{ "item": [ { "name": "auth", "description": "", "item": [ { "id": "e3ec3e02-67bc-4cae-9166-a72e54531309", "name": "Probe Security Copilot auth readiness", "request": { "name": "Probe Security Copilot auth readiness", "description": { "content": "Performs the lightweight auth probe used during portal startup. In the captured tenant this\nreturned `204 No Content` when called as `GET /auth?CheckWorkspaceAccess=false`.\n", "type": "text/plain" }, "url": { "path": [ "auth" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Whether the portal should validate workspace access as part of the auth probe.", "type": "text/plain" }, "key": "CheckWorkspaceAccess", "value": "false" } ], "variable": [] }, "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "39637c72-2690-4336-a4eb-cf86040044eb", "name": "The current browser session is authenticated for the requested probe mode.", "originalRequest": { "url": { "path": [ "auth" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Whether the portal should validate workspace access as part of the auth probe.", "type": "text/plain" }, "key": "CheckWorkspaceAccess", "value": "false" } ], "variable": [] }, "method": "GET", "body": {} }, "status": "No Content", "code": 204, "header": [], "cookie": [], "_postman_previewlanguage": "text" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "userInfo", "description": "", "item": [ { "id": "621eda3f-c8f1-4706-b69b-8b384f54b2e2", "name": "Get current Security Copilot user context", "request": { "name": "Get current Security Copilot user context", "description": { "content": "Retrieves the current user's Security Copilot admin and feature context. Confirmed live both\nwith and without `CheckPartnerAccess=true` during portal bootstrap.\n", "type": "text/plain" }, "url": { "path": [ "auth", "userInfo" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Whether partner-access context should also be evaluated.", "type": "text/plain" }, "key": "CheckPartnerAccess", "value": "true" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "b56848bb-8982-406b-bbd3-ccf5128c6fa3", "name": "Current-user context returned successfully.", "originalRequest": { "url": { "path": [ "auth", "userInfo" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Whether partner-access context should also be evaluated.", "type": "text/plain" }, "key": "CheckPartnerAccess", "value": "true" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"statusCode\": 3297,\n \"isAdmin\": false,\n \"isGlobalAdmin\": true,\n \"isOperator\": true,\n \"featureFlags\": [\n \"string\",\n \"string\"\n ],\n \"key_0\": 8985.69487289196,\n \"key_1\": 5170.4928442716,\n \"key_2\": \"string\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "expiryDate", "description": "", "item": [ { "id": "ac039429-8233-4803-90b1-c80819733125", "name": "Get workspace capacity auth expiry state", "request": { "name": "Get workspace capacity auth expiry state", "description": { "content": "Retrieves the current workspace capacity-authentication expiry state. In the captured tenant\nthis returned a contextual `404 NotFound` with `capacityResourceNotFound` because no capacity\nwas attached to the workspace, which still confirms the route and its error contract.\n", "type": "text/plain" }, "url": { "path": [ "auth", "expiryDate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "2c8afd97-3e6b-4102-b0ab-570e0ef53f60", "name": "Capacity-authentication expiry details returned successfully.", "originalRequest": { "url": { "path": [ "auth", "expiryDate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "6100cb96-dffb-48f6-8ab8-00b8f0e3795f", "name": "No capacity is attached to the current workspace.", "originalRequest": { "url": { "path": [ "auth", "expiryDate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "users", "description": "", "item": [ { "name": "features", "description": "", "item": [ { "id": "f33ef358-ed8b-4c3a-b46b-972858bd5f35", "name": "Get Security Copilot feature flags", "request": { "name": "Get Security Copilot feature flags", "description": { "content": "Retrieves the feature-flag set used to light up Security Copilot portal capabilities for the current user.", "type": "text/plain" }, "url": { "path": [ "users", "features" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "cb9aa6bb-58bf-4377-bcbd-d1886d25c292", "name": "Feature flags returned successfully.", "originalRequest": { "url": { "path": [ "users", "features" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"featureFlags\": [\n \"string\",\n \"string\"\n ],\n \"key_0\": false\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "settings", "description": "", "item": [ { "name": "datashare", "description": "", "item": [ { "id": "e24a4d8d-17be-4b74-8758-0a47c37e8eb0", "name": "Get tenant data-sharing settings", "request": { "name": "Get tenant data-sharing settings", "description": { "content": "Retrieves tenant-level