Skip to main content

Endpoints

All 57 endpoints observed during the audit, filterable by domain, host, method, and confidence.

Use the facets to narrow. The table is sorted by observed request count, so the endpoints the application leans on hardest appear first.

57 of 57 endpoints
MethodHostPathRequests ↓Semantic idPurposeConfidence
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/environments/Default-{id}/bots/{id}/publishv2-operations217cs:bm:publish:getPoll publish operation status (long-poll; dominant request by volume).CONFIRMED
GETorgd1da6e38.crm.dynamics.com/api/data/v9.2/bots({key})59cs:dv:v9:bots:getLoad the agent (bot) record.CONFIRMED
POSTpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/environments/Default-{id}/bots/{id}/content/botcomponents41cs:bm:botcomponents:postCreate/save agent components (instructions, knowledge, skills, tools, IQ).CONFIRMED
GETdefault6b104499c49f45dcb3a2df95efd6ee.b4.environment.api.powerplatform.com/copilotstudio/agents/{id}/channels/m365/link22cs:env:channels-m365:getM365 channel link status.CONFIRMED
GETapi.bap.microsoft.com/providers/Microsoft.BusinessAppPlatform/environments22cs:bap:environments:getEnvironment list (env switcher).CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/channels/msteams18cs:bm:channels-msteams:getTeams channel state.CONFIRMED
GETorgd1da6e38.crm.dynamics.com/api/data/v9.2/bots13cs:dv:v9:bots:getList bots in environment.CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/channels/msteams/app12cs:bm:channels-msteams:getTeams app registration.CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/channels/msteams/app/status12cs:bm:channels-msteams:getTeams app status — returns 500 in this tenant (ACP consent gate).CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v2/environments/Default-{id}/bots/{id}/makerevaluations10cs:bm:v2:makerevaluations:getList maker evaluation runs.CONFIRMED
GETapi.bap.microsoft.com/providers/Microsoft.BusinessAppPlatform/environments/Default-{id}10cs:bap:environments:getCurrent environment metadata.CONFIRMED
GETorgd1da6e38.crm.dynamics.com/api/data/v9.2/WhoAmI9cs:dv:v9:dataverse-meta:getResolve current Dataverse user.CONFIRMED
POSTpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/environments/Default-{id}/bots/{id}/publishv2-operations9cs:bm:publish:postStart a publish operation (inline publish, no confirm dialog).CONFIRMED
POSTpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v2/environments/Default-{id}/bots/{id}/makerevaluations9cs:bm:v2:makerevaluations:postCreate/start an evaluation run.CONFIRMED
POSTdefault6b104499c49f45dcb3a2df95efd6ee.b4.environment.api.powerplatform.com/powerautomate/operationGroups8cs:env:connectivity:postPower Automate operation groups (tool/workflow picker).CONFIRMED
GETorgd1da6e38.crm.dynamics.com/api/data/v9.2/solutions7cs:dv:v9:dataverse-meta:getList/resolve owning solution.CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/environments/Default-{id}/connectorDataPolicy7cs:bm:dlp:getConnector data-loss-prevention policy.CONFIRMED
POSTapi.bap.microsoft.com/providers/Microsoft.BusinessAppPlatform/listTenantSettings7cs:bap:environments:postTenant settings.CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/environments/Default-{id}/bootstrap-settings6cs:bm:settings:getBootstrap maker session/feature flags.CONFIRMED
PUTpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/environments/Default-{id}/bots/{id}/content/botcomponents6cs:bm:botcomponents:putUpdate existing agent component.CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v2/environments/Default-{id}/bots/{id}/makerevaluations/testsets6cs:bm:v2:makerevaluations:getList test sets (e.g. 'Ray Knowledge Eval - 6Q').CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v2/environments/Default-{id}/bots/{id}/makerevaluations/{id}/details6cs:bm:v2:makerevaluations:getEvaluation run details/results grid.CONFIRMED
GETorgd1da6e38.crm.dynamics.com/api/data/v9.2/cds_userpreferredsolutions5cs:dv:v9:dataverse-meta:getResolve maker's preferred solution.CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/languages5cs:bm:settings:getSupported authoring languages (settings).CONFIRMED
GETdefault6b104499c49f45dcb3a2df95efd6ee.b4.environment.api.powerplatform.com/connectivity/connectors/shared_microsoftcopilotstudio/connections5cs:env:connectivity:getConnector connections for tools.CONFIRMED
GETdefault6b104499c49f45dcb3a2df95efd6ee.b4.environment.api.powerplatform.com/copilotstudio/agents/{id}/channels/m3655cs:env:channels-m365:getM365 channel config.CONFIRMED
POSTdefault6b104499c49f45dcb3a2df95efd6ee.b4.environment.api.powerplatform.com/powerautomate/operations4cs:env:connectivity:postPower Automate operations (tool/workflow picker).CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/chatbotmanagement/tenants/{id}/environments/Default-{id}/api/featureSettings/modelSettings/v24cs:bm:settings:getAvailable prompt models (e.g. Claude Sonnet 4.6).CONFIRMED
PUTpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/channels/msteams/app/save4cs:bm:channels-msteams:putSave Teams app registration.CONFIRMED
GETpowervamg.us-il106.gateway.prod.island.powerapps.com/api/botmanagement/v1/environments/Default-{id}/bots/{id}/dlpstatus4cs:bm:dlp:getAgent DLP status.CONFIRMED
Page 1 of 2

