Microsoft Defender for Endpoint

What Control Center uses

Threats, agent health, isolating devices and remediation.

Listed under Endpoint security.

What you need

A Microsoft Entra app registration. Use your region’s API address.

Also have ready:

• An admin sign-in for Microsoft Defender for Endpoint, with permission to create an API key or register an app.
• A Microsoft Defender for Endpoint plan that includes API access.
• Your region or instance address, if Microsoft Defender for Endpoint uses one.

API documentation

Public docs: anyone can read them.

Connect it with your AI

Have your AI walk you through it, from this page and the vendor’s own docs.

Prompt for Microsoft Defender for Endpoint

Copy promptChatGPTClaudeCopilot

Read https://www.resultsiq.ai/docs/tools/defender/index.md and the vendor's API docs at https://learn.microsoft.com/defender-endpoint/api/apis-intro .

I'm connecting Microsoft Defender for Endpoint to ResultsIQ Control Center for my MSP. Take me through getting the access it needs:
1. First check what we need: the right Microsoft Defender for Endpoint plan, an admin sign-in, and our region or instance address if it uses one.
2. Then tell me exactly where to go in Microsoft Defender for Endpoint and what to create, one step at a time. Wait for me before the next step.

Use only those sources, and say when they don't cover something. Never ask me for the API key or password itself: I enter those in Control Center, not in this chat.

In Control Center

When your onboarding opens, you add Microsoft Defender for Endpoint in Control Center with that access, then choose which clients it covers and which API operations it can use. The key goes in Control Center’s vault, never in a chat.

Step-by-step screens for this connection are coming to this page. Until then, How connections work covers the rules every connection follows.

Product names belong to their owners. Listing a tool shows that Control Center can work with it, not a partnership or endorsement. Vendors change their APIs and plans, so their own docs are the final word. This page was checked against the vendor’s own site in November 2026.