data-sharing and feature settings used by Security Copilot startup and administration pages.", "type": "text/plain" }, "url": { "path": [ "settings", "datashare" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "301d8f4c-0952-42c8-bc3d-e3e1b61d0921", "name": "Data-sharing settings returned successfully.", "originalRequest": { "url": { "path": [ "settings", "datashare" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 8267.229198573004,\n \"key_1\": true,\n \"key_2\": 981.6199927062053,\n \"key_3\": 683,\n \"key_4\": 2675\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "defaultWorkspace", "description": "", "item": [ { "id": "9279f920-f856-478a-88ec-3d8b9ea8aa6a", "name": "Get default workspace preference", "request": { "name": "Get default workspace preference", "description": { "content": "Retrieves the workspace preference used as the portal's default workspace context.", "type": "text/plain" }, "url": { "path": [ "settings", "datashare", "defaultWorkspace" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "72d43709-e22c-45db-83ba-e3631d669607", "name": "Default workspace returned successfully.", "originalRequest": { "url": { "path": [ "settings", "datashare", "defaultWorkspace" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 2006\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] }, { "name": "userPreferences", "description": "", "item": [ { "name": "currentWorkspace", "description": "", "item": [ { "id": "2937bbef-a93e-4776-b335-762c048729f4", "name": "Get current workspace preference", "request": { "name": "Get current workspace preference", "description": { "content": "Retrieves the workspace currently selected in the active portal session.", "type": "text/plain" }, "url": { "path": [ "userPreferences", "currentWorkspace" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "8b53cf5a-de1c-423f-8e03-120873c2ca49", "name": "Current workspace returned successfully.", "originalRequest": { "url": { "path": [ "userPreferences", "currentWorkspace" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 2006\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "usage", "description": "", "item": [ { "name": "capacities", "description": "", "item": [ { "id": "6b6fd6be-3a86-4156-a75b-9ab33468e364", "name": "List attached Security Copilot capacities", "request": { "name": "List attached Security Copilot capacities", "description": { "content": "Retrieves capacity references available to the current workspace. The captured tenant returned\nan empty array, which still confirms the route and response shape.\n", "type": "text/plain" }, "url": { "path": [ "usage", "capacities" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "ea16e732-1160-4363-8f6d-fe235687b15a", "name": "Capacity list returned successfully.", "originalRequest": { "url": { "path": [ "usage", "capacities" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "[\n {\n \"key_0\": 6979,\n \"key_1\": false,\n \"key_2\": 5030\n },\n {\n \"key_0\": false,\n \"key_1\": 1281.3199896579354,\n \"key_2\": 2787.746353205348\n }\n]", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "trial", "description": "", "item": [ { "id": "bc510285-4ba5-46ad-82f2-2cb5a33c29c2", "name": "List Security Copilot trial records", "request": { "name": "List Security Copilot trial records", "description": { "content": "Retrieves Security Copilot trial records from the CDS-backed trial service used during portal startup.", "type": "text/plain" }, "url": { "path": [ "trial" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "a8007ad9-e938-40a5-97e0-0b6338ffbea5", "name": "Trial records returned successfully.", "originalRequest": { "url": { "path": [ "trial" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "[\n {\n \"key_0\": 6979,\n \"key_1\": false,\n \"key_2\": 5030\n },\n {\n \"key_0\": false,\n \"key_1\": 1281.3199896579354,\n \"key_2\": 2787.746353205348\n }\n]", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "graphData", "description": "", "item": [ { "name": "details", "description": "", "item": [ { "id": "aa75a2a1-4650-4cb1-8dd1-eb4bc75be45a", "name": "Resolve Entra object details for workspace policy views", "request": { "name": "Resolve Entra object details for workspace policy views", "description": { "content": "Resolves user, role, group, and service-principal identifiers into display metadata for the Manage workspaces experience.", "type": "text/plain" }, "url": { "path": [ "graphData", "details" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"key_0\": 5196,\n \"key_1\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "210f3ab2-f0d1-4a08-a69e-03f569bced49", "name": "Directory details returned successfully.", "originalRequest": { "url": { "path": [ "graphData", "details" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"key_0\": 5196,\n \"key_1\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "provisioning", "description": "", "item": [ { "name": "create", "description": "", "item": [ { "id": "137520cb-5c83-4e94-842d-3e0430e4fd0a", "name": "Run Security Copilot create-capacity what-if", "request": { "name": "Run Security Copilot create-capacity what-if", "description": { "content": "Triggers the initial Security Platform provisioning preflight used by the create-capacity flow.