Email Security Connector
Copy for LLM
Copy page as Markdown for LLMs
View as Markdown
Open this page as Markdown
Open in ChatGPT
Get insights from ChatGPT
Open in Claude
Get insights from Claude

Query and interact with Email Security products.

API Reference

For full API documentation see the Email Security API Reference.

To create an integration with the Email Security connector, use the Create Integration API endpoint, using one of the provider configs below.

Ironscales (emailsecurity_ironscales)
Microsoft 365 Management Activity (emailsecurity_o365_management_activity)
Microsoft Defender for Office 365 (emailsecurity_defender_for_office)
Microsoft Exchange Online (emailsecurity_exchange_online)
Mimecast Cloud Gateway (emailsecurity_mimecast_cloud_gateway)
[MOCK] Microsoft Defender for Office 365 (emailsecurity_defender_for_office_mock)
[MOCK] Mimecast Cloud Gateway (emailsecurity_mimecast_cloud_gateway_mock)

API	Microsoft Defender	[MOCK] Microsoft Defender for Office 365	Microsoft Exchange Online	Ironscales	Mimecast Cloud Gateway	[MOCK] Mimecast Cloud Gateway	Microsoft 365 Management Activity
query_email_events	✅	✅	✅	❌	❌	❌	✅
get_threat_details	✅	✅	❌	✅	✅	✅	❌
query_threats	✅	✅	❌	✅	✅	✅	❌

API	Microsoft Defender	[MOCK] Microsoft Defender for Office 365	Microsoft Exchange Online	Ironscales	Mimecast Cloud Gateway	[MOCK] Mimecast Cloud Gateway	Microsoft 365 Management Activity
query_email_events	✅ [docs]	✅ [docs]	✅ [docs]	❌	❌	❌	✅ [docs]
query_threats	✅ [docs]	✅ [docs]	❌	✅ [docs]	✅ [docs]	✅ [docs]	❌