Is Graph X-Ray safe?

Question

Accepted Answer

Graph X-Ray is medium risk. When you open the Graph X-Ray DevTools panel, the extension processes matching Microsoft Graph requests and forwards the request method, path, and body to Microsoft's code-snippet-generation backend. That can include admin form input and request URLs for the Graph action you are taking, including values being set for another user or a new credential. When you use Graph X-Ray's DevTools panel on Microsoft Graph traffic, the extension can collect the Graph request path and request body content. For the default PowerShell snippet flow, it posts the method, path, host, and body text to the DevX snippet service at devxapi-func-prod-eastus.azurewebsites.net/api/graphexplorersnippets.

Is Graph X-Ray safe?

Findings