az-scout 2026.2.7

Azure SKU scout — explore availability zones, capacity, pricing, and plan VM deployments across subscriptions

Azure Scout: az-scout

Scout Azure regions for VM availability, zone mappings, pricing, spot scores, and quota — then plan deployments with confidence.

az-scout helps you compare how Azure maps logical Availability Zones to physical zones across subscriptions, evaluate SKU capacity and pricing, and generate deterministic deployment plans — all from a single web UI or MCP-powered AI agent.

Features

• Logical-to-physical zone mapping – visualise how Azure maps logical Availability Zones (Zone 1, Zone 2, Zone 3) to physical zones (e.g., eastus-az1, eastus-az2) across subscriptions in a region.
• SKU availability view – shows VM SKU availability per physical zone with vCPU quota usage (limit / used / remaining) and CSV export.
• Spot Placement Scores – evaluate the likelihood of Spot VM allocation (High / Medium / Low) per SKU for a given region and instance count, powered by the Azure Compute RP.
• Deployment Confidence Score – a composite 0–100 score per SKU estimating deployment success probability, synthesised from quota headroom, Spot Placement Score, availability zone breadth, restrictions, and price pressure signals. Missing signals are automatically excluded with weight renormalisation. The score updates live when Spot Placement Scores arrive.
• Deployment Plan – agent-ready POST /api/deployment-plan endpoint that evaluates (region, SKU) combinations against zones, quotas, spot scores, pricing, and restrictions. Returns a deterministic, ranked plan with business and technical views (no LLM, no invention — missing data is flagged explicitly).
• MCP server – expose all capabilities as MCP tools for AI agents (see below).

Quick start

Prerequisites

Requirement	Details
Python	≥ 3.11
Azure credentials	Any method supported by DefaultAzureCredential (az login, managed identity, …)
RBAC	Reader on the subscriptions you want to query, Virtual Machine Contributor on the subscriptions for Spot Placement Scores retrieval

Run locally with uv tool (recommended)

# Make sure you are authenticated to Azure
az login

# Run the tool (no install required)
uvx az-scout

Your browser opens automatically at http://127.0.0.1:5001.

Installation options

Recommended: install with uv

uv install az-scout
uvx az-scout

Alternative: install with pip

pip install az-scout
az-scout

Docker

docker run --rm -p 8000:8000 \
  -e AZURE_TENANT_ID=<your-tenant> \
  -e AZURE_CLIENT_ID=<your-sp-client-id> \
  -e AZURE_CLIENT_SECRET=<your-sp-secret> \
  ghcr.io/lrivallain/az-scout:latest

Azure Container App

It is also possible to deploy az-scout as a web app in Azure using the provided Bicep template (see Deploy to Azure section below).

Note: The web UI is designed for local use and may not be suitable for public-facing deployment without additional security measures (authentication, network restrictions, etc.). The MCP server can be exposed over the public internet if needed, but ensure you have proper authentication and authorization in place to protect access to Azure data.

UI guided deployment

A Bicep template is provided to deploy az-scout as an Azure Container App with a managed identity. You can use the Deploy to Azure button above for a portal-guided experience, or use the CLI commands below.

Bicep deploy from CLI

# Create a resource group
az group create -n rg-az-scout -l <your-region>

# Deploy (replace subscription IDs with your own)
az deployment group create \
  -g rg-az-scout \
  -f deploy/main.bicep \
  -p readerSubscriptionIds='["SUB_ID_1","SUB_ID_2"]'

See deploy/main.example.bicepparam for all available parameters.

Resources created

The deployment creates:

Resource	Purpose
Container App	Runs ghcr.io/lrivallain/az-scout
Managed Identity	Reader role on target subscriptions
VM Contributor	Virtual Machine Contributor role for Spot Placement Scores (enabled by default)
Log Analytics	Container logs and diagnostics
Container Apps Env	Hosting environment

Note: The Virtual Machine Contributor role is required for querying Spot Placement Scores (POST endpoint). Set enableSpotScoreRole=false to skip this if you don't need spot scores or prefer to manage permissions manually.

Enable Entra ID authentication (EasyAuth)

For a complete walkthrough (App Registration creation, client secret, user assignment, troubleshooting), see deploy/EASYAUTH.md.

Usage

CLI options

az-scout [COMMAND] [OPTIONS]

az-scout --help.     # show global help
az-scout web --help  # show web subcommand help
az-scout mcp --help  # show mcp subcommand help
az-scout --version   # show version

az-scout web (default)

Run the web UI. This is the default when no subcommand is given.

  --host TEXT     Host to bind to.  [default: 127.0.0.1]
  --port INTEGER  Port to listen on.  [default: 5001]
  --no-open       Don't open the browser automatically.
  -v, --verbose   Enable verbose logging.
  --reload        Auto-reload on code changes (development only).
  --help          Show this message and exit.

az-scout mcp

Run the MCP server.

  --http          Use Streamable HTTP transport instead of stdio.
  --port INTEGER  Port for Streamable HTTP transport.  [default: 8080]
  -v, --verbose   Enable verbose logging.
  --help          Show this message and exit.

