{
 "categories": [
  "endpoint-management",
  "enterprise"
 ],
 "deployment": "saas",
 "evidence": [
  {
   "date": "2026-08-16",
   "fact": "homepage",
   "note": "Microsoft defines Intune as a cloud endpoint-management service for enrolling, configuring, securing, updating, and monitoring devices and applications.",
   "source": "https://learn.microsoft.com/en-us/intune/fundamentals/what-is-intune",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "platforms",
   "note": "Intune supports Windows, macOS, Linux, iOS and iPadOS, Android, and additional managed-device platforms through its web admin center and service.",
   "source": "https://learn.microsoft.com/en-us/intune/fundamentals/what-is-intune",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "license",
   "note": "Intune is licensed through Plan 1, Plan 2, Suite, device-only subscriptions, and Microsoft 365 bundles; users and devices benefiting from API access generally require a license.",
   "source": "https://learn.microsoft.com/en-us/intune/fundamentals/licensing",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.api.exists",
   "note": "Microsoft exposes Intune devices, applications, policies, roles, audits, and administrative operations through Microsoft Graph.",
   "source": "https://learn.microsoft.com/en-us/graph/intune-concept-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.api.kinds[0]",
   "note": "Microsoft Graph provides REST APIs at the graph.microsoft.com endpoint for Intune and other Enterprise Mobility and Security services.",
   "source": "https://learn.microsoft.com/en-us/graph/overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.api.auth[0]",
   "note": "Delegated OAuth permissions let applications call Graph on behalf of a signed-in administrator within both the app's grants and the user's existing privileges.",
   "source": "https://learn.microsoft.com/en-us/graph/permissions-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.api.auth[1]",
   "note": "Unattended Graph applications can use the OAuth 2.0 client-credentials flow with administrator-consented application permissions.",
   "source": "https://learn.microsoft.com/en-us/graph/auth-v2-service",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.api.coverage",
   "note": "Intune Graph resources manage devices, applications, compliance, configuration, access controls, RBAC, audits, reporting, expenses, and remote actions.",
   "source": "https://learn.microsoft.com/en-us/graph/intune-concept-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.sdk",
   "note": "Microsoft publishes generated Graph SDKs with request builders, models, paging, batching, authentication, retry, redirect, and compression support.",
   "source": "https://learn.microsoft.com/en-us/graph/sdks/sdks-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.sdk.languages",
   "note": "Current Graph SDKs are available for C#, Go, Java, TypeScript and JavaScript, PHP, PowerShell, and Python.",
   "source": "https://learn.microsoft.com/en-us/graph/sdks/sdks-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.cli.exists",
   "note": "The official cross-platform Microsoft Graph PowerShell SDK wraps the complete Graph API schema in generated command-line cmdlets.",
   "source": "https://learn.microsoft.com/en-us/powershell/microsoftgraph/overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.extensibility.scripting",
   "note": "Custom REST applications, generated Graph clients, and PowerShell scripts can automate Intune resources under delegated or application identities.",
   "source": "https://learn.microsoft.com/en-us/graph/sdks/sdks-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.data_access.export",
   "note": "Graph GET operations and PowerShell cmdlets retrieve device, application, policy, compliance, role, audit, and report data as JSON or structured objects.",
   "source": "https://learn.microsoft.com/en-us/graph/intune-concept-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "modalities.data_access.import",
   "note": "Graph resources and generated cmdlets create, update, assign, and invoke authorized Intune objects and operations.",
   "source": "https://learn.microsoft.com/en-us/graph/intune-concept-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "verdict.scores.api",
   "note": "Microsoft states every admin-center action is backed by Graph; the surface is broad and automation-ready, while tenant consent, RBAC, licensing, beta stability, and destructive device actions require strong controls.",
   "source": "https://learn.microsoft.com/en-us/intune/fundamentals/what-is-intune",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "verdict.scores.cli",
   "note": "The official cross-platform SDK exposes the complete Graph schema as generated PowerShell cmdlets with noninteractive app authentication and structured output, subject to the same Intune permissions and safety gates.",
   "source": "https://learn.microsoft.com/en-us/powershell/microsoftgraph/overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as the current Intune product, platform, Graph backing, and AI-agent overview, updated May 2026.",
   "source": "https://learn.microsoft.com/en-us/intune/fundamentals/what-is-intune",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the current Intune Graph capability and resource-family overview.",
   "source": "https://learn.microsoft.com/en-us/graph/intune-concept-overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-16",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as the current Microsoft Graph PowerShell coverage, generation, and platform guide.",
   "source": "https://learn.microsoft.com/en-us/powershell/microsoftgraph/overview",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-08-16",
  "volatility": "high",
  "watch": [
   {
    "type": "docs",
    "url": "https://learn.microsoft.com/en-us/intune/fundamentals/what-is-intune"
   },
   {
    "type": "docs",
    "url": "https://learn.microsoft.com/en-us/graph/intune-concept-overview"
   },
   {
    "type": "docs",
    "url": "https://learn.microsoft.com/en-us/powershell/microsoftgraph/overview"
   }
  ]
 },
 "homepage": "https://www.microsoft.com/en-us/security/business/microsoft-intune",
 "id": "microsoft-intune",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": "unknown"
  },
  "api": {
   "auth": [
    "oauth2-delegated",
    "oauth2-app-only"
   ],
   "coverage": "full",
   "docs": "https://learn.microsoft.com/en-us/graph/intune-concept-overview",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": true
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "api-json",
    "powershell-objects"
   ],
   "import": [
    "api-json",
    "powershell-objects"
   ]
  },
  "extensibility": {
   "scripting": [
    "microsoft-graph",
    "graph-powershell",
    "graph-sdks"
   ],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": "unknown",
   "third_party": [],
   "verdict": "unknown"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. Microsoft states that every Intune admin-center action is backed by Microsoft Graph, and the Graph SDKs and PowerShell modules provide supported automation without browser control.",
   "ui_stack": [
    "web-dom"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": true,
   "languages": [
    "csharp",
    "go",
    "java",
    "javascript",
    "php",
    "powershell",
    "python"
   ],
   "official": true
  }
 },
 "name": "Microsoft Intune",
 "platforms": [
  "windows",
  "macos",
  "linux",
  "ios",
  "android",
  "web"
 ],
 "related": {
  "alternatives": [
   "workspace-one",
   "jamf-pro",
   "kandji"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Microsoft",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 9,
   "cli": 8,
   "computer_use": null,
   "integrations": null,
   "mcp": null,
   "overall": 9,
   "rpa": null
  },
  "summary": "Microsoft Intune is unusually API-complete for a cloud administration product. Microsoft states that every action in its web admin center is backed by Microsoft Graph. The public v1.0 and beta resources cover device inventory and compliance, configuration and security policies, application deployment and protection, enrollment, role-based access control, audit and reporting, and high-impact remote actions such as passcode reset, retire, and wipe. Graph supports delegated OAuth access and unattended app-only access. Both require explicit permissions; application permissions require tenant administrator consent, and Intune RBAC, scope tags, licensing, and endpoint-specific availability remain additional gates. Microsoft Graph SDKs cover seven programming environments, and the cross-platform Graph PowerShell SDK exposes the generated API surface as cmdlets with structured objects, making it the strongest command path. Production automation must isolate read-only inventory from device-impacting writes, pin v1.0 where possible, and treat beta resources as unstable. A current Intune-specific first-party MCP server, Intune change-notification coverage, and repeatable computer-use viability were not established in this pass.\n"
 }
}