Azure MCP Server: Tools, Setup and Security

The Azure MCP Server lets an AI agent work with Azure resources in plain language, from listing storage containers to querying Log Analytics. Microsoft publishes it as open source in the microsoft/mcp repository, with all Azure tools in a single server.

Checked against: What is the Azure MCP Server? (Microsoft Learn) on 28 October 2026. eSEOspace did not install or test this server.

At a glance

What it can do

The Azure MCP Server README groups capabilities by Azure service. It shows example prompts per service rather than one flat list of tool names. Services covered on the README include:

• Microsoft Foundry (list and deploy models, create and evaluate agents)
• Azure Advisor (list, prioritize, dismiss or postpone recommendations)
• Azure AI Search, Speech, App Configuration and App Service
• Azure Backup, Compute, Container Apps and Container Registry
• Azure Cosmos DB, Data Explorer and Database for PostgreSQL
• Azure CLI command generation and install help

Microsoft's tools overview holds the full per-tool reference. The Learn overview gives typical uses: listing storage accounts, running KQL queries on Azure databases, deploying with azd and running diagnostics.

The VS Code extension offers three server modes. namespace (the default) groups tools per service, single exposes one tool, and all exposes every tool.

Microsoft also lists separate servers for related products, such as Azure Resource Manager at https://mcp.management.azure.com and Azure Kubernetes Service in Azure/aks-mcp. This profile covers the main Azure MCP Server only.

How to connect it

Microsoft asks you to authenticate to Azure first. See its authentication guide.

Claude Code. The README says an Azure plugin packages the server with Azure agents and skills:

/plugin install azure@claude-plugins-official

Any MCP client using Node.js. Add this to your client's mcp.json:

{
    "mcpServers": {
        "azure-mcp-server": {
        "command": "npx",
        "args": [
            "-y",
            "@azure/mcp@latest",
            "server",
            "start"
            ]
        }
    }
}

The README also documents .NET (dnx), Python (uvx), Docker and an MCPB bundle for Claude Desktop. The Learn overview lists Visual Studio Code, Visual Studio, Eclipse, Cursor, Windsurf (now Devin Desktop), IntelliJ and Cline as supported editors. In Visual Studio 2022 version 17.14.30 or later, the tools ship with the Azure development workload.

For HTTP-only clients such as Microsoft Foundry and Copilot Studio, Microsoft provides azd templates to self-host the server on Azure Container Apps.

Security notes

• RBAC decides what happens. The README warns: "Autonomous or misconfigured clients may perform destructive actions." Microsoft tells you to apply least-privilege RBAC roles before deployment.
• Read-only mode. The extension setting azureMcp.readOnly "prevents write operations." azureMcp.enabledServices limits which services appear.
• SSRF protection. A setting can disable server-side request forgery protections per service. Microsoft labels it "DANGEROUS." Leave it off unless you understand SSRF in MCP.
• Token handling. Microsoft says credentials go through the Azure Identity SDK and "we never store or manage tokens directly."
• Developer use only. The Learn page says the local server "is intended strictly for developer use within your organization."
• Telemetry. Collection is on by default. Set AZURE_MCP_COLLECT_TELEMETRY=false to disable all of it, or AZURE_MCP_COLLECT_TELEMETRY_MICROSOFT=false to stop only Microsoft's copy.

Microsoft's README also notes that safeguards such as flags to prevent destructive operations "are not standardized in the MCP specification." Your client may not honor them. Pair the server with tool annotations awareness and the MCP security hub.

Alternatives

• AWS MCP Server for AWS accounts.
• Google Cloud MCP servers for Google Cloud projects.
• Terraform MCP Server for teams that manage Azure through Terraform.

Next step

If your team runs on Azure, start with the read-only setting and one or two enabled services. Our MCP readiness audit helps you pick the right scope. More cloud servers are in the server directory.

Frequently asked questions