MCP Servers

41 servers, 4 of them shared by every product. Generated from .claude/mcps/.mcp-enterprise.json on 2026-09-15 — do not edit this page by hand; run task mcp:docs instead.

Every server listed here was observed reporting Connected by claude mcp list before it was added. Servers that failed to start were removed rather than documented; the removal log lives in _meta.dropped_servers in the source of truth.

How a server reaches a project

Two delivery paths, one source of truth.

Core servers ship inside the adlc-mcp-core plugin. The plugin is installed once at user scope, so it reaches every project on the machine whether or not that project shares the framework's .claude directory. Core servers never appear in a project's .mcp.json.

Product servers are written into each project's root .mcp.json by the generator, based on the server's target list. Regenerate with task mcp:profile:regenerate; check for drift with task mcp:profile:check.

.claude/mcps/.mcp-enterprise.json   (source of truth)
        |
        |-- --plugin       --> .claude/plugins/adlc-mcp-core/.mcp.json  (every project)
        |-- --all-targets  --> <project>/.mcp.json                      (per product)
        '-- --all          --> .claude/mcps/profiles/<persona>.json     (per session)

Core servers

Available in every project, through the plugin.

Server	Transport	Invocation
`atlassian-rovo`	HTTP	`https://mcp.atlassian.com/v1/mcp`
`atlassian-tools`	uvx	`uvx mcp-atlassian==0.23.1`
`context7`	npx	`npx -y @upstash/[email protected]`
`github`	HTTP	`https://api.githubcopilot.com/mcp/readonly`

Per-server detail (what it does, tools, how to enable, env vars, runbook): see Server reference below.

Servers by product

Product	Path	Product servers
`adlc-framework`	`/Volumes/Working/projects/adlc-framework`	2
`command-center`	`/Volumes/Working/projects/command-center`	12
`cloudops-runbooks`	`/Volumes/Working/projects/cloudops`	12
`devops-terraform`	`/Volumes/Working/projects/devops-terraform`	4
`finops-focus`	`/Volumes/Working/projects/finops-focus`	4
`platform-idp`	`/Volumes/Working/projects/platform-idp`	4
`commerce`	`/Volumes/Working/projects/b2b-commerce`	4
`ai-job-search`	`/Volumes/Working/projects/ai-job-search`	6
`runbooks`	`/Volumes/Working/projects/cloudops/runbooks`	0

adlc-framework

markitdown, playwright-automation

command-center

aws-mcp, awslabs-billing-cost-management, awslabs-cloudtrail, awslabs-cloudwatch, awslabs-ecs, awslabs-iam, awslabs-network, azure, microsoft-fabric, microsoft-fabric-rti, playwright-automation, vizro-analytics

cloudops-runbooks

aws-mcp, awslabs-billing-cost-management, awslabs-cloudtrail, awslabs-cloudwatch, awslabs-ecs, awslabs-iac, awslabs-network, awslabs-postgres, awslabs-sns-sqs, azure, terraform, vizro-analytics

devops-terraform

aws-mcp, awslabs-iac, azure, terraform

finops-focus

aws-mcp, awslabs-billing-cost-management, azure, vizro-analytics

platform-idp

aws-mcp, awslabs-ecs, awslabs-iac, terraform

commerce

aws-mcp, awslabs-iac, playwright-automation, terraform

ai-job-search

gcal, gmail, markitdown, ms365, notion, playwright-automation

Product servers

Local servers only — written into a project's root .mcp.json by the generator. Claude Platform connectors are listed separately below; they are never written into .mcp.json.

Server	Transport	Products	Personas
`aws-mcp`	uvx	6	reviewer, portfolio-enterprise, portfolio-startup
`awslabs-billing-cost-management`	uvx	3	executive, reviewer, portfolio-enterprise, portfolio-startup
`awslabs-cloudtrail`	uvx	2	reviewer, portfolio-enterprise
`awslabs-cloudwatch`	uvx	2	reviewer, portfolio-enterprise
`awslabs-dynamodb`	uvx	0	—
`awslabs-ecs`	uvx	3	reviewer, portfolio-enterprise
`awslabs-iac`	uvx	4	reviewer, portfolio-enterprise
`awslabs-iam`	uvx	1	reviewer, portfolio-enterprise
`awslabs-network`	uvx	2	reviewer, portfolio-enterprise
`awslabs-openapi`	uvx	0	—
`awslabs-postgres`	uvx	1	—
`awslabs-s3-tables`	uvx	0	—
`awslabs-serverless`	uvx	0	—
`awslabs-sns-sqs`	uvx	1	—
`awslabs-well-architected-security`	uvx	0	—
`azure`	npx	4	executive, security-engineer, portfolio-enterprise
`azure-all-tools`	uvx	0	—
`gcal`	tools/mcp_mail.sh	1	—
`gmail`	tools/mcp_mail.sh	1	—
`grafana`	uvx	0	—
`markitdown`	uvx	2	—
`microsoft-fabric`	npx	1	—
`microsoft-fabric-rti`	uvx	1	—
`ms365`	tools/mcp_mail.sh	1	—
`notion`	HTTP	1	—
`playwright-automation`	npx	4	—
`terraform`	docker	4	—
`vizro-analytics`	uvx	3	executive

Per-server detail: see Server reference below.

