microsoft.graph.security

Azure ADCollaborationContactsDocumentsEmailGraphIdentityMicrosoftOffice 365PresentationsProductivitySpreadsheetsT1Task

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.security",
  "title": "microsoft.graph.security",
  "allOf": [
    {
      "$ref": "#/components/schemas/microsoft.graph.entity"
    },
    {
      "title": "security",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "alerts": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.alert"
          },
          "x-ms-navigationProperty": true
        },
        "alerts_v2": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.alert"
          },
          "description": "A collection of alerts in Microsoft 365 Defender.",
          "x-ms-navigationProperty": true
        },
        "attackSimulation": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.attackSimulationRoot"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "x-ms-navigationProperty": true
        },
        "cases": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.security.casesRoot"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "x-ms-navigationProperty": true
        },
        "dataSecurityAndGovernance": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.tenantDataSecurityAndGovernance"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "x-ms-navigationProperty": true
        },
        "identities": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.security.identityContainer"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "A container for security identities APIs.",
          "x-ms-navigationProperty": true
        },
        "incidents": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.incident"
          },
          "description": "A collection of incidents in Microsoft 365 Defender, each of which is a set of correlated alerts and associated metadata that reflects the story of an attack.",
          "x-ms-navigationProperty": true
        },
        "labels": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.security.labelsRoot"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "x-ms-navigationProperty": true
        },
        "secureScoreControlProfiles": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.secureScoreControlProfile"
          },
          "x-ms-navigationProperty": true
        },
        "secureScores": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.secureScore"
          },
          "x-ms-navigationProperty": true
        },
        "subjectRightsRequests": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.subjectRightsRequest"
          },
          "x-ms-navigationProperty": true
        },
        "threatIntelligence": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.security.threatIntelligence"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "x-ms-navigationProperty": true
        },
        "triggers": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.security.triggersRoot"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "x-ms-navigationProperty": true
        },
        "triggerTypes": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.security.triggerTypesRoot"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "x-ms-navigationProperty": true
        },
        "@odata.type": {
          "type": "string"
        }
      }
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.security"
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this

find_json_schemasBrowse and filter every JSON Schema in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This JSON Schema

curl "https://apis.io/api/v1/json-schemas/microsoft-graph-microsoftgraphsecurity"

All schemas

curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.