| Microsoft Edge | Google Chrome | Firefox |
|---|---|---|
 |
 |
 |
  |
  |
  |
Unlock the power of automation and learning in the Microsoft 365 ecosystem. Graph X-Ray is a developer tool that demystifies the Microsoft admin portals by revealing the exact Microsoft Graph API calls being made in the background as you work.
Stop spending hours digging through documentation to figure out how to automate a task. Simply perform the action in the portal, and Graph X-Ray will provide you with the corresponding, ready-to-use script. It's the ultimate "learn by doing" tool for Microsoft Graph.
-
API Call Inspection: Capture and inspect all Microsoft Graph API requests (GET, POST, PATCH, DELETE) and their full responses directly within your browser's developer tools.
-
Instant Script Generation: Automatically convert recorded API calls into functional code snippets.
-
Multi-Language Support: Generate scripts in the most popular languages for M365 automation, including:
- Microsoft Graph PowerShell
- Python
- C#
- JavaScript
- Go
- Java
- Objective-C
-
Accelerate Automation: Go from a manual, repetitive task in the UI to a fully automated script in seconds.
-
Microsoft 365 Administrators wanting to automate user management, policy configuration, and reporting.
-
DevOps Engineers building CI/CD pipelines for Microsoft 365 and Azure environments.
-
Developers creating applications that integrate with Microsoft Graph.
-
IT Consultants & Support Professionals who need to quickly script solutions for clients.
Supercharge your Microsoft 365 workflow. Install Graph X-Ray today and turn your clicks into code!
Install the Graph X-Ray extension for your favorite browser.
| Microsoft Edge | Google Chrome | Firefox |
|---|---|---|
|
|
|
| |
|
|
To manually install the Graph X-Ray extension:
- Download the latest
.zipfile from the Releases page. - Extract the contents of the
.zipfile. - Open your browser and navigate to:
- Microsoft Edge:
edge://extensions - Google Chrome:
chrome://extensions
- Microsoft Edge:
- Enable "Developer mode" by toggling the switch (usually in the bottom left or top right corner).
- Click on "Load unpacked" and select the extracted folder.
Install directly from Firefox Add-ons:
- Open Graph X-Ray on Firefox Add-ons and click Add to Firefox.
For manual loading, use the Firefox-specific zip from the Releases page:
- Download
graphxray-firefox-v<version>.zip. - Extract the contents of the
.zipfile. - Open Firefox and navigate to
about:debugging#/runtime/this-firefox. - Click Load Temporary Add-on and select the
manifest.jsonfile from the extracted files (zip root).
If you prefer to build from source:
- Clone the repository:
git clone https://github.com/merill/graphxray.git - Navigate to the project directory:
cd graphxray - Install dependencies:
npm install - Build for Firefox:
npm run build:firefox - Open Firefox and navigate to
about:debugging#/runtime/this-firefox - Click Load Temporary Add-on and select the
manifest.jsonfile from thebuildfolder
The extension detects and generates code snippets for Microsoft Graph calls across:
- graph.microsoft.com (Public cloud)
- graph.microsoft.us (US Government cloud - GCC High)
- dod-graph.microsoft.us (US Department of Defense)
- microsoftgraph.chinacloudapi.cn (China cloud)
The extension works with any web page that makes Graph API calls. We've primarily tested with
- Microsoft Entra
- Microsoft Intune
If there are admin portals where you are not seeing Graph X-Ray work as expected, please open an issue, even better, submit a pull request by following the steps in Adding non-Graph API calls to Ultra X-Ray.
To view Graph calls in real-time:
- Browse to the Microsoft admin portal (Entra, Intune...)
- Open Developer Tools
- Open the Graph X-Ray panel in Developer Tools
- Make changes in the portal to record and view the corresponding Graph API calls and PowerShell commands
- Press F12 on Windows
- Press Cmd+Opt+I on macOS
- On Microsoft Edge open the menu from the top right then select Extensions
- On Google Chrome open the menu from the top right then select More Tools and click Extensions
Expand the tabs in Developer Tools and select the Graph X-Ray panel.
If you don't see the Graph X-Ray panel you may need to restart your browser.
Make changes in the Azure Portal to view the corresponding Graph API calls and PowerShell commands for the action (e.g. edit a user's profile information and click Save).
Scroll down in the Graph X-Ray panel to view the new stack trace.
- Install Node.js (which includes npm)
- Run
npm installto install dependencies
npm start to compile and debug
To load the extension, go to chrome://extensions or edge://extensions, turn on developer mode, click on "load unpacked", and navigate to the ./dev folder.
Production builds are automatically created in GitHub with the right version number.
If you want to create a production build of the extension on your desktop:
- For Chrome/Edge + Firefox output folders in one run:
npm run build - For Firefox-only flow:
npm run build:firefox
The build artifacts will be placed in the build folder:
build/graphxraybuild/graphxray-firefox
In the project directory, you can run:
Runs the app in the development mode.
Open http://localhost:3000 to view it in the browser.
The page will reload if you make edits.
You will also see any lint errors in the console.
Builds the app for production to the build folder.
It correctly bundles React in production mode and optimizes the build for the best performance.
The build is minified and the filenames include the hashes.
Your app is ready to be deployed!
This command also creates:
build/graphxray(Chrome/Edge package folder)build/graphxray-firefox(Firefox package folder)
Builds the app specifically for Firefox, using the Firefox manifest (Manifest V2) instead of the Chrome/Edge manifest (Manifest V3).
See the section about deployment for more information.
Ultra X-Ray shows calls to non-Graph API endpoints. Unfortunately, we need to explicitly add each endpoint to the extension.
To add support for a new endpoint.
- Figure out the API endpoint - View the network requests in the browser's developer tools and find out the domain where the API is hosted.
- Add domain to domains.js - Add the new domain to the list of domains in the
domains.jsfile. - Add domain to manifest.json - Note the manifest requires the / at the end of the domain.
- Test the endpoint - Make a request to the new blade and verify that it appears in Graph X-Ray.
Key Firefox-specific details:
- Manifest Version: Firefox build uses Manifest V2 while Chrome/Edge uses Manifest V3.
- Background scripts: Firefox build uses event-based background script handling.
- Browser APIs: The project uses a compatibility layer so both
browser.*andchrome.*usage works. - CSP format: Firefox manifest uses string CSP format.
Firefox-specific files:
public/manifest.firefox.jsonpublic/dev.firefox.jssrc/common/browserApi.jsscripts/build-firefox.js
Known Firefox limitations:
- DevTools panel behavior can differ slightly from Chromium browsers.
- Storage quotas differ from Chromium.
- Some permissions can behave differently.
Firefox debugging tips:
- Use
about:debuggingto inspect extension/background logs. - Use browser console (
Ctrl+Shift+J) for extension runtime errors.
This is an independently developed application and is not endorsed or supported by Microsoft.
Please share feedback and report issues on Github.
This project was originally a hackathon project by Eunice, Dhruv, Clement, Monica & @merill.
Special thanks to @jorgeasaurus for major contributions including Firefox support and key reliability improvements such as the PowerShell fallback behavior.
Licensed under the GNU Affero General Public License v3.0 (AGPL-3.0).