Microsoft Graph Identityprotection — identityProtection.riskyUser

naftiko: 1.0.0-alpha2
info:
  label: Microsoft Graph Identityprotection — identityProtection.riskyUser
  description: 'Microsoft Graph Identityprotection — identityProtection.riskyUser. 15 operations. Lead operation: Microsoft
    Graph List riskyUsers. Self-contained Naftiko capability covering one Microsoft Graph business surface.'
  tags:
  - Microsoft Graph
  - identityProtection.riskyUser
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    MICROSOFT_GRAPH_API_KEY: MICROSOFT_GRAPH_API_KEY
capability:
  consumes:
  - type: http
    namespace: identityprotection-identityprotection-riskyuser
    baseUri: ''
    description: Microsoft Graph Identityprotection — identityProtection.riskyUser business capability. Self-contained, no
      shared references.
    resources:
    - name: identityProtection-riskyUsers
      path: /identityProtection/riskyUsers
      operations:
      - name: identityprotectionlistriskyusers
        method: GET
        description: Microsoft Graph List riskyUsers
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: identityprotectioncreateriskyusers
        method: POST
        description: Microsoft Graph Create new navigation property to riskyUsers for identityProtection
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: identityProtection-riskyUsers-$count
      path: /identityProtection/riskyUsers/$count
      operations:
      - name: identityprotectionriskyusersgetcount2b7d
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: identityProtection-riskyUsers-confirmCompromised
      path: /identityProtection/riskyUsers/confirmCompromised
      operations:
      - name: identityprotectionriskyusersconfirmcompromised
        method: POST
        description: Microsoft Graph Invoke action confirmCompromised
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: identityProtection-riskyUsers-confirmSafe
      path: /identityProtection/riskyUsers/confirmSafe
      operations:
      - name: identityprotectionriskyusersconfirmsafe
        method: POST
        description: Microsoft Graph Invoke action confirmSafe
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: identityProtection-riskyUsers-dismiss
      path: /identityProtection/riskyUsers/dismiss
      operations:
      - name: identityprotectionriskyusersdismiss
        method: POST
        description: Microsoft Graph Invoke action dismiss
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: identityProtection-riskyUsers-riskyUser-id
      path: /identityProtection/riskyUsers/{riskyUser-id}
      operations:
      - name: identityprotectiongetriskyusers
        method: GET
        description: Microsoft Graph Get riskyUser
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: identityprotectionupdateriskyusers
        method: PATCH
        description: Microsoft Graph Update the navigation property riskyUsers in identityProtection
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: identityprotectiondeleteriskyusers
        method: DELETE
        description: Microsoft Graph Delete navigation property riskyUsers for identityProtection
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: identityProtection-riskyUsers-riskyUser-id-history
      path: /identityProtection/riskyUsers/{riskyUser-id}/history
      operations:
      - name: identityprotectionriskyuserslisthistory
        method: GET
        description: Microsoft Graph List history of riskyUser
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: identityprotectionriskyuserscreatehistory
        method: POST
        description: Microsoft Graph Create new navigation property to history for identityProtection
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: identityProtection-riskyUsers-riskyUser-id-history-$count
      path: /identityProtection/riskyUsers/{riskyUser-id}/history/$count
      operations:
      - name: identityprotectionriskyusershistorygetcount33a2
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: identityProtection-riskyUsers-riskyUser-id-history-riskyUserHistoryItem-id
      path: /identityProtection/riskyUsers/{riskyUser-id}/history/{riskyUserHistoryItem-id}
      operations:
      - name: identityprotectionriskyusersgethistory
        method: GET
        description: Microsoft Graph Get history from identityProtection
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: identityprotectionriskyusersupdatehistory
        method: PATCH
        description: Microsoft Graph Update the navigation property history in identityProtection
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: identityprotectionriskyusersdeletehistory
        method: DELETE
        description: Microsoft Graph Delete navigation property history for identityProtection
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
  exposes:
  - type: rest
    namespace: identityprotection-identityprotection-riskyuser-rest
    port: 8080
    description: REST adapter for Microsoft Graph Identityprotection — identityProtection.riskyUser. One Spectral-compliant
      resource per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/identityprotection/riskyusers
      name: identityprotection-riskyusers
      description: REST surface for identityProtection-riskyUsers.
      operations:
      - method: GET
        name: identityprotectionlistriskyusers
        description: Microsoft Graph List riskyUsers
        call: identityprotection-identityprotection-riskyuser.identityprotectionlistriskyusers
        with:
          $orderby: rest.$orderby
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: identityprotectioncreateriskyusers
        description: Microsoft Graph Create new navigation property to riskyUsers for identityProtection
        call: identityprotection-identityprotection-riskyuser.identityprotectioncreateriskyusers
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/identityprotection/riskyusers/count
      name: identityprotection-riskyusers-count
      description: REST surface for identityProtection-riskyUsers-$count.
      operations:
      - method: GET
        name: identityprotectionriskyusersgetcount2b7d
        description: Microsoft Graph Get the number of the resource
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersgetcount2b7d
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/identityprotection/riskyusers/confirmcompromised
      name: identityprotection-riskyusers-confirmcompromised
      description: REST surface for identityProtection-riskyUsers-confirmCompromised.
      operations:
      - method: POST
        name: identityprotectionriskyusersconfirmcompromised
        description: Microsoft Graph Invoke action confirmCompromised
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersconfirmcompromised
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/identityprotection/riskyusers/confirmsafe
      name: identityprotection-riskyusers-confirmsafe
      description: REST surface for identityProtection-riskyUsers-confirmSafe.