Claude Platform connectors

Managed in claude.ai via OAuth, per-session — never written into any project's .mcp.json. Listed here so the catalog shows the whole surface, not just what the generator writes to disk.

Server	Endpoint	Auth	Status
`asana`	`https://mcp.asana.com/v2/mcp`	oauth	verified
`databricks`	`(not published)`	oauth	needs admin setup
`gmail-connector`	`https://gmailmcp.googleapis.com/mcp/v1`	oauth	verified
`google-calendar-connector`	`https://calendarmcp.googleapis.com/mcp/v1`	oauth	verified
`hubspot`	`https://mcp.hubspot.com/anthropic`	oauth	verified
`microsoft-365`	`https://microsoft365.mcp.claude.com/mcp`	oauth	verified
`salesforce`	`https://api.salesforce.com/platform/mcp/v1/platform/headless-360`	oauth	needs admin setup
`slack`	`https://mcp.slack.com/mcp`	oauth	requires_slack_app_registration
`snowflake`	`(not published)`	oauth	needs admin setup

Per-server detail: see Server reference below.

Server reference

One section per server (core, product, and connector) with its own anchor (#<server-name>) for direct linking from the catalog page and the matrix.

asana

Manage projects, tasks, and team workflows in Asana.

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

atlassian-rovo

Query Atlassian products and documentation with enterprise AI.

Tools: not measured (auth_required: HTTP 403)
Runs in: every project, via the adlc-mcp-core plugin
Enable: Ships automatically once the adlc-mcp-core plugin is installed at user scope.
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

atlassian-tools

Access Jira issues and Confluence pages.

Tools: 58 — jira_get_user_profile, jira_search_assignable_users, jira_get_issue_watchers, jira_get_issue, jira_search, jira_search_fields, jira_get_field_options, jira_get_project_issues, jira_get_transitions, jira_get_worklog, jira_download_attachments, jira_get_issue_images, jira_get_agile_boards, jira_get_board_issues, jira_get_sprints_from_board, jira_get_sprint_issues, jira_get_link_types, jira_batch_get_changelogs, jira_get_project_issue_types, jira_get_create_fields, jira_get_project_versions, jira_get_project_components, jira_get_all_projects, jira_search_projects, jira_get_project_fields, jira_get_service_desk_for_project, jira_get_service_desk_queues, jira_get_queue_issues, jira_get_request_types, jira_get_request_type_fields, jira_get_issue_proforma_forms, jira_get_proforma_form_details, jira_get_issue_dates, jira_get_issue_sla, jira_get_issue_development_info, jira_get_issues_development_info, jira_get_project_epic_hierarchy, jira_get_cross_project_dependencies, confluence_search, confluence_get_page, confluence_get_page_children, confluence_get_space_page_tree, confluence_get_comments, confluence_get_labels, confluence_get_inline_comments, confluence_search_user, confluence_get_page_history, confluence_get_page_diff, confluence_get_page_views, confluence_get_attachments, confluence_download_attachment, confluence_download_content_attachments, confluence_get_page_images, confluence_list_page_templates, confluence_get_page_template, confluence_get_page_restrictions, confluence_check_content_permissions, confluence_get_space_permissions
Runs in: every project, via the adlc-mcp-core plugin
Enable: Ships automatically once the adlc-mcp-core plugin is installed at user scope.
Env vars: CONFLUENCE_API_TOKEN, CONFLUENCE_URL, CONFLUENCE_USERNAME, JIRA_API_TOKEN, JIRA_URL, JIRA_USERNAME, READ_ONLY_MODE
Auth: env credential
Verify: claude mcp list
Runbook: —

aws-mcp

Call AWS APIs across your accounts and search AWS documentation.

Tools: 8 — aws___get_presigned_url, aws___get_tasks, aws___run_script, aws___get_regional_availability, aws___list_regions, aws___read_documentation, aws___retrieve_skill, aws___search_documentation
Runs in: cloudops-runbooks, command-center, commerce, devops-terraform, finops-focus, platform-idp
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

awslabs-billing-cost-management

Analyze AWS costs, budgets, savings plans, and optimization opportunities.

Tools: 0
Runs in: cloudops-runbooks, command-center, finops-focus
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-cloudtrail

Look up CloudTrail events and query CloudTrail Lake for privileged-API audit trail and compliance review.