MCP server

An MCP server is included, allowing AI agents (Claude Desktop, VS Code Copilot, etc.) to query zone mappings and SKU availability directly.

Available tools

Tool	Description
list_tenants	Discover Azure AD tenants and authentication status
list_subscriptions	List enabled subscriptions (optionally scoped to a tenant)
list_regions	List regions that support Availability Zones
get_zone_mappings	Get logical→physical zone mappings for subscriptions in a region
get_sku_availability	Get VM SKU availability per zone with restrictions, capabilities, and vCPU quota per family
get_spot_scores	Get Spot Placement Scores (High / Medium / Low) for a list of VM sizes in a region
get_sku_pricing_detail	Get detailed Linux pricing (PayGo, Spot, RI 1Y/3Y, SP 1Y/3Y) and VM profile for a single SKU

get_sku_availability supports optional filters to reduce output size: name, family, min_vcpus, max_vcpus, min_memory_gb, max_memory_gb.

stdio transport (default – for Claude Desktop, VS Code, etc.)

az-scout mcp

Add to your MCP client configuration:

{
  "mcpServers": {
    "az-scout": {
      "command": "az-scout",
      "args": ["mcp"]
    }
  }
}

If using uv:

{
  "mcpServers": {
    "az-scout": {
      "command": "uvx",
      "args": ["az-scout", "mcp"]
    }
  }
}

Streamable HTTP transport

When running in web mode, the MCP server is automatically available at /mcp for integration with web-based clients or when running as a hosted deployment (Container App, etc.).

For MCP-only use with Streamable HTTP transport, run:

az-scout mcp --http --port 8082

Add to your MCP client configuration:

{
  "mcpServers": {
    "az-scout": {
      "url": "http://localhost:8082/mcp" // or "https://<your-app-url>/mcp" for web command
    }
  }
}

Hosted deployment: When running as a Container App (or any hosted web server), the MCP endpoint is automatically available at /mcp alongside the web UI — no separate server needed. Point your MCP client to https://<your-app-url>/mcp.

EasyAuth: If your Container App has EasyAuth enabled, MCP clients must pass a bearer token in the Authorization header. See the EasyAuth guide for detailed instructions.

API

API documentation is available at /docs (Swagger UI) and /redoc (ReDoc) when the server is running.

Deployment Plan API

The POST /api/deployment-plan endpoint provides a deterministic decision engine for deployment planning. It is designed for Sales / Solution Engineers and AI agents: no LLM is involved — every decision traces back to real Azure data.

Request

{
  "subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
  "regionConstraints": {
    "allowRegions": ["francecentral", "westeurope"],
    "dataResidency": "EU"
  },
  "skuConstraints": {
    "preferredSkus": ["Standard_D2s_v3", "Standard_E8s_v4"],
    "requireZonal": true
  },
  "scale": { "instanceCount": 4 },
  "pricing": {
    "currencyCode": "EUR",
    "preferSpot": true,
    "maxHourlyBudget": 2.0
  },
  "timing": { "urgency": "now" }
}

Response (abbreviated)

{
  "summary": {
    "recommendedRegion": "francecentral",
    "recommendedSku": "Standard_D2s_v3",
    "recommendedMode": "zonal",
    "riskLevel": "low",
    "confidenceScore": 85
  },
  "businessView": {
    "keyMessage": "Standard_D2s_v3 in francecentral is recommended ...",
    "reasons": ["Available in 3 availability zone(s).", "Sufficient quota ..."],
    "risks": [],
    "mitigations": [],
    "alternatives": [{ "region": "westeurope", "sku": "Standard_E8s_v4", "reason": "..." }]
  },
  "technicalView": {
    "evaluation": { "regionsEvaluated": ["francecentral", "westeurope"], "perRegionResults": [] },
    "dataProvenance": { "evaluatedAt": "...", "cacheTtl": {}, "apiVersions": {} }
  },
  "warnings": ["Spot placement score is probabilistic and not a guarantee."],
  "errors": []
}

Note: Spot placement scores are probabilistic and not a guarantee of allocation. Quota values are dynamic and may change between planning and actual deployment.

Under the hood

The backend calls the Azure Resource Manager REST API to fetch:

• Zone mappings: availabilityZoneMappings from /subscriptions/{id}/locations endpoint
• Resource SKUs: SKU details from /subscriptions/{id}/providers/Microsoft.Compute/skus endpoint with zone restrictions and capabilities
• Compute Usages: vCPU quota per VM family from /subscriptions/{id}/providers/Microsoft.Compute/locations/{region}/usages endpoint (cached for 10 minutes, with retry on throttling and graceful handling of 403)
• Spot Placement Scores: likelihood indicators for Spot VM allocation from /subscriptions/{id}/providers/Microsoft.Compute/locations/{region}/placementScores/spot/generate endpoint (batched in chunks of 100, sequential execution with retry/back-off, cached for 10 minutes). Note: these scores reflect the probability of obtaining a Spot VM allocation, not datacenter capacity.

License

MIT