Block HTTP requests and channels you don't use¶
Licence and role
Power Platform admin (included with Copilot Studio)
Why it matters¶
The HTTP connector lets an agent call any endpoint, which is the easiest exfiltration path. Public channels (Direct Line websites, Facebook, WhatsApp) put agents in front of people outside your tenant. Block what you don't use; allow specific endpoints where you need them.
Steps¶
- List the channels and HTTP endpoints your approved agents actually use (AG01 inventory).
- In the data policy for Copilot Studio environments, block 'HTTP', or keep it and use Configure connector > Connector endpoints to allow only the endpoints you listed.
- Block unused channels: 'Direct Line channels in Copilot Studio', 'Facebook channel in Copilot Studio', 'WhatsApp channel in Copilot Studio', 'Omnichannel in Copilot Studio', 'SharePoint channel in Copilot Studio'.
- Block 'Skills with Copilot Studio' if no agent uses Azure Bot Service skills.
- Keep connectors used together in the same data group (Business, Non-business or Blocked): mixing groups in one agent is a policy violation.
Impact on users¶
Agents that call blocked endpoints or use blocked channels stop working on those channels and show a data policy error in Copilot Studio. Agents that mix connectors from different data groups are flagged as violations.
Rollback¶
Move the connector or channel back to the Business or Non-business group in the same data policy and select Update policy.
Read-only check¶
Reads settings only. It changes nothing in your tenant or on the device.
Modules, connection and role
Requires: Microsoft.Graph (Conditional Access + agent identities), ExchangeOnlineManagement (audit search), Microsoft.PowerApps.Administration.PowerShell (data policies).
Connect first:
Connect-MgGraph -Scopes AgentIdentity.Read.All,Policy.Read.All
Connect-ExchangeOnline
Add-PowerAppsAccount
Note: Microsoft retires Search-UnifiedAuditLog on 15 Oct 2027 (MC1505599). AG04 will move to the Graph AuditLogQuery API before then.
$j = Get-DlpPolicy | ConvertTo-Json -Depth 30
foreach ($c in 'Direct Line channels in Copilot Studio','Facebook channel in Copilot Studio','WhatsApp channel in Copilot Studio','Omnichannel in Copilot Studio','SharePoint channel in Copilot Studio','Skills with Copilot Studio') { "$c referenced in a data policy: $($j -match [regex]::Escape($c))" }
"HTTP connector referenced: $($j -match '"HTTP"')"
How to verify¶
In the data policy, HTTP is blocked or endpoint-filtered, and every channel not on your approved list is in the Blocked group.
Sources¶
This control is in the M365 AI Agent Hardening Kit
The free Top 5 has this control with its Jira import, Excel project plan, tracker CSV and the read-only PowerShell script. The Complete kit has all 20 controls.