Azure (1 MCP-Server | 60 tools)

Give an agent read access to your Microsoft estate. Updated 2026-09-13

Azure, Entra ID, Sentinel, Microsoft 365, GitHub, Azure DevOps, Playwright and Fabric — each card shows what is connected today.

Your AI agents & Microsoft Azure

Your AI agents

60 tools connected

Microsoft Azure

SubscriptionsConnected

Resource HealthAvailable

Resource ManagerNot connected yet

Microsoft Entra ID

Role AssignmentsConnected

Entra IDNot connected yet

Microsoft Sentinel

Data ExplorationNot connected yet

Monitor LogsAvailable

Microsoft 365 and Teams

Microsoft 365Available

Mail and Calendar80 tools

TeamsNot connected yet

GitHub

GitHub27 tools

Azure DevOps

DevOpsNot connected yet

Playwright

Playwright24 tools

Microsoft Fabric

FabricNot connected yet

Real-Time IntelligenceNot connected yet

Step 1 of 8

Microsoft Azure

Know every subscription you pay for

Subscriptions

Know every Azure subscription your company holds and which ones are still active.

Connected

Story →

Resource Health

Get a first look at which resources are not Available in a subscription you name. Large subscriptions show only the first page of results.

Available

Resource Manager

See Azure costs and resources through Azure Resource Manager without leaving your agent.

Not connected yet

Groups and servers are ordered by the business outcome they deliver. Lightly dimmed servers are available but not yet added to a product; the faintest are not connected yet — see why.

Every prompt runs with read-only access — your agent can look, not change.

Microsoft Azure

Which Azure subscriptions are we paying for and still active?

Subscriptions

60 MCP toolsConnected

Ask your agent

Read-only

List all Azure subscriptions we pay for and show which are active.

Set it up

One subscription

Grant the agent's identity the Reader role on one subscription: <subscription id>.
Start the Azure MCP Server: npx -y @azure/[email protected] server start --mode namespace --read-only.

Confirm it works:

az rest --method get --url "https://management.azure.com/subscriptions/<subscription id>?api-version=2022-12-01" --query state -o tsv

Whole tenant

Grant the agent's identity the Reader role at the tenant root management group: /providers/Microsoft.Management/managementGroups/<tenant id>. It inherits to every subscription.
Start the same Azure MCP Server: npx -y @azure/[email protected] server start --mode namespace --read-only.

Confirm it works:

Compare the agent's subscription count with a live count: az rest --method get --url "https://management.azure.com/subscriptions?api-version=2022-12-01" --query "length(value)"

In a subscription we name, which resources are not reporting as healthy right now?

Resource Health

60 MCP toolsAvailable

Ask your agent

Read-only

In a subscription we name, list resources not in Available state.

Large subscriptions may return only the first batch of resources.

Set it up

One subscription

Grant the agent's identity the Reader role on one subscription: <subscription id>.
Start the Azure MCP Server: npx -y @azure/[email protected] server start --mode namespace --read-only.

Confirm it works:

az rest --method get --url "https://management.azure.com/subscriptions/<subscription id>?api-version=2022-12-01" --query state -o tsv

Whole tenant

Grant the agent's identity the Reader role at the tenant root management group: /providers/Microsoft.Management/managementGroups/<tenant id>. It inherits to every subscription.
Start the same Azure MCP Server: npx -y @azure/[email protected] server start --mode namespace --read-only.

Confirm it works:

Compare the agent's subscription count with a live count: az rest --method get --url "https://management.azure.com/subscriptions?api-version=2022-12-01" --query "length(value)"

What Azure resources do we run, and what do they cost without opening the portal?

Resource Manager

Not connected yet

Microsoft's preview works only inside GitHub Copilot and VS Code today, and it includes tools that can change resources.

Microsoft Entra ID

Who holds Owner or Contributor access on a subscription we name?

Role Assignments

60 MCP toolsConnected

Ask your agent

Read-only

For a subscription we name, who holds Owner or Contributor access?

Set it up

One subscription

Grant the agent's identity the Reader role on one subscription: <subscription id>.
Start the Azure MCP Server: npx -y @azure/[email protected] server start --mode namespace --read-only.