Tools: 0
Runs in: cloudops-runbooks, command-center
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-cloudwatch

Query CloudWatch Logs Insights, metrics, and alarms for live observability and incident triage.

Tools: 0
Runs in: cloudops-runbooks, command-center
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-dynamodb

Design DynamoDB data models, validate them against a local DynamoDB Local emulator, and estimate RCU/WCU cost -- not a live production-table browser.

Tools: 0
Runs in: no product target (slice-only)
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-ecs

Containerize applications and manage Amazon ECS services and tasks.

Tools: 0
Runs in: cloudops-runbooks, command-center, platform-idp
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: ALLOW_SENSITIVE_DATA, ALLOW_WRITE, AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-iac

Validate, troubleshoot and research CloudFormation and CDK infrastructure as code (no create/update/delete tools).

Tools: 0
Runs in: cloudops-runbooks, commerce, devops-terraform, platform-idp
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-iam

Review IAM users, roles, groups and policies, and simulate policy evaluation for access review.

Tools: 0
Runs in: command-center
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-network

Analyze VPC routing, transit gateway paths, and network flow logs.

Tools: 0
Runs in: cloudops-runbooks, command-center
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-openapi

Expose an operator-supplied OpenAPI specification's operations as MCP tools (REST/HTTP proxy).

Tools: not measured (failed: server exited: Downloading chardet (1.4MiB) Downloaded chardet Installed 88 packages in 119ms realpath: --: No such file or directory 2026-09-12 23:21:16.067 | INFO | awslabs.openapi_mcp_server.utils.http_client:<module>:40 - tenacity retry logic enabled 2026-09-12 23:21:16.071 | INFO | awslabs.ope)
Runs in: no product target (slice-only)
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

awslabs-postgres

Answer questions from Aurora PostgreSQL data with a read-only SQL query path.

Tools: 7 — run_query, get_table_schema, connect_to_database, is_database_connected, get_database_connection_info, create_cluster, get_job_status
Runs in: cloudops-runbooks
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-s3-tables

List S3 table buckets, namespaces and tables, and query them with SQL via PyIceberg/Daft.

Tools: 0
Runs in: no product target (slice-only)
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-serverless

AWS SAM/Serverless deployment guidance, Lambda event-schema lookup, and (write-fenced) web-app deployment tooling.

Tools: 0
Runs in: no product target (slice-only)
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

Inspect and work with SNS topics and SQS queues.

Tools: 43 — add_sns_permission, check_if_phone_number_is_opted_out, confirm_subscription, get_data_protection_policy, get_endpoint_attributes, get_platform_application_attributes, get_subscription_attributes, get_topic_attributes, list_endpoints_by_platform_application, list_origination_numbers, list_phone_numbers_opted_out, list_platform_applications, list_subscriptions, list_subscriptions_by_topic, list_tags_for_resource, list_topics, opt_in_phone_number, publish, publish_batch, put_data_protection_policy, set_subscription_attributes, set_topic_attributes, subscribe, unsubscribe, add_sqs_permission, cancel_message_move_task, change_message_visibility, change_message_visibility_batch, delete_message, delete_message_batch, get_queue_attributes, get_queue_url, list_dead_letter_source_queues, list_message_move_tasks, list_queue_tags, list_queues, purge_queue, receive_message, remove_sqs_permission, send_message, send_message_batch, set_queue_attributes, start_message_move_task
Runs in: cloudops-runbooks
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

awslabs-well-architected-security

Assess AWS environments against the Well-Architected Framework Security Pillar: network encryption-in-transit, enabled security services, storage encryption-at-rest, and aggregated security findings.

Tools: 6 — CheckNetworkSecurity, CheckSecurityServices, CheckStorageEncryption, GetSecurityFindings, GetStoredSecurityContext, ListServicesInRegion
Runs in: no product target (slice-only)
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
Auth: env credential
Verify: claude mcp list
Runbook: —

azure

Query Azure services, resources, and best practices across subscriptions.

Tools: 60 — documentation, azd, foundry, get_azure_bestpractices, aks, appconfig, applens, appservice, role, datadog, managedlustre, azureterraformbestpractices, deploy, deviceregistry, eventgrid, acr, advisor, bicepschema, cosmos, cloudarchitect, communication, compute, confidentialledger, containerapps, eventhubs, fileshares, foundryextensions, functionapp, functions, grafana, keyvault, kusto, loadtesting, marketplace, quota, monitor, applicationinsights, mysql, policy, postgres, pricing, redis, resourcehealth, search, speech, servicebus, servicefabric, signalr, sql, storage, storagesync, virtualdesktop, wellarchitectedframework, workbooks, group_list, group_resource_list, subscription_list, extension_azqr, extension_cli_generate, extension_cli_install
Runs in: cloudops-runbooks, command-center, devops-terraform, finops-focus
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AZURE_MCP_COLLECT_TELEMETRY, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID
Auth: env credential
Verify: claude mcp list
Runbook: —

azure-all-tools

Every Azure MCP Server tool, read-only, for the Azure tenant you sign in to.

