Entra Applications Copilot Agent Spec 3.yml

EntraApplicationsCopilotAgentSpec3.yml

openapi: 3.0.4
info:
  title:
    Entra Workload ID Viewer API
  description: 
    This API provides endpoints to securely query and retrieve Workload Identity data from Microsoft Entra ID.
    Built on Azure Functions, the API enables to access information such as Workload IDs that are registered in own tenant or applications that are homed in another tenant.
  version: v1.0
servers:
  - url:
      https://sec-cop-entra-ea-az-func-frbwfchzajfccahv.eastus-01.azurewebsites.net
paths:
  /api/sec-cop-entra-ea-az-func-secrets:
    get:
      description: |
        This agent connects to Microsoft Entra ID and retrieves all application client secrets from App Registrations. It reports the application name, App ID, secret ID, expiry date, and whether each secret is valid, expired, or nearing expiry. Applications without secrets are ignored, keeping the results focused on those that require monitoring and renewal.
      operationId: Discover Entra ID Apps with Secrets
      parameters:
        - name: x-functions-key
          in: header
          schema:
            type: string
        - name: tenantId
          in: header
          schema:
            type: string
      responses:
        '200':
          description: OK
          headers:
            Request-Context:
              schema:
                type: string
          content:
            application/json:
              schema:
                type: array
                items:
                  type: object
                  properties:
                    AppName:
                      type: string
                    AppId:
                      type: string
                    ExpiryDate:
                      type: string
                    Status:
                      type: string                    
x-ms-generated-by:
  toolName: Dev Proxy
  toolVersion: 1.1.0