\nIn the captured run this was opened from the startup dialog and then canceled before submission;\nthe request body was `{}` and the response body was the literal string `OperationWhatIfSuccess`.\n", "type": "text/plain" }, "url": { "path": [ "provisioning", "create" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on Security Platform provisioning helpers.", "type": "text/plain" }, "key": "api-version", "value": "2024-03-01-preview" } ], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "text/plain" } ], "method": "POST", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "4bb1458c-a55f-4a8c-bb5b-b7acd9d3a216", "name": "The provisioning preflight completed successfully.", "originalRequest": { "url": { "path": [ "provisioning", "create" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on Security Platform provisioning helpers.", "type": "text/plain" }, "key": "api-version", "value": "2024-03-01-preview" } ], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "text/plain" } ], "method": "POST", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "text/plain" } ], "body": "OperationWhatIfSuccess", "cookie": [], "_postman_previewlanguage": "text" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "account", "description": "", "item": [ { "id": "8c835347-77d4-42a5-863f-2ab702a4cbf0", "name": "Get Security Platform account and pod inventory", "request": { "name": "Get Security Platform account and pod inventory", "description": { "content": "Retrieves the Security Platform account record and regional pod inventory backing the current tenant.", "type": "text/plain" }, "url": { "path": [ "provisioning", "account" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on Security Platform provisioning helpers.", "type": "text/plain" }, "key": "api-version", "value": "2024-03-01-preview" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "7ef99b77-4198-4ec4-8aa1-ce78db492f13", "name": "Account inventory returned successfully.", "originalRequest": { "url": { "path": [ "provisioning", "account" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on Security Platform provisioning helpers.", "type": "text/plain" }, "key": "api-version", "value": "2024-03-01-preview" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 1421.7184253443204\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "checkTenant", "description": "", "item": [ { "id": "9a4b4fb1-cba8-499b-9a57-e10df459ccf6", "name": "Check Security Platform tenant eligibility", "request": { "name": "Check Security Platform tenant eligibility", "description": { "content": "Retrieves the Security Platform tenant account type and tenant geo used during startup and provisioning decisions.", "type": "text/plain" }, "url": { "path": [ "provisioning", "checkTenant" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on Security Platform provisioning helpers.", "type": "text/plain" }, "key": "api-version", "value": "2024-03-01-preview" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "164e590c-da3a-41d5-b463-4ac70e25ede9", "name": "Tenant provisioning context returned successfully.", "originalRequest": { "url": { "path": [ "provisioning", "checkTenant" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on Security Platform provisioning helpers.", "type": "text/plain" }, "key": "api-version", "value": "2024-03-01-preview" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "account", "description": "", "item": [ { "name": "workspaces", "description": "", "item": [ { "id": "792d7074-1faf-4128-a445-64f94dd2f1d8", "name": "List Security Copilot workspaces", "request": { "name": "List Security Copilot workspaces", "description": { "content": "Lists Security Copilot workspaces attached to the current Security Platform account.", "type": "text/plain" }, "url": { "path": [ "account", "workspaces" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on workspace list and workspace detail requests.", "type": "text/plain" }, "key": "api-version", "value": "2023-12-01-preview" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "d635074a-2168-4b4d-9324-132274b8cb0b", "name": "Workspace list returned successfully.", "originalRequest": { "url": { "path": [ "account", "workspaces" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on workspace list and workspace detail requests.", "type": "text/plain" }, "key": "api-version", "value": "2023-12-01-preview" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 5759,\n \"key_1\": 5762,\n \"key_2\": 6785\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "api", "description": "", "item": [ { "name": "gateway", "description": "", "item": [ { "name": "actions", "description": "", "item": [ { "name": "containers", "description": "", "item": [ { "name": "me", "description": "", "item": [ { "id": "65ba891b-186f-4e0d-a555-2efb06d5cbf8", "name": "Evaluate current-container permissions", "request": { "name": "Evaluate current-container permissions", "description": { "content": "Evaluates container permissions for the current user during startup and workspace write-light-up checks.", "type": "text/plain" }, "url": { "path": [ "api", "gateway", "actions", "containers", "me" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on Security Platform provisioning helpers.", "type": "text/plain" }, "key": "api-version", "value": "2024-03-01-preview" } ], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "[\n \"string\",\n \"string\"\n]", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "a2f57f6f-b8e3-41c0-9218-d2264c5847ac", "name": "Permission evaluation returned successfully.", "originalRequest": { "url": { "path": [ "api", "gateway", "actions", "containers", "me" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on Security Platform provisioning helpers.", "type": "text/plain" }, "key": "api-version", "value": "2024-03-01-preview" } ], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "[\n \"string\",\n \"string\"\n]", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": \"string\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] } ] } ] }, { "name": "pods", "description": "", "item": [ { "name": "{podId}", "description": "", "item": [ { "name": "workspaces", "description": "", "item": [ { "name": "{workspaceName}", "description": "", "item": [ { "id": "4ba82ec8-4b35-456f-ac98-632bc7523034", "name": "Get workspace metadata", "request": { "name": "Get workspace metadata", "description": { "content": "Retrieves the Security Copilot workspace record from the regional Security Platform content plane.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on workspace list and workspace detail requests.", "type": "text/plain" }, "key": "api-version", "value": "2023-12-01-preview" } ], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "641329da-d6f2-4a11-b364-160eca5b19b7", "name": "Workspace metadata returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on workspace list and workspace detail requests.", "type": "text/plain" }, "key": "api-version", "value": "2023-12-01-preview" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "securitycopilot", "description": "", "item": [ { "name": "personas", "description": "", "item": [ { "name": "values", "description": "", "item": [ { "id": "a922e606-6e7e-4153-8eed-0af48a93a052", "name": "List persona labels", "request": { "name": "List persona labels", "description": { "content": "Retrieves the persona values used across onboarding, home suggestions, and filtering.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "personas", "values" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "02a43bd0-2f08-49df-a0ae-2b76d70bf154", "name": "Persona values returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "personas", "values" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "[\n \"string\",\n \"string\"\n]", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "skillsets", "description": "", "item": [ { "id": "9aeb8409-40eb-47a8-97c9-3fbb4f4c7403", "name": "List persona skillset mappings", "request": { "name": "List persona skillset mappings", "description": { "content": "Retrieves the skillset names associated with current persona configuration.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "personas", "skillsets" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "182be0c2-0e6a-45f7-bb6d-eb8a65e10e9d", "name": "Persona skillset names returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "personas", "skillsets" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "[\n \"string\",\n \"string\"\n]", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "users", "description": "", "item": [ { "name": "{userId}", "description": "", "item": [ { "name": "activities", "description": "", "item": [ { "id": "6a2d1960-4283-482c-aec4-7d9cf4a45455", "name": "Get recent Security Copilot user activity", "request": { "name": "Get recent Security Copilot user activity", "description": { "content": "Retrieves recent per-user activity metadata, including the last prompt execution timestamp.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "users", ":userId", "activities" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } }, { "type": "any", "value": "00000000-1111-2222-3333-444444444444", "key": "userId", "disabled": false, "description": { "content": "(Required) User object identifier within the current tenant.