      operations:
      - method: POST
        name: identityprotectionriskyusersconfirmsafe
        description: Microsoft Graph Invoke action confirmSafe
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersconfirmsafe
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/identityprotection/riskyusers/dismiss
      name: identityprotection-riskyusers-dismiss
      description: REST surface for identityProtection-riskyUsers-dismiss.
      operations:
      - method: POST
        name: identityprotectionriskyusersdismiss
        description: Microsoft Graph Invoke action dismiss
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersdismiss
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/identityprotection/riskyusers/{riskyuser-id}
      name: identityprotection-riskyusers-riskyuser-id
      description: REST surface for identityProtection-riskyUsers-riskyUser-id.
      operations:
      - method: GET
        name: identityprotectiongetriskyusers
        description: Microsoft Graph Get riskyUser
        call: identityprotection-identityprotection-riskyuser.identityprotectiongetriskyusers
        with:
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: identityprotectionupdateriskyusers
        description: Microsoft Graph Update the navigation property riskyUsers in identityProtection
        call: identityprotection-identityprotection-riskyuser.identityprotectionupdateriskyusers
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: identityprotectiondeleteriskyusers
        description: Microsoft Graph Delete navigation property riskyUsers for identityProtection
        call: identityprotection-identityprotection-riskyuser.identityprotectiondeleteriskyusers
        with:
          If-Match: rest.If-Match
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/identityprotection/riskyusers/{riskyuser-id}/history
      name: identityprotection-riskyusers-riskyuser-id-history
      description: REST surface for identityProtection-riskyUsers-riskyUser-id-history.
      operations:
      - method: GET
        name: identityprotectionriskyuserslisthistory
        description: Microsoft Graph List history of riskyUser
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyuserslisthistory
        with:
          $orderby: rest.$orderby
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: identityprotectionriskyuserscreatehistory
        description: Microsoft Graph Create new navigation property to history for identityProtection
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyuserscreatehistory
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/identityprotection/riskyusers/{riskyuser-id}/history/count
      name: identityprotection-riskyusers-riskyuser-id-history-count
      description: REST surface for identityProtection-riskyUsers-riskyUser-id-history-$count.
      operations:
      - method: GET
        name: identityprotectionriskyusershistorygetcount33a2
        description: Microsoft Graph Get the number of the resource
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusershistorygetcount33a2
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/identityprotection/riskyusers/{riskyuser-id}/history/{riskyuserhistoryitem-id}
      name: identityprotection-riskyusers-riskyuser-id-history-riskyuserhistoryitem-id
      description: REST surface for identityProtection-riskyUsers-riskyUser-id-history-riskyUserHistoryItem-id.
      operations:
      - method: GET
        name: identityprotectionriskyusersgethistory
        description: Microsoft Graph Get history from identityProtection
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersgethistory
        with:
          $select: rest.$select
          $expand: rest.$expand
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: identityprotectionriskyusersupdatehistory
        description: Microsoft Graph Update the navigation property history in identityProtection
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersupdatehistory
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: identityprotectionriskyusersdeletehistory
        description: Microsoft Graph Delete navigation property history for identityProtection
        call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersdeletehistory
        with:
          If-Match: rest.If-Match
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: identityprotection-identityprotection-riskyuser-mcp
    port: 9090
    transport: http
    description: MCP adapter for Microsoft Graph Identityprotection — identityProtection.riskyUser. One tool per consumed
      operation, routed inline through this capability's consumes block.
    tools:
    - name: microsoft-graph-list-riskyusers
      description: Microsoft Graph List riskyUsers
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectionlistriskyusers
      with:
        $orderby: tools.$orderby
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-create-new-navigation
      description: Microsoft Graph Create new navigation property to riskyUsers for identityProtection
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: identityprotection-identityprotection-riskyuser.identityprotectioncreateriskyusers
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-get-number-resource
      description: Microsoft Graph Get the number of the resource
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersgetcount2b7d
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-invoke-action-confirmcompromised
      description: Microsoft Graph Invoke action confirmCompromised
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersconfirmcompromised
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-invoke-action-confirmsafe
      description: Microsoft Graph Invoke action confirmSafe
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersconfirmsafe
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-invoke-action-dismiss
      description: Microsoft Graph Invoke action dismiss
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersdismiss
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-get-riskyuser
      description: Microsoft Graph Get riskyUser
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectiongetriskyusers
      with:
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-update-navigation-property
      description: Microsoft Graph Update the navigation property riskyUsers in identityProtection
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectionupdateriskyusers
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-delete-navigation-property
      description: Microsoft Graph Delete navigation property riskyUsers for identityProtection
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectiondeleteriskyusers
      with:
        If-Match: tools.If-Match
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-list-history-riskyuser
      description: Microsoft Graph List history of riskyUser
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyuserslisthistory
      with:
        $orderby: tools.$orderby
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-create-new-navigation-2
      description: Microsoft Graph Create new navigation property to history for identityProtection
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyuserscreatehistory
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-get-number-resource-2
      description: Microsoft Graph Get the number of the resource
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusershistorygetcount33a2
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-get-history-identityprotection
      description: Microsoft Graph Get history from identityProtection
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersgethistory
      with:
        $select: tools.$select
        $expand: tools.$expand
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-update-navigation-property-2
      description: Microsoft Graph Update the navigation property history in identityProtection
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersupdatehistory
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: microsoft-graph-delete-navigation-property-2
      description: Microsoft Graph Delete navigation property history for identityProtection
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: identityprotection-identityprotection-riskyuser.identityprotectionriskyusersdeletehistory
      with:
        If-Match: tools.If-Match
      outputParameters:
      - type: object
        mapping: $.