Tools: 174 — microsoft_docs_search, microsoft_code_sample_search, microsoft_docs_fetch, foundry_evaluation_comparison_get, foundry_evaluation_get, foundry_session_get, foundry_evaluation_suite_generation_job_get, foundry_session_file_list, foundry_toolbox_version_get, foundry_agent_get, foundry_agent_container_status_get, foundry_toolbox_get, foundry_evaluation_suite_get, foundry_continuous_eval_get, foundry_session_list, foundry_evaluation_dataset_get, foundry_session_logstream, foundry_evaluator_catalog_get, foundry_session_file_stat, foundry_evaluation_dataset_versions_get, foundry_evaluator_generation_job_get, foundry_agent_definition_schema_get, foundry_data_generation_job_get, foundry_evaluation_dataset_sas_url_get, foundry_session_file_download, acr_registry_list, acr_registry_repository_list, advisor_recommendation_list, aks_cluster_get, aks_nodepool_get, appconfig_account_list, appconfig_kv_get, applens_resource_diagnose, applicationinsights_recommendation_list, appservice_webapp_deployment_get, appservice_webapp_diagnostic_diagnose, appservice_webapp_diagnostic_list, appservice_webapp_get, appservice_webapp_settings_get-appsettings, azureterraformbestpractices_get, bicepschema_get, cloudarchitect_design, communication_email_send, communication_sms_send, compute_disk_get, compute_vm_get, compute_vmss_get, confidentialledger_entries_get, containerapps_list, cosmos_database_container_item_query, cosmos_list, datadog_monitoredresources_list, deploy_app_logs_get, deploy_architecture_diagram_generate, deploy_iac_rules_get, deploy_pipeline_guidance_get, deploy_plan_get, deviceregistry_namespace_list, eventgrid_subscription_list, eventgrid_topic_list, eventhubs_eventhub_consumergroup_get, eventhubs_eventhub_get, eventhubs_namespace_get, extension_azqr, extension_cli_generate, extension_cli_install, fileshares_fileshare_check-name-availability, fileshares_fileshare_get, fileshares_fileshare_peconnection_get, fileshares_fileshare_snapshot_get, fileshares_limits, fileshares_rec, fileshares_usage, foundryextensions_knowledge_index_list, foundryextensions_knowledge_index_schema, foundryextensions_openai_chat-completions-create, foundryextensions_openai_create-completion, foundryextensions_openai_embeddings-create, foundryextensions_openai_models-list, foundryextensions_resource_get, functionapp_get, functions_language_list, functions_project_get, functions_template_get, get_azure_bestpractices_ai_app, get_azure_bestpractices_get, grafana_list, group_list, group_resource_list, keyvault_admin_settings_get, keyvault_certificate_get, keyvault_key_get, keyvault_secret_get, kusto_cluster_get, kusto_cluster_list, kusto_database_list, kusto_query, kusto_sample, kusto_table_list, kusto_table_schema, loadtesting_test_get, loadtesting_testresource_list, loadtesting_testrun_get, managedlustre_fs_blob_autoexport_get, managedlustre_fs_blob_autoimport_get, managedlustre_fs_blob_import_get, managedlustre_fs_list, managedlustre_fs_sku_get, managedlustre_fs_subnetsize_ask, managedlustre_fs_subnetsize_validate, marketplace_product_get, marketplace_product_list, monitor_activitylog_list, monitor_healthmodels_entity_get, monitor_instrumentation_get-learning-resource, monitor_metrics_definitions, monitor_metrics_query, monitor_resource_log_query, monitor_table_list, monitor_table_type_list, monitor_webtests_get, monitor_workspace_list, monitor_workspace_log_query, mysql_database_query, mysql_list, mysql_server_config_get, mysql_server_param_get, mysql_table_schema_get, policy_assignment_list, postgres_database_query, postgres_list, postgres_server_config_get, postgres_server_param_get, postgres_table_schema_get, pricing_get, quota_region_availability_list, quota_usage_check, redis_list, resourcehealth_availability-status_get, resourcehealth_health-events_list, role_assignment_list, search_index_get, search_index_query, search_knowledge_base_get, search_knowledge_base_retrieve, search_knowledge_source_get, search_service_list, servicebus_queue_details, servicebus_topic_details, servicebus_topic_subscription_details, servicefabric_managedcluster_node_get, signalr_runtime_get, speech_stt_recognize, sql_db_get, sql_elastic-pool_list, sql_server_entra-admin_list, sql_server_firewall-rule_list, sql_server_get, storage_account_get, storage_blob_container_get, storage_blob_get, storage_table_list, storagesync_cloudendpoint_get, storagesync_registeredserver_get, storagesync_serverendpoint_get, storagesync_service_get, storagesync_syncgroup_get, subscription_list, virtualdesktop_hostpool_host_list, virtualdesktop_hostpool_host_user-list, virtualdesktop_hostpool_list, wellarchitectedframework_serviceguide_get, workbooks_list, workbooks_show
Runs in: no product target (slice-only)
Enable: Not written by --target/--all-targets. Loaded only as part of a preserved slice — see _meta.slices and task mcp:profile:regenerate.
Env vars: AZURE_CONFIG_DIR, AZURE_MCP_COLLECT_TELEMETRY, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID
Auth: env credential
Verify: claude mcp list
Runbook: —

context7

Query product documentation and knowledge bases.

