Microsoft Graph · Schema

microsoft.graph.security.threatIntelligence

Azure ADCollaborationContactsDocumentsEmailGraphIdentityMicrosoftOffice 365PresentationsProductivitySpreadsheetsT1Task
View JSON Schema on GitHub

JSON Schema

microsoft-graph-microsoftgraphsecuritythreatintelligence-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.security.threatIntelligence",
  "title": "microsoft.graph.security.threatIntelligence",
  "allOf": [
    {
      "$ref": "#/components/schemas/microsoft.graph.entity"
    },
    {
      "title": "threatIntelligence",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "articleIndicators": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.articleIndicator"
          },
          "description": "Refers to indicators of threat or compromise highlighted in an article.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "articles": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.article"
          },
          "description": "A list of article objects.",
          "x-ms-navigationProperty": true
        },
        "hostComponents": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.hostComponent"
          },
          "description": "Retrieve details about hostComponent objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "hostCookies": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.hostCookie"
          },
          "description": "Retrieve details about hostCookie objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "hostPairs": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.hostPair"
          },
          "description": "Retrieve details about hostTracker objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "hostPorts": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.hostPort"
          },
          "description": "Retrieve details about hostPort objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "hosts": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.host"
          },
          "description": "Refers to host objects that Microsoft Threat Intelligence has observed.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "hostSslCertificates": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.hostSslCertificate"
          },
          "description": "Retrieve details about hostSslCertificate objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "hostTrackers": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.hostTracker"
          },
          "description": "Retrieve details about hostTracker objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "intelligenceProfileIndicators": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.intelligenceProfileIndicator"
          },
          "x-ms-navigationProperty": true
        },
        "intelProfiles": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.intelligenceProfile"
          },
          "description": "A list of intelligenceProfile objects.",
          "x-ms-navigationProperty": true
        },
        "passiveDnsRecords": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.passiveDnsRecord"
          },
          "description": "Retrieve details about passiveDnsRecord objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "sslCertificates": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.sslCertificate"
          },
          "description": "Retrieve details about sslCertificate objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "subdomains": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.subdomain"
          },
          "description": "Retrieve details about the subdomain.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "vulnerabilities": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.vulnerability"
          },
          "description": "Retrieve details about vulnerabilities.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "whoisHistoryRecords": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.whoisHistoryRecord"
          },
          "description": "Retrieve details about whoisHistoryRecord objects.Note: List retrieval is not yet supported.",
          "x-ms-navigationProperty": true
        },
        "whoisRecords": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.security.whoisRecord"
          },
          "description": "A list of whoisRecord objects.",
          "x-ms-navigationProperty": true
        },
        "@odata.type": {
          "type": "string"
        }
      }
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.security.threatIntelligence"
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/microsoft-graph-microsoftgraphsecuritythreatintelligence"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.