Skip to main content

How to integrate Microsoft Copilot with Defense.com Threat API

Learn how to integrate Microsoft Copilot with the Defense.com Threat API to enhance your threat reporting and management capabilities.

Written by Alan Butcher

Before you begin

Make sure you have the following before starting:

  • Admin access to Microsoft Copilot Studio

  • Admin access to Microsoft Power Apps

  • An active Defense.com account with API access (Company Admin role)

Generating your Defense.com API token

  1. Log in to your Defense.com account as a Company Admin.

  2. Select Account from the navigation on the left-hand side.

  3. Next, click API Keys.

  4. In the top-right-hand corner, click + Create API Key.

  5. Complete the API Key form:

    • Label — give it a clear name, for example: Copilot Integration

    • Expires at — set an expiry date appropriate for your organisation

    • Scope — select Read

  6. Click Create API key.

  7. Your new API key will be displayed. Make sure you copy and save your new key as you won't be able to access it again.

Add the MCP server in Microsoft Copilot Studio

  1. Go to Microsoft Copilot Studio.

  2. Navigate to Agents → Create new agent.

  3. Give your agent a name.

  4. Click Tools on the right-hand side.

  5. Click Add → Model Context Protocol.

  6. Complete the form with the following details:

    • Name — Defense.com threats (or your preferred name)

    • Description — a short description of what the agent will do, for example: Query Defense.com threat data

    • Server URL — https://mcp.defense.com/mcp

    • Authentication — select API Key

    • Parameter type — select Header

    • Header name — defense-api-key

    • Key value — paste in the Defense.com API key you copied earlier

  7. Click Add and wait for the connection to be established.

  8. A new window will appear, prompting you to set up the connection.

  9. Click Connection - Not connected → Create new connection.

  10. Paste your API key again when prompted, then click Add.

  11. Your tools panel should now show the Defense.com MCP server as connected.

  12. Click Save. If the Save button is not clickable, click back on the agent tab on the left — you will be prompted to save. Once saved, you can return to the agent.

And that's it! You've now integrated the Defense.com Threat API with Microsoft Copilot 🎉

Did this answer your question?