---
title: REST messages for the Microsoft Threat and Vulnerability Management Vulnerability Integration
description: REST messages for the Microsoft Threat and Vulnerability Management \(MS TVM\) Vulnerability Integration enable API calls to MS TVM for retrieving vulnerability data, security recommendations, and asset information.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/mstvm-rest-msgs.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: reference
last_updated: "2026-07-29"
reading_time_minutes: 1
breadcrumb: [Microsoft Threat and Vulnerability Management, Microsoft Defender Integration for Security Exposure Management, Vulnerability Response integrations, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# REST messages for the Microsoft Threat and Vulnerability Management Vulnerability Integration

REST messages for the Microsoft Threat and Vulnerability Management \(MS TVM\) Vulnerability Integration enable API calls to MS TVM for retrieving vulnerability data, security recommendations, and asset information.

## Supported cloud environments

**Note:** The integrations support commercial cloud environments by default. For non-commercial environments \(GCC High, DoD\), see the Knowledge Base article [KB3141167](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3141167).

## MS TVM access token

To authenticate REST API requests, use the REST messages for the MS TVM access token to retrieve the access token from the MS TVM API. Changes to the record method of the REST message impact the authentication requests made to MS TVM.

## MS TVM integration

Use the REST message for the MS TVM integration to retrieve information from MS TVM. Changes to the record method impact the requests made to the API. REST messages contain the following REST methods:

|REST method|Description|
|-----------|-----------|
|GET vulnerabilities|Retrieves vulnerability and exploit information from MS TVM.|
|GET Software Vulnerabilities by Machine|Retrieves all open vulnerabilities.|
|GET recommendations|Retrieves the list of all actionable security recommendations that affect the organization.|
|GET machines|Retrieves the collection of assets.|
|GET Software Vulnerabilities changes by Machine|Retrieves information that has changed in the full vulnerability import of the organization, including new, fixed, and updated vulnerabilities.|