Explorer
The Explorer UI at /explorer/
Section titled “The Explorer UI at /explorer/”A Graph-Explorer-style web UI: delegated sign-in (MSAL.js), a sidebar reflected from the live
catalog, path + $filter autocomplete, a method dropdown with body-field chips reflected from
schemas.json, a JSON viewer, and a Reference mode that shows per-endpoint docs + curated
examples. Great for learning the API or poking at a tenant interactively. The whole UI is
reflection-driven - new endpoints appear automatically, no SPA edits.

Try: build a request with verb and URL, reflected query-param and body-field chips, and a live JSON response.

Reference: every route under an entity, with its required roles, backing cmdlets, parameters and curated examples.

Coverage: all 1,433 Exchange and Security and Compliance cmdlets cross-referenced against the API’s catalog, routes and allowlist.
Diagnostics (read-only, locked down)
Section titled “Diagnostics (read-only, locked down)”| Endpoint | Purpose |
|---|---|
GET /diag/cmdlet/{name}?identity=X&pocoType=Y |
runs the raw cmdlet and returns raw + typed + diff - proves the API isn’t silently hiding fields. Restricted to Get-* cmdlets. |
GET /diag/cmdlet-availability |
which allowlisted cmdlets are actually loadable on the connected tenant (capability-gap detection) |
GET /healthz · /readyz |
liveness · readiness (real per-slot pool health probe) |

