.DkNUKaKx_ZLAT4m.webp?dpl=dpl_Crv6NFYc4gRVqEEsmHdUK26mPGZB){kind=small}
Connectors / Security and compliance · HTTP Connector
Automate Microsoft Graph Security with Tray.ai
Update an alert, update an incident and update a control profile in Microsoft Graph Security.
Thanks — someone from our team will be in touch soon.
What can you do with Microsoft Graph Security on Tray.ai?
Microsoft Graph Security is the security part of the Microsoft Graph API, giving one place to read and update alerts, incidents, secure scores and eDiscovery cases from Microsoft security products. Tray.ai connects to Microsoft Graph Security through the HTTP Connector, so your workflows can call the Microsoft Graph Security API alongside the rest of your stack.
- List alerts every few minutes and open a ticket in your IT service desk for each high severity one.
- Update an incident with the ticket number once your security team picks it up in the help desk.
- Get a secure score weekly and post the trend to the security team in team chat.
- Connects through
- HTTP Connector
- Authentication
- OAuth 2.0
- Base URL
- https://graph.microsoft.com/v1.0/security
Set it up
Connect Microsoft Graph Security to Tray.ai
Each step uses Microsoft Graph Security's own API details, from its documentation.
Step 1
Sign in to Microsoft Graph Security with OAuth 2.0
Set up an OAuth 2.0 authentication with the client ID and secret of an OAuth app you register with Microsoft Graph Security. Sign in once and every step reads the token from there.
Step 2
Point the HTTP Client at the API
Add an HTTP Client step and use https://graph.microsoft.com/v1.0/security as the base URL. Or paste a cURL example from Microsoft Graph Security's API docs, and Tray.ai fills in the method, URL, and headers.
Step 3
Start with “List alerts”
It's one of 11 documented actions, under Alerts. The response comes back as data the next step can map into your other apps.
Step 4
Hand it to an AI agent
Wrap “Update an alert” and “List incidents” in workflows, and Tray.ai's Agent Gateway for MCP publishes them as governed tools Claude and other AI agents can call.
What the Microsoft Graph Security API covers
5 resources and 11 documented actions, each one a call the HTTP Connector can make from a Tray.ai workflow. Connecting it takes a few clicks: here's how.
Alerts
- List alerts
- Update an alert
Incidents
- List incidents
- Update an incident
Secure scores
- List secure scores
- Get a secure score
Secure score control profiles
- List control profiles
- Get a control profile
- Update a control profile
eDiscovery cases
- List eDiscovery cases
- List case operations
Checked against Microsoft Graph Security's own documentation on 2026-10-22
How Tray.ai makes this work
Microsoft Graph Security plugs into the whole Tray.ai platform
Intelligent Integration
Integrate and automate across 9,000+ apps, databases, APIs, and services with visual workflows, error handling, and observability.
Learn more →Agent Builder
Build AI agents that read, write, and take action in Microsoft Graph Security — with guardrails, audit, and human-in-the-loop.
Learn more →Agent Gateway for MCP
Expose Microsoft Graph Security actions as governed MCP tools — observable, rate-limited, authenticated.
Learn more →Tray Helix
Build apps on Microsoft Graph Security data with your AI assistant, then deploy, run, and govern them on Tray.ai.
Learn more →More security and compliance apps on Tray.ai
Dedicated connectors and other apps Tray.ai reaches in the same category. See every security and compliance connector →
Frequently asked questions
What can a Tray.ai workflow do in Microsoft Graph Security?
+
The Microsoft Graph Security API documents 11 actions across 5 resources (Alerts, Incidents, Secure scores, Secure score control profiles, eDiscovery cases). For example: List alerts; List incidents; List secure scores. A workflow can make any documented call through the HTTP Connector.
How does Tray.ai authenticate with Microsoft Graph Security?
+
The Microsoft Graph Security API uses OAuth 2.0. You save it once as a Tray.ai authentication, and the HTTP Connector adds it to every request.
See Microsoft Graph Security working against your stack.
We'll walk through a tailored demo with your systems plugged in.
Thanks — someone from our team will be in touch soon.