Microsoft Entra ID (formerly Azure AD) · OpenAPI Overlay 1.0.0

API Evangelist conversational phrasing for Identity.SignIns Identity Protection.risk Detection API

7 actions 7 updates phrasing extends openapi/azure-ad-identityprotection-riskdetection-api-openapi.yml
Generated by API Evangelist Written by API Evangelist tooling for Microsoft Entra ID (formerly Azure AD)'s API. It is a proposal applied on top of the contract, not a document Microsoft Entra ID (formerly Azure AD) publishes.
View Overlay File View on GitHub Overlay Specification

What the actions change

x-apievangelist-phrasing

Targets 7

$.info
$.paths['/identityProtection/riskDetections'].get
$.paths['/identityProtection/riskDetections'].post
$.paths['/identityProtection/riskDetections/{riskDetection-id}'].get
$.paths['/identityProtection/riskDetections/{riskDetection-id}'].delete
$.paths['/identityProtection/riskDetections/{riskDetection-id}'].patch
$.paths['/identityProtection/riskDetections/$count'].get

OpenAPI Overlay

Raw ↑
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Identity.SignIns Identity Protection.risk Detection API
  version: 1.0.0
extends: openapi/azure-ad-identityprotection-riskdetection-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 6
- target: $.paths['/identityProtection/riskDetections'].get
  update:
    x-apievangelist-phrasing:
      intent: List identity risk detections
      effect: read
      questions:
      - What risky sign-in and user risk detections has Identity Protection flagged?
      - Can I filter risk detections to only high risk level events?
      instructions:
      - text: List all risk detections.
      - text: List risk detections matching {filter}, ordered by {orderby}.
        slots:
          filter: query.$filter
          orderby: query.$orderby
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityProtection/riskDetections'].post
  update:
    x-apievangelist-phrasing:
      intent: Add a risk detection record
      effect: write
      questions:
      - Can I create a risk detection entry for a user?
      - Is it possible to record a risk event with a specific risk level and IP address?
      instructions:
      - text: Create a risk detection for user {userId} with risk level {riskLevel}.
        slots:
          userId: requestBody.userId
          riskLevel: requestBody.riskLevel
      - text: Record a {riskEventType} risk detection from IP {ipAddress} for user {userId}.
        slots:
          riskEventType: requestBody.riskEventType
          ipAddress: requestBody.ipAddress
          userId: requestBody.userId
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityProtection/riskDetections/{riskDetection-id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get one risk detection
      effect: read
      questions:
      - What location, IP and risk type are behind a particular risk detection?
      - Can I look up a single risk detection by its ID?
      instructions:
      - text: Get risk detection {detection}.
        slots:
          detection: path.riskDetection-id
      - text: Show the IP, location and risk level of detection {detection}.
        slots:
          detection: path.riskDetection-id
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityProtection/riskDetections/{riskDetection-id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a risk detection
      effect: destructive
      questions:
      - Can I remove a risk detection record?
      - Is deleting an individual risk detection supported?
      instructions:
      - text: Delete risk detection {detection}.
        slots:
          detection: path.riskDetection-id
      - text: Remove risk detection {detection} if its ETag matches {etag}.
        slots:
          detection: path.riskDetection-id
          etag: header.If-Match
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityProtection/riskDetections/{riskDetection-id}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a risk detection
      effect: write
      questions:
      - Can I change the risk state or risk level recorded on a detection?
      - Is it possible to edit an existing risk detection's details?
      instructions:
      - text: Set the risk state of detection {detection} to {riskState}.
        slots:
          detection: path.riskDetection-id
          riskState: requestBody.riskState
      - text: Change risk detection {detection} to risk level {riskLevel}.
        slots:
          detection: path.riskDetection-id
          riskLevel: requestBody.riskLevel
      method: generated
      generated: '2026-10-01'
- target: $.paths['/identityProtection/riskDetections/$count'].get
  update:
    x-apievangelist-phrasing:
      intent: Count identity risk detections
      effect: read
      questions:
      - How many risk detections has Identity Protection recorded?
      - Can I count just the risk detections matching a filter?
      instructions:
      - text: Count all risk detections.
      - text: Count risk detections matching {filter}.
        slots:
          filter: query.$filter
      method: generated
      generated: '2026-10-01'

Work with this as data

Every overlay here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for openapi overlays

4 MCP tools reach this
  • find_overlaysBrowse and filter every overlay in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This overlay
curl "https://apis.io/api/v1/overlays/azure-ad-identityprotection-riskdetection-api-phrasing-overlay"
All openapi overlays
curl "https://apis.io/api/v1/overlays?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.