Tools: 2 — resolve-library-id, query-docs
Runs in: every project, via the adlc-mcp-core plugin
Enable: Ships automatically once the adlc-mcp-core plugin is installed at user scope.
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

databricks

Connect to Databricks workspaces and data assets.

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

gcal

Read and manage Google Calendar events and schedules.

Tools: not measured (not_evaluated: not present in probe evidence)
Runs in: ai-job-search
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

github

Query repositories, issues, and pull requests on GitHub.

Tools: 27 — get_commit, get_file_contents, get_label, get_latest_release, get_me, get_release_by_tag, get_tag, get_team_members, get_teams, issue_read, list_branches, list_commits, list_issue_fields, list_issue_types, list_issues, list_pull_requests, list_releases, list_repository_collaborators, list_tags, pull_request_read, run_secret_scanning, search_code, search_commits, search_issues, search_pull_requests, search_repositories, search_users
Runs in: every project, via the adlc-mcp-core plugin
Enable: Ships automatically once the adlc-mcp-core plugin is installed at user scope.
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

gmail

Read and send emails from Gmail accounts.

Tools: not measured (not_evaluated: not present in probe evidence)
Runs in: ai-job-search
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

gmail-connector

Access Gmail via the Claude Platform connector (read-only).

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

google-calendar-connector

Access Google Calendar via the Claude Platform connector (read-only).

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

grafana

Query metrics and logs, manage alerts, and explore dashboards in Grafana.

Tools: 57 — alerting_manage_routing, alerting_manage_rules, alerting_manage_silences, analyze_loki_labels, check_datasources_health, generate_deeplink, get_alert_group, get_annotation_tags, get_annotations, get_assertions, get_current_oncall_users, get_dashboard_by_uid, get_dashboard_panel_queries, get_dashboard_property, get_dashboard_summary, get_datasource, get_doc, get_incident, get_oncall_shift, get_panel_image, get_plugin, get_sift_analysis, get_sift_investigation, get_snapshot, grafana_api_request, list_alert_groups, list_datasources, list_incident_custom_fields, list_incidents, list_loki_label_names, list_loki_label_values, list_oncall_schedules, list_oncall_teams, list_oncall_users, list_prometheus_label_names, list_prometheus_label_values, list_prometheus_metric_metadata, list_prometheus_metric_names, list_provisioning_repositories, list_pyroscope_label_names, list_pyroscope_label_values, list_pyroscope_profile_types, list_sift_investigations, list_snapshots, query_loki_logs, query_loki_patterns, query_loki_stats, query_prometheus, query_prometheus_histogram, query_pyroscope, search_dashboards, search_docs, search_folders, search_plugin_information, suggest_loki_alloy_label_config, user_info, validate_provisioning_file
Runs in: no product target (slice-only)
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: GRAFANA_API_KEY, GRAFANA_URL
Auth: env credential
Verify: claude mcp list
Runbook: —

hubspot

Access HubSpot CRM contacts, deals, and customer data.

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

markitdown

Convert documents and web content to Markdown format.

Tools: 1 — convert_to_markdown
Runs in: adlc-framework, ai-job-search
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

microsoft-365

Access Microsoft 365 mail, calendar, and documents via connector.

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

microsoft-fabric

Create and manage data pipelines, data lake shortcuts, and catalogs in Microsoft Fabric.

Tools: 48 — core_create-item, core_search-catalog, datafactory_create-dataflow, datafactory_create-pipeline, datafactory_execute-query, datafactory_get-pipeline, datafactory_list-dataflows, datafactory_list-pipelines, datafactory_run-pipeline, docs_api-examples, docs_best-practices, docs_item-api-spec, docs_item-definitions, docs_list-item-types, docs_platform-api-spec, onelake_create-directory, onelake_create-or-update-data-access-role, onelake_create-shortcut-adls-gen2, onelake_create-shortcut-amazon-s3, onelake_create-shortcut-azure-blob, onelake_create-shortcut-dataverse, onelake_create-shortcut-gcs, onelake_create-shortcut-onedrive-sharepoint, onelake_create-shortcut-onelake, onelake_create-shortcut-s3-compatible, onelake_delete-data-access-role, onelake_delete-directory, onelake_delete-file, onelake_delete-shortcut, onelake_download-file, onelake_get-data-access-role, onelake_get-settings, onelake_get-shortcut, onelake_get-table, onelake_get-table-config, onelake_get-table-namespace, onelake_list-data-access-roles, onelake_list-files, onelake_list-items, onelake_list-items-dfs, onelake_list-shortcuts, onelake_list-table-namespaces, onelake_list-tables, onelake_list-workspaces, onelake_modify-diagnostics, onelake_modify-immutability-policy, onelake_reset-shortcut-cache, onelake_upload-file
Runs in: command-center
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID
Auth: env credential
Verify: claude mcp list
Runbook: —