Reading a row​

method and path are exactly as observed. Path segments that were identifiers have been left concrete rather than templated, so a path may contain the specific agent or environment id used in this build.

semanticId follows {namespace}:{surface}:{group}:{operation}, described in full on the naming schema page. Namespaces: cs Copilot Studio platform, as local kit, ac cards, lt tiles, plus evidence and dl for audit-side records. Surfaces: cs:dv Dataverse, cs:bm Bot Management and Island Gateway, cs:env, cs:bap, cs:runtime, cs:graph.

count is how many times the endpoint was observed across the audit. It is a measure of how chatty the application is, not a rate limit or a quota.

confidence is CONFIRMED on every row, because every row came from a live network capture rather than from documentation.

Domains​

DomainEndpointsWhat it does
agent-persistence8Create, read, and update the agent record in Dataverse
channels-teams-m3659Teams and M365 channel registration and status
governance-dlp8Data loss prevention and policy evaluation
evaluate7Test sets, evaluation runs, and result retrieval
agent-components-save6Per-section persistence for the right rail
platform-tenant6Tenant and environment metadata
monitor-analytics4Runtime analytics, formerly Monitor
model-and-features3Model catalog and feature flags
identity-graph3Identity and Graph lookups
publish2Publish v2 operations
preview-runtime1Preview conversation runtime

Two things stand out in that distribution.

governance-dlp is larger than publish and preview-runtime combined. Policy evaluation runs continuously in the background, not only at publish time. Any automation that assumes governance is a publish-time gate will be surprised.

agent-components-save is separate from agent-persistence. Right-rail sections do not save through the same path as the agent record. This is why the save button can succeed while an individual section silently does not persist — they are different requests with different failure modes.

Notable endpoints​

POST /api/data/v9.2/bots — the create call, using the PvaProvision create model. This is the request that mints the agent id. Everything downstream keys off the id it returns, which is why Publish, Share, and Evaluate are inert until the first save completes.

POST .../publishv2-operations — Coral publishes inline with no confirmation dialog. The POST returns an operation handle, and the client long-polls it. There is no modal to dismiss and no explicit confirmation step, which is a genuine behavioural difference from the classic runtime.

GET /api/botmanagement/v1/channels/msteams/app/status — returned HTTP 500 on every publish attempt. Nine of the 611 functional requests returned 500, and these account for most of them. See hosts for why this failure is invisible in the UI.

.../makerevaluations/queries/generate?ApplyV2Migration=true — the v2 evaluation query path. The ApplyV2Migration query parameter is carried on the request, not negotiated. This path was corroborated exactly against the authoritative corpus.

What this map is not​

It is observed traffic, not a published contract. Specifically:

  • Absence is not evidence of absence. An endpoint not exercised during the audit does not appear here.
  • Request and response bodies were not exhaustively captured. Where a body shape is stated elsewhere in this wiki, it was read from a specific captured request.
  • Counts reflect this session's usage pattern. A different path through the UI produces different counts.
  • Status codes are what this environment returned under this identity, with this tenant's policy configuration.

The 35 requests that returned 404 are mostly optional-resource probes, where the client checks for a resource that may not exist and handles absence normally. They are not errors.

See ground truth for what was independently corroborated.