API surface
Fifty-seven endpoints, observed on the wire while the agent was built. This is not a published contract. Every row was read from a live network capture, classified, and assigned a semantic identifier reconciled against the authoritative Copilot Studio corpus.
How it was derived
1,249 total requests were observed across the sixteen audited surfaces. 611 were classified as functional — excluding static assets, telemetry, and authentication chatter. Those 611 resolve to 57 distinct endpoints across 11 functional domains and 7 hosts.
Response statuses across the functional set:
| Status | Count | Notes |
|---|---|---|
| 200 | 555 | |
| 404 | 35 | Mostly optional-resource probes |
| 500 | 9 | Includes the Teams channel-status failures |
| 405 | 6 | Method probes |
| 412 | 3 | Precondition failures |
| FAILED | 3 | Network-level failures |
The nine HTTP 500s matter. They are the evidence behind Phase 6 — the Teams channel reporting itself enabled while the server-side registration never completed.
The eleven domains
| Domain | Endpoints | Purpose |
|---|---|---|
agent-persistence | 8 | Create, read, update the agent record |
channels-teams-m365 | 9 | Teams and M365 channel management |
governance-dlp | 8 | Data loss prevention and policy evaluation |
evaluate | 7 | Test sets and evaluation runs |
agent-components-save | 6 | Per-rail-section component persistence |
platform-tenant | 6 | Tenant and environment metadata |
monitor-analytics | 4 | Runtime analytics |
model-and-features | 3 | Model catalog and feature flags |
identity-graph | 3 | Identity and Graph lookups |
publish | 2 | Publish v2 operations |
preview-runtime | 1 | Preview conversation runtime |
Hosts
Seven hosts served the functional traffic. The split between them — Dataverse owning what the agent is, the Island Gateway owning where it is reachable — is the structural cause of the Phase 6 Teams failure. See hosts for the full table and that analysis.
Endpoints
All 57 endpoints are on the endpoints page, filterable by domain, host, method, and confidence.
Corroborated against the corpus
Four observations matched the authoritative corpus exactly, which is the strongest available check on this map:
- The Island Gateway host pattern
powervamg.{region}.gateway.prod.island.powerapps.com. - The evaluation v2 path
.../makerevaluations/queries/generate?ApplyV2Migration=true. - The Dataverse
POST /api/data/v9.2/botscreate call with thePvaProvisioncreate model. - The
channels/msteams/app/statusHTTP 500 correlating with the ACP consent tenant gate.
The other 53 endpoints are observed but not independently matched. See ground truth for why that distinction matters and how to extend the map safely.