Data & API
Static JSON/RSS, CORS-enabled, regenerated every 2 hours. Free to build on (attribution appreciated). Not affiliated with Microsoft.
RSS feeds
- /data/feed.xml — all recent changes
- security · exploited · defender · entra · breaking
- /data/feed.json — JSON Feed
Calendar & collections
- /data/deadlines.ics — obligation deadlines (CISA due dates, retirements, API removals) as an iCalendar feed; subscribe in Outlook/Google
- /breaking/graph/ — removed & deprecated Graph API surface · /deadlines/ · weekly briefings at
/weekly/<ISO-week>/ - /trends/ · /default-changes/ · /licensing-changes/ · /admin-controls/
Embeddable widgets
Drop a live list into any page (admin portal, MSP dashboard, blog, SharePoint). Supports ?products=Teams,Entra and ?limit=.
<iframe src="https://m365tracker.cloudidentity.se/embed/action/?products=Teams" width="380" height="420" title="M365 action required"></iframe>- Views: /embed/action/ · /embed/exploited/ · /embed/deadlines/
JSON (versioned — use these)
- /api/v1/changes.json — unified event log
- action · security · items · defender · entra · apichanges · stats · meta
Schema, types & provenance
- item.schema.json · event.schema.json — JSON Schema
- types.ts — TypeScript interfaces
- provenance.json — which fields are Microsoft's vs derived by the tracker (with the rule)
Incremental sync
- /api/v1/changes/latest.json — only the events from the most recent run; poll this (~every 2 h) instead of refetching everything
- /api/v1/changes/index.json → daily buckets at
/api/v1/changes/<YYYY-MM-DD>.json(last 14 days)
Schema is versioned via meta.schemaVersion (currently 2); meta.sourceHealth + meta.cadenceHours report per-source freshness. Each event has type, transitions[], diff (sentence segments), diffSummary, impact/impactReason, urgency, deadline ({type,date,precision,source,action,obligation,label}), applies (cloud / on-prem / hybrid), classifications[] ({type,confidence,evidence} — derived, confidence-scored), and security fields (cve, severity, cvss, epss, exploited, kev, kevDueDate). Every change also has a permalink at /item/<id>.html.