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "d52532c0-fd87-4143-a06c-1704f0d63650", "name": "User activity returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "users", ":userId", "activities" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" }, { "disabled": false, "description": { "content": "(Required) User object identifier within the current tenant.", "type": "text/plain" }, "type": "any", "value": "00000000-1111-2222-3333-444444444444", "key": "userId" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] }, { "name": "availabletrials", "description": "", "item": [ { "id": "d782ac80-289a-46a8-bab2-78a2999f5fd0", "name": "List workspace-available trials", "request": { "name": "List workspace-available trials", "description": { "content": "Retrieves Security Copilot trial offers available to the current workspace. The captured tenant returned an empty list.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "availabletrials" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "82487485-e839-4490-9083-a51c0e37bba8", "name": "Available trials returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "availabletrials" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"content\": \"\",\n \"value\": [\n {\n \"key_0\": 8702\n },\n {\n \"key_0\": \"string\"\n }\n ],\n \"nextLink\": \"string\",\n \"count\": 4571\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "sessions", "description": "", "item": [ { "id": "3431ba85-9dfd-492f-8646-3814302cabf9", "name": "List recent Security Copilot sessions", "request": { "name": "List recent Security Copilot sessions", "description": { "content": "Retrieves recent sessions shown in the home and history experiences.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "sessions" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Maximum number of recent sessions to return.", "type": "text/plain" }, "key": "limit", "value": "4" }, { "disabled": false, "description": { "content": "Session field used for ordering.", "type": "text/plain" }, "key": "sortBy", "value": "UpdatedAt" }, { "disabled": false, "description": { "content": "Sort direction for the session list.", "type": "text/plain" }, "key": "sortDirection", "value": "desc" }, { "disabled": false, "description": { "content": "Whether paginated session results should be returned.", "type": "text/plain" }, "key": "enablePagination", "value": "true" } ], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "c6417180-c4ab-4cde-af72-27efc7b0fd7a", "name": "Session list returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "sessions" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Maximum number of recent sessions to return.", "type": "text/plain" }, "key": "limit", "value": "4" }, { "disabled": false, "description": { "content": "Session field used for ordering.", "type": "text/plain" }, "key": "sortBy", "value": "UpdatedAt" }, { "disabled": false, "description": { "content": "Sort direction for the session list.", "type": "text/plain" }, "key": "sortDirection", "value": "desc" }, { "disabled": false, "description": { "content": "Whether paginated session results should be returned.", "type": "text/plain" }, "key": "enablePagination", "value": "true" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "promptbooks", "description": "", "item": [ { "id": "8b3d09f6-9d59-41f2-97b9-4c2ae1cd4287", "name": "List promptbooks", "request": { "name": "List promptbooks", "description": { "content": "Retrieves promptbooks available to the current workspace and portal experience.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "promptbooks" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "2f70648b-1a36-4c5c-8489-906c3135f695", "name": "Promptbooks returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "promptbooks" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"content\": \"\",\n \"value\": [\n {\n \"key_0\": 8702\n },\n {\n \"key_0\": \"string\"\n }\n ],\n \"nextLink\": \"string\",\n \"count\": 4571\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "agents", "description": "", "item": [ { "id": "9d717f4e-6ee5-4001-9e63-e549e47dafc7", "name": "List agents", "request": { "name": "List agents", "description": { "content": "Retrieves Security Copilot agents for the requested scope.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "agents" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Scope whose agents should be listed. (This can only be one of User,Workspace)", "type": "text/plain" }, "key": "scope", "value": "Workspace" }, { "disabled": false, "description": { "content": "Whether to expand related agent details in the response.", "type": "text/plain" }, "key": "expand", "value": "true" } ], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "af9e20fb-3913-4f5b-8ebc-0fcd39f18955", "name": "Agent list returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "agents" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Scope whose agents should be listed. (This can only be one of User,Workspace)", "type": "text/plain" }, "key": "scope", "value": "Workspace" }, { "disabled": false, "description": { "content": "Whether to expand related agent details in the response.", "type": "text/plain" }, "key": "expand", "value": "true" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "agentdefinitions", "description": "", "item": [ { "id": "9d529ea3-e3fb-410e-8faa-30ebd3d545be", "name": "List agent definitions", "request": { "name": "List agent definitions", "description": { "content": "Retrieves agent definitions used to populate the Agents catalog and setup surfaces.