{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"id":"microsoft/graph-api","name":"Microsoft Graph API access","status":"researched","last_verified":null,"last_researched":"2026-10-25","disclaimer":"Plain-English summary of the provider’s rules and of what people report. Not legal advice.","terms":[{"kind":"rules_say","kind_label":"The rules say","severity":"red","severity_label":"Can get you banned","title":"No advertising use of Graph data","text":"You may not use or transfer data from Microsoft APIs, including aggregated, anonymised or derived data, for advertising or marketing (targeting or serving ads).","source_url":"https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use","source_title":"Terms of Use - Microsoft APIs","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"red","severity_label":"Can get you banned","title":"Do not scrape, over-collect or get around limits","text":"You may not scrape or build databases of API data beyond your app's intended scenario, request more than the minimum data or permissions, circumvent Microsoft's limits, or resell or sublicense API data. Violations can lead to suspension or termination.","source_url":"https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use","source_title":"Terms of Use - Microsoft APIs","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"red","severity_label":"Can get you banned","title":"Mail APIs are for sync and backup","text":"Unless customers expressly grant more, Outlook/Exchange mail APIs (including Graph mail) may only be used to sync or back up mail, calendar and contacts.","source_url":"https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use","source_title":"Terms of Use - Microsoft APIs","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"amber","severity_label":"Can cost money","title":"Data deletion and privacy duties","text":"Get consent before processing, keep stored data current, delete all data when a user leaves or uninstalls your app, and publish a privacy statement at least as protective as Microsoft's.","source_url":"https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use","source_title":"Terms of Use - Microsoft APIs","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"amber","severity_label":"Can cost money","title":"Breach reporting and audits","text":"Report vulnerabilities and data breaches involving the APIs to secure@microsoft.com, make no public statement without Microsoft's permission, and give Microsoft audit access (up to two full-featured instances) on request or risk losing access.","source_url":"https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use","source_title":"Terms of Use - Microsoft APIs","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"yellow","severity_label":"Worth knowing","title":"Application permissions are tenant-wide","text":"An app with an application permission such as Files.Read.All can read every matching item in the organisation; admins will scrutinise these requests.","source_url":"https://learn.microsoft.com/en-us/graph/permissions-overview","source_title":"Overview of Microsoft Graph permissions","accessed":"2026-10-25"},{"kind":"people_report","kind_label":"People report","severity":"yellow","severity_label":"Worth knowing","title":"Teams protected-API form retired","text":"Older guides send you to a Teams \"protected API\" request form. People report Microsoft retired that form and manual approval on 18 May 2023 [to verify for any API you plan to use].","source_url":"https://community.veeam.com/cloud-city-107/vb365-protected-teams-api-call-process-changes-4865","source_title":"VB365 protected Teams API call process changes (Veeam community)","accessed":"2026-10-25"}],"renewals":[],"pricing_notes":{"free_tier":null,"costs":"Metered APIs bill the linked Azure subscription; assignSensitivityLabel costs USD 0.00185 per call. Teams APIs are no longer metered (from 25 August 2025).","notes":"The API list on the metered page is short; other Graph APIs are not on it [to verify per API you use].","source_url":"https://learn.microsoft.com/en-us/graph/metered-api-list"},"guide_url":"https://verapli.com/guides/microsoft/graph-api"}