{"openapi":"3.1.0","info":{"title":"Microsoft Intune Config (BYOK) API","version":"0.1.0","description":"Microsoft Intune Config (BYOK) lets an AI assistant read your own Microsoft Intune Config data through the Microsoft Intune Config API with a key you supply (Microsoft Graph access token (an OAuth token valid for about an hour)). Read-only: 8 tools (get_managed_device_overview, list_compliance_policies, list_device_configurations, list_enrollment_configurations, list_device_categories,...\n\nEvery operation is read-only or compute-only. The same tools are available over MCP (streamable HTTP) at https://byok-graph-intune-config.connectorbay.com/mcp.","contact":{"name":"Unify Dynamics LLC","email":"agent@connectorbay.com","url":"https://connectorbay.com/byok-graph-intune-config/docs"},"termsOfService":"https://connectorbay.com/byok-graph-intune-config/terms"},"servers":[{"url":"https://byok-graph-intune-config.connectorbay.com"}],"externalDocs":{"url":"https://connectorbay.com/byok-graph-intune-config/docs"},"security":[{"upstreamKey":[]}],"components":{"securitySchemes":{"bearer":{"type":"http","scheme":"bearer","description":"Optional. A Pro API key raises rate limits; no credentials are required."},"upstreamKey":{"type":"apiKey","in":"header","name":"X-Upstream-Key","description":"Your own key for the service this connector wraps (bring your own key). Used for that one call only; never stored, logged or cached."}},"schemas":{"Error":{"type":"object","properties":{"ok":{"const":false},"error":{"type":"object"}}}}},"paths":{"/v1/tools/get_managed_device_overview":{"post":{"operationId":"get_managed_device_overview","summary":"Get tenant-wide Intune device counts: enrolled, MDM-enrolled, dual-enrolled, per operating system, and Exchange access s","description":"Get tenant-wide Intune device counts: enrolled, MDM-enrolled, dual-enrolled, per operating system, and Exchange access state. Needs DeviceManagementManagedDevices.Read.All. Use for \"How many devices are enrolled in Intune, by operating system\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{},"title":"get_managed_device_overviewArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_compliance_policies":{"post":{"operationId":"list_compliance_policies","summary":"List Intune device compliance policies with name, description, version and change times (assignments and settings are no","description":"List Intune device compliance policies with name, description, version and change times (assignments and settings are not returned). Needs DeviceManagementConfiguration.Read.All. Use for \"Which device compliance policies do we have in Intune\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"top":{"anyOf":[{"maximum":100,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"How many items to return (1 to 100). Only the first page is returned.","title":"Top"},"filter":{"anyOf":[{"maxLength":300,"type":"string"},{"type":"null"}],"default":null,"description":"Optional OData $filter expression, for example \"startswith(displayName,'Win')\".","title":"Filter"}},"title":"list_compliance_policiesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_device_configurations":{"post":{"operationId":"list_device_configurations","summary":"List Intune device configuration profiles with name, description, version and change times. Needs DeviceManagementConfig","description":"List Intune device configuration profiles with name, description, version and change times. Needs DeviceManagementConfiguration.Read.All. Use for \"Which configuration profiles are defined in Intune\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"top":{"anyOf":[{"maximum":100,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"How many items to return (1 to 100). Only the first page is returned.","title":"Top"},"filter":{"anyOf":[{"maxLength":300,"type":"string"},{"type":"null"}],"default":null,"description":"Optional OData $filter expression, for example \"startswith(displayName,'Win')\".","title":"Filter"}},"title":"list_device_configurationsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_enrollment_configurations":{"post":{"operationId":"list_enrollment_configurations","summary":"List Intune device enrollment restrictions and limits with priority, version and change times. Needs DeviceManagementSer","description":"List Intune device enrollment restrictions and limits with priority, version and change times. Needs DeviceManagementServiceConfig.Read.All. Use for \"What enrollment restrictions are configured in Intune\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"top":{"anyOf":[{"maximum":100,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"How many items to return (1 to 100). Only the first page is returned.","title":"Top"}},"title":"list_enrollment_configurationsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_device_categories":{"post":{"operationId":"list_device_categories","summary":"List the device categories admins can pick when enrolling devices. Needs DeviceManagementServiceConfig.Read.All. Use for","description":"List the device categories admins can pick when enrolling devices. Needs DeviceManagementServiceConfig.Read.All. Use for \"Which device categories exist in Intune\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"top":{"anyOf":[{"maximum":100,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"How many items to return (1 to 100). Only the first page is returned.","title":"Top"}},"title":"list_device_categoriesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_mobile_apps":{"post":{"operationId":"list_mobile_apps","summary":"List apps managed in Intune with name, publisher, publishing state, featured flag and times (icons and assignments are n","description":"List apps managed in Intune with name, publisher, publishing state, featured flag and times (icons and assignments are not returned). Needs DeviceManagementApps.Read.All. Use for \"Which apps are managed in Intune\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"top":{"anyOf":[{"maximum":100,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"How many items to return (1 to 100). Only the first page is returned.","title":"Top"},"filter":{"anyOf":[{"maxLength":300,"type":"string"},{"type":"null"}],"default":null,"description":"Optional OData $filter expression, for example \"startswith(displayName,'Win')\".","title":"Filter"}},"title":"list_mobile_appsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_role_definitions":{"post":{"operationId":"list_role_definitions","summary":"List Intune role-based access control roles with name, description and whether they are built in. Needs DeviceManagement","description":"List Intune role-based access control roles with name, description and whether they are built in. Needs DeviceManagementRBAC.Read.All. Use for \"Which Intune admin roles are defined\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"top":{"anyOf":[{"maximum":100,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"How many items to return (1 to 100). Only the first page is returned.","title":"Top"}},"title":"list_role_definitionsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_terms_and_conditions":{"post":{"operationId":"list_terms_and_conditions","summary":"List the terms and conditions users must accept to enroll in Intune with title, description, version and change times (b","description":"List the terms and conditions users must accept to enroll in Intune with title, description, version and change times (body text is not returned). Needs DeviceManagementServiceConfig.Read.All. Use for \"Which terms and conditions do users accept when enrolling in Intune\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"top":{"anyOf":[{"maximum":100,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"How many items to return (1 to 100). Only the first page is returned.","title":"Top"}},"title":"list_terms_and_conditionsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}}}}