microsoft-fabric-rti

Build event streams, query Kusto databases, and manage real-time data in Microsoft Fabric.

Tools: 39 — kusto_known_services, kusto_query, kusto_command, kusto_show_command, kusto_list_entities, kusto_describe_database, kusto_describe_database_entity, kusto_graph_query, kusto_sample_entity, kusto_ingest_inline_into_table, kusto_deeplink_from_query, kusto_show_queryplan, kusto_diagnostics, eventstream_list, eventstream_get, eventstream_get_definition, eventstream_create, eventstream_update, eventstream_delete, eventstream_start_definition, eventstream_get_current_definition, eventstream_clear_definition, eventstream_add_sample_data_source, eventstream_add_custom_endpoint_source, eventstream_add_derived_stream, eventstream_add_eventhouse_destination, eventstream_add_custom_endpoint_destination, eventstream_validate_definition, eventstream_create_from_definition, eventstream_list_available_components, activator_list_artifacts, activator_create_trigger, map_list, map_get, map_get_definition, map_create, map_update_definition, map_update, map_delete
Runs in: command-center
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: AZURE_TENANT_ID
Auth: env credential
Verify: claude mcp list
Runbook: —

ms365

Query Microsoft 365 services including mail, calendar, and documents.

Tools: 80 — login, logout, verify-login, list-accounts, select-account, remove-account, get-drive-item, list-folder-files, get-drive-delta, list-drive-item-permissions, list-drive-item-thumbnails, list-drive-item-versions, list-excel-tables, get-excel-table, list-excel-table-rows, list-excel-worksheets, get-excel-range, get-excel-range-format, get-excel-used-range, get-drive-root-item, search-onedrive-files, get-current-user, list-my-calendar-permissions, list-calendars, get-specific-calendar-view, list-specific-calendar-events, get-specific-calendar-event, list-calendar-event-instances, get-calendar-view, list-calendar-view-delta, list-contact-folders, list-contact-folder-child-folders, list-contact-folder-contacts, list-outlook-contacts, get-outlook-contact, list-drives, list-calendar-events, get-calendar-event, list-calendar-events-delta, get-mail-tips, list-focused-inbox-overrides, get-mailbox-settings, list-mail-folders, list-mail-child-folders, list-mail-rules, list-mail-folder-messages, list-mail-folder-messages-delta, list-mail-messages, get-mail-message, get-mail-message-mime, list-mail-attachments, list-onenote-notebooks, list-onenote-notebook-sections, list-onenote-pages, get-onenote-page-content, list-onenote-section-groups, list-all-onenote-sections, list-onenote-section-pages, list-outlook-categories, list-supported-languages, list-supported-time-zones, list-planner-tasks, list-todo-task-lists, list-todo-tasks, get-todo-task, list-todo-linked-resources, get-planner-bucket, get-planner-plan, list-plan-buckets, list-plan-tasks, get-planner-task, get-planner-task-details, list-subscriptions, get-subscription, get-my-profile, list-planner-task-messages, parse-teams-url, download-bytes, download-bytes-to-file, get-download-url
Runs in: ai-job-search
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

notion

Query and edit Notion pages and databases.

Tools: not measured (auth_required: HTTP 403)
Runs in: ai-job-search
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

playwright-automation

Automate browser interactions: navigate, fill forms, take screenshots.

Tools: 24 — browser_close, browser_resize, browser_console_messages, browser_handle_dialog, browser_evaluate, browser_file_upload, browser_drop, browser_find, browser_fill_form, browser_press_key, browser_type, browser_navigate, browser_navigate_back, browser_network_requests, browser_network_request, browser_run_code_unsafe, browser_take_screenshot, browser_snapshot, browser_click, browser_drag, browser_hover, browser_select_option, browser_tabs, browser_wait_for
Runs in: adlc-framework, ai-job-search, command-center, commerce
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

salesforce

Query Salesforce CRM records: accounts, opportunities, and cases.

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

slack

Query Slack messages, channels, and files via connector.

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

snowflake

Execute queries and manage data in Snowflake data warehouse.

Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
Runs in: any project, once signed in — never written to .mcp.json
Enable: claude.ai → Settings → Connectors → sign in with OAuth.
Env vars: none
Auth: oauth
Verify: claude mcp list
Runbook: —

terraform

Browse Terraform Registry for modules, providers, and best practices.

Tools: 9 — get_latest_module_version, get_latest_provider_version, get_module_details, get_policy_details, get_provider_capabilities, get_provider_details, search_modules, search_policies, search_providers
Runs in: cloudops-runbooks, commerce, devops-terraform, platform-idp
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: ENABLE_TF_OPERATIONS, TFE_ADDRESS, TFE_TOKEN
Auth: env credential
Verify: claude mcp list
Runbook: —

vizro-analytics

Build and validate interactive analytics dashboards.

Tools: 6 — get_vizro_chart_or_dashboard_plan, get_model_json_schema, get_sample_data_info, load_and_analyze_data, validate_dashboard_config, validate_chart_code
Runs in: cloudops-runbooks, command-center, finops-focus
Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a tenant-scoped product, task tenant:launch TENANT=<id>).
Env vars: none
Auth: none
Verify: claude mcp list
Runbook: —

Persona profiles

A persona narrows the server set for a single session. Selection happens at startup, not mid-session:

claude --mcp-config .claude/mcps/profiles/reviewer.json --strict-mcp-config

Persona	Servers	When to use
`delivery`	2	Sprint planning, story push/pull, Confluence publishing, ITSM change/PIR/CR workflows — any /adlc, jira/, confluence/, or itsm/* command.
`executive`	4	QBR preparation, executive cost briefing, board-level observability summary — context7 + grafana + vizro-analytics + brave-search + azure-cost-management
`minimal`	1	Default; any session where you do not need AWS, Azure, GitHub, or Atlassian tools
`portfolio-enterprise`	12	Enterprise landing-zone pilot sessions — reviewer-tier AWS audit (9 servers: context7 + 8 awslabs-*) + Azure cost/security posture (4 servers: azure-cost-management, azure-defender, azure-entra, azure-policy) + microsoft-teams + atlassian-tools. NAMED ABSENCES, not oversights: Sentinel and Dynamics 365 are BLOCKED:no-verified-upstream-package — zero SSOT entry exists, one prose mention catalog-wide (docs/microsoft-365-decision-log.md:82), and creating an entry without a verified package would be fabrication. GitHub is excluded despite appearing in earlier drafts of this portfolio: standing SSOT exclusion pending the ghcr.io migration + REG-001 waiver (see github._orphan_reason) — not reversed by this delivery. azure-advisor, azure-resource-manager, azure-resource-manager-remote, and azure-devops are excluded: each carries its own _orphan_reason requiring a dedicated security-compliance-engineer sign-off (the microsoft-365/slack precedent) before joining ANY fence, portfolio or otherwise — out of scope for this delivery, add once sign-off lands.
`portfolio-startup`	5	Startup pilot sessions — single AWS-account API + billing visibility (aws-mcp, awslabs-billing-cost-management), context7 docs, atlassian-tools delivery, slack collaboration (chat:write message-send only, tagged 2026-08-01 per security-compliance-engineer sign-off APPROVE_WITH_MODIFICATIONS). THIS PERSONA IS WRITE-CAPABLE: atlassian-tools writes JIRA/Confluence records; slack writes messages (and, per its own user-token credential, can edit/delete them) in per-channel-invited channels only — see slack._description for the seven binding conditions M1-M7. slack._status remains requires_slack_app_registration until a Slack app is registered and admin-approved; a liveness run reporting BLOCKED:requires_slack_app_registration for slack is the correct and expected row, not a defect (AC-2B-8) — do not weaken it to CONNECTED. NAMED ABSENCES, not oversights: GitHub is excluded despite appearing in the original spec for this portfolio — standing SSOT exclusion pending the ghcr.io migration + REG-001 waiver (github._orphan_reason unchanged by this delivery).
`reviewer`	9	Cloud architecture review, security audit, code review with AWS context — context7 + all awslabs-* read (8 servers)
`security-engineer`	2	Azure security posture review. IAM/CloudTrail incident investigation unavailable until re-entry — see _meta.dropped_servers.

Playbook: prompts by persona

Start the session with the persona, then paste a prompt. Every prompt below names only servers that persona actually loads; this page is generated, so a server that leaves the source of truth takes its prompts with it.

executive

claude --mcp-config .claude/mcps/profiles/executive.json --strict-mcp-config

Scenario	Servers	Prompt
Monthly cloud spend	`azure`	Summarise this month's Azure spend by subscription with the prior-month delta.
Board cost narrative	`azure`, `vizro-analytics`	Chart the last six months of Azure spend by service and describe the trend in plain language.
Dashboard draft	`vizro-analytics`	Build a one-page dashboard showing spend, trend and the top five cost drivers.

