Contraforce
ContraForce is the Agentic Security Delivery Platform for Microsoft security teams, MSPs, MSSPs, and security operations teams. It provides AI‑powered triage, investigation, response, tuning, ticketing, and reporting on Microsoft Defender XDR and Sentinel. The platform offers a free 30‑day trial with no credit card required, enabling service providers to scale SOC delivery without hiring additional analysts.
Contraforce publishes 15 API contracts indexed on the APIs.io network, including Agent Tools API, Azure resources API, Cross-workspace data sources API, and 12 more. Tagged areas include Security, Software-as-a-Service, Cybersecurity, Microsoft, and MSP.
The Contraforce catalog on APIs.io includes 1 event-driven AsyncAPI specification, 1 JSON-LD context, and 1 Spectral governance ruleset.
Contraforce’s developer surface includes changelog, authentication, signup flow, pricing, engineering blog, getting-started guide, documentation, and 29 more developer resources.
What this lets a business do 4
Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →
Kin Score
Standards implemented 1
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
APIs 15
Individual APIs this provider publishes, each with its own machine-readable definition.
ContraForce API
API for ContraForce security platform
Contraforce Agent Tools API
The agent-tools API from Contraforce — 10 operation(s) for agent-tools.
Contraforce Azure resources API
The Azure resources API from Contraforce — 8 operation(s) for azure resources.
Contraforce Cross-workspace data sources API
The Cross-workspace data sources API from Contraforce — 2 operation(s) for cross-workspace data sources.
Contraforce Cross-workspace gamebooks API
The Cross-workspace gamebooks API from Contraforce — 1 operation(s) for cross-workspace gamebooks.
Contraforce Cross-workspace incidents API
The Cross-workspace incidents API from Contraforce — 2 operation(s) for cross-workspace incidents.
Contraforce Data sources API
The Data sources API from Contraforce — 1 operation(s) for data sources.
Contraforce Export API
The Export API from Contraforce — 1 operation(s) for export.
Contraforce Gamebooks API
The Gamebooks API from Contraforce — 5 operation(s) for gamebooks.
Contraforce Incidents API
The Incidents API from Contraforce — 9 operation(s) for incidents.
Contraforce Investigation API
The Investigation API from Contraforce — 2 operation(s) for investigation.
Contraforce Service accounts API
The Service accounts API from Contraforce — 7 operation(s) for service accounts.
Contraforce Service tickets API
The Service tickets API from Contraforce — 4 operation(s) for service tickets.
Contraforce Users API
The Users API from Contraforce — 7 operation(s) for users.
Contraforce Webhooks API
The Webhooks API from Contraforce — 11 operation(s) for webhooks.
Scroll for all 15
Contraforce API pricing
Prices published by Contraforce, read 2026-10-10 from www.contraforce.com/pricing.
| Plan | Price |
|---|---|
| Starter | $249/month |
| Growth | $1,499/month |
| Scale | $3,999/month |
Plan details, limits and sources →
Billed by: subscription · FinOps profile →
Pricing Plans 2
Published pricing tiers and plan structures.
Service Levels 1
Uptime the provider promises or reports, as SLA4OAI. Read from its own pages; APIs.io runs no monitors.
Contraforce
SLAFinOps 1
Cost, billing, and metering signals for API financial operations.
Contraforce Finops
FINOPSEvent Specifications 1
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Contraforce Webhooks
ASYNCAPISemantic Vocabularies 1
JSON-LD contexts and semantic vocabularies used across these APIs.
Contraforce Context
JSON-LDSpectral Rules 1
Spectral governance rulesets for linting and validating these APIs.
Contraforce API Rules
SPECTRALJSON Schema 57
Standalone JSON Schema definitions for this provider's data models.