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "agentdefinitions" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Scope whose agent definitions should be returned.", "type": "text/plain" }, "key": "scope", "value": "User" } ], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "675425f4-fa77-4762-9992-63c9a3eef7d5", "name": "Agent definitions returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "agentdefinitions" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Scope whose agent definitions should be returned.", "type": "text/plain" }, "key": "scope", "value": "User" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "[\n {\n \"key_0\": 6979,\n \"key_1\": false,\n \"key_2\": 5030\n },\n {\n \"key_0\": false,\n \"key_1\": 1281.3199896579354,\n \"key_2\": 2787.746353205348\n }\n]", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "prompt-suggestions", "description": "", "item": [ { "name": "personas", "description": "", "item": [ { "id": "6843348c-10bb-487e-bdb0-4fc4e218299b", "name": "Get persona-scoped suggested prompts", "request": { "name": "Get persona-scoped suggested prompts", "description": { "content": "Retrieves home-page suggested prompts filtered by persona and optional skillset context.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "prompt-suggestions", "personas" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "JSON-encoded persona filter array.", "type": "text/plain" }, "key": "personasJson", "value": "[]" }, { "disabled": false, "description": { "content": "JSON-encoded skillset filter array.", "type": "text/plain" }, "key": "skillsetsJson", "value": "[]" } ], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "f7eefdbd-921d-4746-b15b-79d42b824e3e", "name": "Suggested prompts returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "prompt-suggestions", "personas" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "JSON-encoded persona filter array.", "type": "text/plain" }, "key": "personasJson", "value": "[]" }, { "disabled": false, "description": { "content": "JSON-encoded skillset filter array.", "type": "text/plain" }, "key": "skillsetsJson", "value": "[]" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "skillsets", "description": "", "item": [ { "id": "d40b3ea4-e310-4315-817a-da392a3a3834", "name": "List skillsets and plugins", "request": { "name": "List skillsets and plugins", "description": { "content": "Retrieves the available skillsets and plugin-like capabilities shown in Promptbooks and Builder.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "skillsets" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "6cb2cffc-b8bd-4882-85a1-162ae7c0e828", "name": "Skillsets returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "skillsets" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"content\": \"\",\n \"value\": [\n {\n \"key_0\": 8702\n },\n {\n \"key_0\": \"string\"\n }\n ],\n \"nextLink\": \"string\",\n \"count\": 4571\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "configurations", "description": "", "item": [ { "id": "4f3bdee2-75c7-4df4-8344-9053feeae600", "name": "List skillset configurations", "request": { "name": "List skillset configurations", "description": { "content": "Retrieves saved skillset configuration and auth metadata used by Builder onboarding and setup flows.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "skillsets", "configurations" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Scope whose skillset configuration records should be returned. (This can only be one of Workspace,UserWorkspace)", "type": "text/plain" }, "key": "scope", "value": "UserWorkspace" } ], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "4167c92f-af36-4632-9f42-03600e5f3083", "name": "Skillset configurations returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "skillsets", "configurations" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Scope whose skillset configuration records should be returned. (This can only be one of Workspace,UserWorkspace)", "type": "text/plain" }, "key": "scope", "value": "UserWorkspace" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"content\": \"\",\n \"value\": [\n {\n \"key_0\": 8702\n },\n {\n \"key_0\": \"string\"\n }\n ],\n \"nextLink\": \"string\",\n \"count\": 4571\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "checkRequirements", "description": "", "item": [ { "id": "fa200431-0124-4714-a4c7-b5fd6e0ac068", "name": "Check builder requirements for skillsets", "request": { "name": "Check builder requirements for skillsets", "description": { "content": "Retrieves builder prerequisite and missing-auth checks for skillsets before setup or agent creation proceeds.