minimal

claude --mcp-config .claude/mcps/profiles/minimal.json --strict-mcp-config

Scenario	Servers	Prompt
Library lookup	`context7`	Show the current configuration reference for the library I am about to change.

reviewer

claude --mcp-config .claude/mcps/profiles/reviewer.json --strict-mcp-config

Scenario	Servers	Prompt
Catalog inventory	`aws-mcp`	List every EC2 instance across the landing zone by account, region and state.
Network topology	`awslabs-network`	Show VPCs, subnets, route tables and Transit Gateway attachments across all accounts.
Spend by service	`awslabs-billing-cost-management`	Break down the last 30 days of spend by service and by account, highest first.
Unused access	`awslabs-iam`	List IAM roles and policies with no recorded use in 90 days.
Template check	`awslabs-iac`	Validate this CloudFormation template and list any compliance findings before it is deployed.
Container footprint	`awslabs-ecs`	List ECS clusters and services with their task counts and desired-vs-running gap.
Alarm health	`awslabs-cloudwatch`	Show CloudWatch alarms currently in ALARM, grouped by service.

security-engineer

claude --mcp-config .claude/mcps/profiles/security-engineer.json --strict-mcp-config

Scenario	Servers	Prompt
Azure posture	`azure`	List Azure resources missing a required owner or environment tag, by subscription.
Reference control	`context7`	Summarise the APRA CPS 234 access-control obligations relevant to cloud IAM.

Environment variables

Configuration carries no secrets: every credential is a ${VAR} reference resolved from the shell. These are the variables the servers expect.

Variable	Used by
`ALLOW_SENSITIVE_DATA`	`awslabs-ecs`
`ALLOW_WRITE`	`awslabs-ecs`
`ATLASSIAN_BASIC_AUTH`	`atlassian-rovo`
`AWS_PROFILE`	`awslabs-billing-cost-management`, `awslabs-cloudtrail`, `awslabs-cloudwatch`, `awslabs-dynamodb` and 9 more
`AWS_REGION`	`awslabs-billing-cost-management`, `awslabs-cloudtrail`, `awslabs-cloudwatch`, `awslabs-dynamodb` and 9 more
`AZURE_CONFIG_DIR`	`azure-all-tools`
`AZURE_MCP_COLLECT_TELEMETRY`	`azure`, `azure-all-tools`
`AZURE_SUBSCRIPTION_ID`	`azure`, `azure-all-tools`, `microsoft-fabric`
`AZURE_TENANT_ID`	`azure`, `azure-all-tools`, `microsoft-fabric`, `microsoft-fabric-rti`
`CONFLUENCE_API_TOKEN`	`atlassian-tools`
`CONFLUENCE_URL`	`atlassian-tools`
`CONFLUENCE_USERNAME`	`atlassian-tools`
`ENABLE_TF_OPERATIONS`	`terraform`
`FASTMCP_LOG_LEVEL`	`awslabs-billing-cost-management`, `awslabs-cloudtrail`, `awslabs-cloudwatch`, `awslabs-dynamodb` and 9 more
`GITHUB_PERSONAL_ACCESS_TOKEN`	`github`
`GRAFANA_API_KEY`	`grafana`
`GRAFANA_URL`	`grafana`
`JIRA_API_TOKEN`	`atlassian-tools`
`JIRA_URL`	`atlassian-tools`
`JIRA_USERNAME`	`atlassian-tools`
`READ_ONLY_MODE`	`atlassian-tools`
`TFE_ADDRESS`	`terraform`
`TFE_TOKEN`	`terraform`

Verifying

task mcp:profile:check     # every generated file still matches the source of truth
task mcp:verify            # every server in every product actually connects

How a server reaches a project​

Core servers​

Servers by product​

adlc-framework​

command-center​

cloudops-runbooks​

devops-terraform​

finops-focus​

platform-idp​

commerce​

ai-job-search​

Product servers​

Claude Platform connectors​

Server reference​

asana​

atlassian-rovo​

atlassian-tools​

aws-mcp​

awslabs-billing-cost-management​

awslabs-cloudtrail​

awslabs-cloudwatch​

awslabs-dynamodb​

awslabs-ecs​

awslabs-iac​

awslabs-iam​

awslabs-network​

awslabs-openapi​

awslabs-postgres​

awslabs-s3-tables​

awslabs-serverless​

awslabs-sns-sqs​

awslabs-well-architected-security​

azure​

azure-all-tools​

context7​

databricks​

gcal​

github​

gmail​

gmail-connector​

google-calendar-connector​

grafana​

hubspot​

markitdown​

microsoft-365​

microsoft-fabric​

microsoft-fabric-rti​

ms365​

notion​

playwright-automation​

salesforce​

slack​

snowflake​

terraform​

vizro-analytics​

Persona profiles​

Playbook: prompts by persona​

executive​

minimal​

reviewer​

security-engineer​

Environment variables​

Verifying​