AgentToolGamebookSubmissionRequest
JSON SCHEMAAgentToolInvestigationSubmissionRequest
JSON SCHEMAAgentToolKqlQueryRequest
JSON SCHEMAAgentToolKqlTableColumnsRequest
JSON SCHEMAApiResponseOfAgentToolKqlQueryResult
JSON SCHEMAApiResponseOfAgentToolUserDetailsResult
JSON SCHEMAApiResponseOfAuditLogsResultDto
JSON SCHEMAApiResponseOfBulkUpdateIncidentResultDto
JSON SCHEMAApiResponseOfContraForceIncident
JSON SCHEMAApiResponseOfDataConnectorAnomaliesDto
JSON SCHEMAApiResponseOfDataConnectorWorkspacesDto
JSON SCHEMAApiResponseOfIEnumerableOfAzureResourceDto
JSON SCHEMAApiResponseOfIEnumerableOfDataSource
JSON SCHEMAApiResponseOfIEnumerableOfGamebookDto
JSON SCHEMAApiResponseOfIEnumerableOfUser
JSON SCHEMAApiResponseOfIEnumerableOfWorkspaceUserDto
JSON SCHEMAApiResponseOfListGamebooksResultDto
JSON SCHEMAApiResponseOfPageListOfGamebookDto
JSON SCHEMAApiResponseOfRunGamebookResponse
JSON SCHEMAApiResponseOfSendTestWebhookResult
JSON SCHEMAApiResponseOfSentinelIngestDeploymentCardDto
JSON SCHEMAApiResponseOfServiceAccountCreatedDto
JSON SCHEMAApiResponseOfServiceTicketResponse
JSON SCHEMAApiResponseOfSignInLogsResultDto
JSON SCHEMAApiResponseOfUser
JSON SCHEMAApiResponseOfWebhookSecretRegeneratedDto
JSON SCHEMAApiResponseOfboolean
JSON SCHEMAAssignIncidentRequest
JSON SCHEMABulkUpdateIncidentsRequest
JSON SCHEMACreateIncidentCommentRequest
JSON SCHEMACreateServiceAccountRequest
JSON SCHEMACreateWebhookConfigurationRequest
JSON SCHEMAExportAuditResponse
JSON SCHEMAGetWorkspaceUsersRequest
JSON SCHEMAIngestIncidentRequest
JSON SCHEMALinkServiceTicketRequest
JSON SCHEMAListIncidentsAcrossWorkspacesRequest
JSON SCHEMAListMultipleWorkspacesGeneralRequestDto
JSON SCHEMAPaginatedApiResponseOfServiceTicketResponse
JSON SCHEMAProvisionSentinelIngestRequest
JSON SCHEMARunGamebookRequest
JSON SCHEMAServiceTicketUpdatePriorityRequest
JSON SCHEMASubmitAddUsersRequest
JSON SCHEMASubmitUserManagementRequest
JSON SCHEMAUnlinkServiceTicketRequest
JSON SCHEMAUpdateIncidentCommentRequest
JSON SCHEMAUpdateIncidentStatusRequest
JSON SCHEMAUpdateServiceAccountRequest
JSON SCHEMAUpdateWebhookConfigurationRequest
JSON SCHEMAUpdateWebhookCredentialsRequest
JSON SCHEMAScroll for all 57
Security Posture 3
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
Recommended x-agentic-access execution contracts for AI agents.
Resources
Get Started 3
Portal, sign-up, and the first successful call
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 3
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 7
Pagination, idempotency, versioning, errors, and events
Scroll for all 7
Access & Security 7
Authentication, authorization, and security posture
Scroll for all 7
Operate 2
Status, limits, changes, and where to get help
Commercial 5
Pricing, plans, and the legal terms of use
Company 3
The organization behind the API
Other 4
Properties that don't map to a standard resource type
Source (apis.yml)
Contraforce API — frequently asked questions
Does Contraforce have an API?
Yes. APIs.io lists 15 APIs from Contraforce, including ContraForce API, Contraforce Agent Tools API and Contraforce Azure resources API, and 12 more.
Is there an OpenAPI specification for the Contraforce API?
Yes. APIs.io indexes 14 OpenAPI specifications for Contraforce, each linked for download from this page.
How do I authenticate with the Contraforce API?
Contraforce uses bearer-token authentication (1 scheme). The details are profiled on APIs.io as Contraforce Authentication.
How much does the Contraforce API cost?
Contraforce publishes its prices; its Starter plan is $249/month as of 2026-10-10. APIs.io lists 3 pricing plans for Contraforce, with each plan's price, limits and inclusions under Pricing on this page.
Is the Contraforce API ready for AI agents?
Contraforce has a Kin Score of 51.3 out of 100 (developing) and an Agent Readiness score of 31.7 (agent-ready), scored by API Evangelist on 2026-11-06.
Work with this as data
Every provider here is available over the APIs.io API and to AI agents over MCP.