Platform

External API

A read-only REST API that lets Azure CLI, Azure PowerShell, curl and your own backend apps read the same inventory, change, cost, security, policy and recommendation data StratoLens shows in the browser. Every call runs as a signed-in Entra ID user with that user's normal roles and scope.

Start free trial Request a demo

StratoLens is a self-hosted Azure visibility platform. It runs in your own tenant; your infrastructure data never leaves it.

The Problem

The data in a visibility tool is only useful where your team already works. Getting it out usually means one of these:

API keys and personal access tokens that outlive the person who created them and sit in scripts and pipelines forever
A service account with broader access than any single engineer, because it has to serve every script
Screen-scraping or CSV exports that break on the next UI change

The Solution

The StratoLens External API is a read-only REST surface that works with the identity you already have:

Sign in as yourself: Azure CLI, Azure PowerShell or any delegated OAuth flow. No API keys, no stored secrets, no service principals
Same roles, same scope: a call can never see more than the caller sees in the browser. Personal view filters are ignored, so scripts are deterministic
Off by default, three admin controls: a master switch, an allow-list of trusted client apps, and an optional per-user grant
73 GET routes covering inventory, changes, Activity Log, cost, Defender, Azure Policy, Advisor, recommendations, reports and the StratoLens audit log

Benefits

Key benefits

Pull inventory, change history, cost, security and policy data into your own reports and pipelines

No API keys or personal access tokens: every call is a signed-in Entra ID user

Calls are bounded by the caller's StratoLens roles and data scope, never wider

Administrators choose which client apps and which users may use the API

Every admin change to the API controls is recorded in the StratoLens audit log

Use cases

Common use cases

Export orphaned-resource and right-sizing recommendations into a weekly FinOps report

Pull Resource Graph changes for a subscription into an incident timeline

Feed Defender assessment and policy compliance counts into a compliance dashboard

Self-hosted

Runs in your tenant. Reads everything, changes nothing.

StratoLens deploys from the Azure Marketplace into your own tenant and scans your subscriptions over read-only Azure APIs. The data behind External API is collected and stored inside your tenant; there is no StratoLens cloud holding a copy.

Read-only scans via Azure management APIs
Every scan at rest in your tenant, never a vendor cloud
Deployed from the Azure Marketplace in under 15 minutes

Learn more about data residency and security architecture

Want the details?

Explore our documentation to see how External API works in detail.

Read Documentation View All Features

Start your 14-day free trial

Every feature unlocked. Deploys to your Azure tenant. No data leaves your tenant.

When the 14 days end, billing starts on your Azure invoice at your tier. One toggle in Settings turns it off, any time.

Start free trial

Request a demo

Not ready to install anything? Browse the Azure Footguns Database: 97 documented ways Azure quietly costs money or creates risk.