Optional Settings

Setting

What It Does

Default

apiBaseUrl

Defender API endpoint

https://api.securitycenter.microsoft.com

The OAuth2 login URL and scope are derived automatically from apiBaseUrl — you do not need to set them separately.

For better performance, set apiBaseUrl to a server geographically closer to your deployment:

Note: Only the official Microsoft Defender API endpoints listed above are accepted. Custom or proxy URLs are not supported and will be rejected at startup.