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "skillsets", "checkRequirements" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "5d9291f5-7925-46b4-b3d1-2365d3368e31", "name": "Skillset requirement checks returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "skillsets", "checkRequirements" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"content\": \"\",\n \"value\": [\n {\n \"key_0\": 8702\n },\n {\n \"key_0\": \"string\"\n }\n ],\n \"nextLink\": \"string\",\n \"count\": 4571\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "{skillsetName}", "description": "", "item": [ { "name": "skills", "description": "", "item": [ { "id": "583834f6-a2ae-469a-b167-9fc856df757b", "name": "List skills for a skillset", "request": { "name": "List skills for a skillset", "description": { "content": "Retrieves the skills exposed by a specific Security Copilot skillset. Confirmed live for many\nskillsets, including `Entra`, `Sentinel`, `Purview`, `M365`, `NL2API.Assistant`,\n`CodeExecutor`, `Investigation`, and `MCP.Sentinel`.\n", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "skillsets", ":skillsetName", "skills" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Whether hidden skills should be included.", "type": "text/plain" }, "key": "includeHidden", "value": "true" } ], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } }, { "type": "any", "value": "Entra", "key": "skillsetName", "disabled": false, "description": { "content": "(Required) Security Copilot skillset identifier.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "06864cac-46d5-4c90-9133-dee4e7e9cd61", "name": "Skillset skills returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "workspaces", ":workspaceName", "securitycopilot", "skillsets", ":skillsetName", "skills" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Whether hidden skills should be included.", "type": "text/plain" }, "key": "includeHidden", "value": "true" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" }, { "disabled": false, "description": { "content": "(Required) Security Copilot skillset identifier.", "type": "text/plain" }, "type": "any", "value": "Entra", "key": "skillsetName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"content\": \"\",\n \"value\": [\n {\n \"key_0\": 8702\n },\n {\n \"key_0\": \"string\"\n }\n ],\n \"nextLink\": \"string\",\n \"count\": 4571\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] } ] } ] } ] }, { "name": "policystore", "description": "", "item": [ { "name": "workspaces", "description": "", "item": [ { "name": "{workspaceName}", "description": "", "item": [ { "name": "workspacePolicy", "description": "", "item": [ { "id": "7d972d21-be59-4362-8284-d71d8462abba", "name": "Get workspace policy document", "request": { "name": "Get workspace policy document", "description": { "content": "Retrieves the workspace policy document used by the Manage workspaces page to show role and permission assignments.", "type": "text/plain" }, "url": { "path": [ "pods", ":podId", "policystore", "workspaces", ":workspaceName", "workspacePolicy" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on workspace policy reads.", "type": "text/plain" }, "key": "api-version", "value": "2024-01-01-preview" } ], "variable": [ { "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId", "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" } }, { "type": "any", "value": "security-copilot", "key": "workspaceName", "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "0c9b700f-e0a3-47d9-8c0b-b7e3bb63a4f9", "name": "Workspace policy returned successfully.", "originalRequest": { "url": { "path": [ "pods", ":podId", "policystore", "workspaces", ":workspaceName", "workspacePolicy" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Preview API version observed on workspace policy reads.", "type": "text/plain" }, "key": "api-version", "value": "2024-01-01-preview" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) Regional Security Platform pod identifier for the active account.", "type": "text/plain" }, "type": "any", "value": "11111111-2222-3333-4444-555555555555", "key": "podId" }, { "disabled": false, "description": { "content": "(Required) Security Copilot workspace name.", "type": "text/plain" }, "type": "any", "value": "security-copilot", "key": "workspaceName" } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7674.619337764436,\n \"key_1\": false,\n \"key_2\": 4293\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] } ] } ] } ] }, { "name": "config", "description": "", "item": [ { "name": "v1", "description": "", "item": [ { "name": "SecurityMarketplaceClient", "description": "", "item": [ { "name": "1.0.0", "description": "", "item": [ { "id": "dcc1d6c8-21e0-42e6-bf46-a7c39c8960b8", "name": "Get Security Store client configuration", "request": { "name": "Get Security Store client configuration", "description": { "content": "Retrieves ECS configuration used by the Security Store page, including marketplace search and ranking settings.", "type": "text/plain" }, "url": { "path": [ "config", "v1", "SecurityMarketplaceClient", "1.0.0" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Security service family whose Security Store client settings should be loaded.", "type": "text/plain" }, "key": "SecurityService", "value": "default" }, { "disabled": false, "description": { "content": "(Required) Deployment environment whose Security Store client settings should be loaded.", "type": "text/plain" }, "key": "Environment", "value": "Prod" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "9d0e539f-8fd1-4ea6-8f7b-fa062f3a1db2", "name": "Store client configuration returned successfully.", "originalRequest": { "url": { "path": [ "config", "v1", "SecurityMarketplaceClient", "1.0.0" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Security service family whose Security Store client settings should be loaded.", "type": "text/plain" }, "key": "SecurityService", "value": "default" }, { "disabled": false, "description": { "content": "(Required) Deployment environment whose Security Store client settings should be loaded.", "type": "text/plain" }, "key": "Environment", "value": "Prod" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": 7714\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] } ] }, { "name": "catalog", "description": "", "item": [ { "name": "search", "description": "", "item": [ { "id": "5d29991a-261c-4cc3-85bf-1938de93aacc", "name": "Search Security Store catalog", "request": { "name": "Search Security Store catalog", "description": { "content": "Searches the Security Store catalog for agents and related marketplace offerings.", "type": "text/plain" }, "url": { "path": [ "catalog", "search" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Product capability filter used by the Security Store.", "type": "text/plain" }, "key": "productCapabilities", "value": "Agent" }, { "disabled": false, "description": { "content": "(Required) Catalog API version observed on Security Store search requests.", "type": "text/plain" }, "key": "api-version", "value": "2025-11-01" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "4684b69b-d08b-49d7-90f9-4b602f66da25", "name": "Catalog search results returned successfully.", "originalRequest": { "url": { "path": [ "catalog", "search" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Product capability filter used by the Security Store.", "type": "text/plain" }, "key": "productCapabilities", "value": "Agent" }, { "disabled": false, "description": { "content": "(Required) Catalog API version observed on Security Store search requests.", "type": "text/plain" }, "key": "api-version", "value": "2025-11-01" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_0\": false,\n \"key_1\": true\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ], "auth": { "type": "bearer", "bearer": [ { "type": "any", "value": "{{bearerToken}}", "key": "token" } ] }, "event": [], "variable": [ { "key": "baseUrl", "value": "https://api.securitycopilot.microsoft.com" } ], "info": { "_postman_id": "251aee80-db31-4a75-b21c-4ebfcedf385c", "name": "Security Copilot", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "description": { "content": "The Security Copilot API is used by the Microsoft Security Copilot portal (`securitycopilot.microsoft.com`)\nfor portal bootstrap, workspace provisioning, workspace and policy resolution, session and promptbook\ninventory, agent and builder experiences, and Security Store discovery.\n\nThe operations below were confirmed while browsing the Security Copilot portal with a real\nauthenticated Edge session. Live captures covered these surfaces:\n\n - Home\n - Agents\n - Promptbooks\n - Manage workspaces\n - Usage monitoring\n - Security Store\n - Build and Builder\n\nThe published scope intentionally focuses on Security Copilot-specific host families and excludes\ngeneric Entra login/token traffic, browser telemetry, and shared Azure Resource Manager discovery\nreads such as `GET /tenants` and `GET /subscriptions`.\n\nA safe write-shape capture was confirmed for `POST /provisioning/create`: opening the initial\ncreate-capacity flow and then canceling it produced `OperationWhatIfSuccess` without completing a\nreal provisioning submission.\n\nDocumentation and specifications have been provided on a best-efforts basis and may not be\n100% accurate.\n\n\nContact Support:\n Name: nodoc", "type": "text/plain" } } }