Confirm it works:

az rest --method get --url "https://management.azure.com/subscriptions/<subscription id>?api-version=2022-12-01" --query state -o tsv

Whole tenant

Grant the agent's identity the Reader role at the tenant root management group: /providers/Microsoft.Management/managementGroups/<tenant id>. It inherits to every subscription.
Start the same Azure MCP Server: npx -y @azure/[email protected] server start --mode namespace --read-only.

Confirm it works:

Compare the agent's subscription count with a live count: az rest --method get --url "https://management.azure.com/subscriptions?api-version=2022-12-01" --query "length(value)"

Who holds privileged directory roles in our organisation?

Entra ID

Not connected yet

An administrator has to approve Microsoft's Enterprise MCP Server for your organisation first.

Microsoft Sentinel

What unusual security activity appeared in our Sentinel data this week?

Data Exploration

Not connected yet

It needs the Sentinel data lake switched on and read access granted to AI agents.

In a log workspace we name, what are the most frequent errors from the last 7 days?

Monitor Logs

60 MCP toolsAvailable

Ask your agent

Read-only

In a log workspace we name, list the most frequent error messages from the last 7 days.

Set it up

One subscription

Grant the agent's identity the Reader role on one subscription: <subscription id>.
Start the Azure MCP Server: npx -y @azure/[email protected] server start --mode namespace --read-only.

Confirm it works:

az rest --method get --url "https://management.azure.com/subscriptions/<subscription id>?api-version=2022-12-01" --query state -o tsv

Whole tenant

Grant the agent's identity the Reader role at the tenant root management group: /providers/Microsoft.Management/managementGroups/<tenant id>. It inherits to every subscription.
Start the same Azure MCP Server: npx -y @azure/[email protected] server start --mode namespace --read-only.

Confirm it works:

Compare the agent's subscription count with a live count: az rest --method get --url "https://management.azure.com/subscriptions?api-version=2022-12-01" --query "length(value)"

Microsoft 365 and Teams

Where is the latest document or email on a topic we name?

Microsoft 365

Available

Set it up

Whole organisation

An administrator enables the Microsoft 365 connector in claude.ai.
Users sign in through the connector's own OAuth flow.

Confirm it works:

Check the connectors panel in claude.ai shows Microsoft 365 as connected.

What emails arrived this week, and what meetings do I have before Friday?

Mail and Calendar

80 MCP toolsAvailable

Ask your agent

Read-only

List your emails this week and meetings before Friday.

Set it up

Your own mailbox

Sign in with your own Microsoft 365 credentials, following the ms365 MCP Server's own sign-in step.
Start the server: tools/mcp_mail.sh ms365 npx -y @softeria/[email protected] --read-only.

Confirm it works:

Confirm the server lists your own mailbox and calendar.

What was decided in this week's Teams conversations?

Teams

Not connected yet

An administrator has to approve the Teams connector for Agent 365 first.

GitHub

What shipped in a repository we name, and which pull requests are open?

GitHub

27 MCP toolsAvailable

Ask your agent

Read-only

List releases and open pull requests in a repository we name.

Set it up

Repositories the token may read

Create a fine-grained personal access token limited to the repositories the agent may read, with read-only repository permissions.
Point the agent at the read-only endpoint: https://api.githubcopilot.com/mcp/readonly.
Authenticate with the token via the Authorization header.

Confirm it works:

Confirm access via the MCP server's own tool list, or a tokened read against one repository you name.

Azure DevOps

Which pipelines failed this week, and which work items are pending?

DevOps

Not connected yet

It needs your organisation's name and a sign-in app registered by an administrator, set to read-only before first use.

Playwright

Does our main customer page load correctly right now?

Playwright

24 MCP toolsAvailable

Set it up

Your site

Start the server: npx -y @playwright/[email protected] --isolated.
Ask the agent to open a site you own.

Confirm it works:

Confirm the agent's browser tools reach your site and return a snapshot.

Microsoft Fabric

What does our business data in Fabric show this quarter?

Fabric

Not connected yet

It has no read-only mode yet, so it is kept out of read-only work.

What are our live operational figures showing right now?

Real-Time Intelligence

Not connected yet

It has no read-only mode yet, so it is kept out of read-only work.