securitySchemes:
    oauth2:
      type: oauth2
      flows:
        authorizationCode:
          authorizationUrl: https://login.microsoftonline.com/common/oauth2/v2.0/authorize
          tokenUrl: https://login.microsoftonline.com/common/oauth2/v2.0/token
          scopes:
            DeviceManagementManagedDevices.Read.All: Read managed devices
            DeviceManagementManagedDevices.ReadWrite.All: Read and write managed devices
            DeviceManagementApps.Read.All: Read app management data
            DeviceManagementApps.ReadWrite.All: Read and write app management data
            DeviceManagementConfiguration.Read.All: Read device configurations
            DeviceManagementConfiguration.ReadWrite.All: Read and write device configurations

Microsoft Endpoint Configuration Management Device Actions API

Operations 6

Documentation

Specifications

Schemas & Data

Other Resources