Skip to main content

Azure Infrastructure MCP Server

A Model Context Protocol (MCP) server for managing Azure infrastructure directly from AI assistants like Claude in Cursor, VS Code, Claude Desktop, or any MCP-compatible client.

What You Can Do

  • Manage Subscriptions — List and switch between Azure subscriptions
  • Inspect Accounts — View subscription details, get access tokens, clear cached credentials
  • Organize Resources — List and manage resource groups, tags, locks
  • Control VMs — Start, stop, restart, deallocate virtual machines and scale VMSS
  • Manage Storage — List and inspect storage accounts
  • App Configuration — Manage App Configuration stores and key-values
  • App Service — List and manage App Service plans and web apps
  • Deploy Web Apps — Create and manage Web Apps for Containers with Docker/Podman
  • Container Registry — List, create, and manage ACR instances, images, tasks, and network rules
  • Virtual Networks — Create and manage VNets, subnets, and peerings
  • Identity & Access — Manage Azure AD users, groups, applications, and RBAC permissions
  • Governance — Work with management groups, resource locks, and tags
  • Audit — View activity logs and track changes
  • Docker Runtime — List, inspect logs, and restart local Docker containers
  • Monitoring — System metrics, service health, and infrastructure status

Quick Start

1. Prerequisites

  • Python 3.10+
  • Azure CLI installed and logged in (az login)
  • uv package manager

2. Install

git clone <repo-url> azops-mcp
cd azops-mcp
./quickstart.sh

The script will:

  • Create a virtual environment with Python 3.12
  • Install all dependencies (including Azure SDKs)
  • Show configuration for Claude Desktop and Cursor

3. Configure Your AI Client

Claude Desktop — add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "azops-mcp": {
      "command": "uv",
      "args": ["--directory", "/full/path/to/azops-mcp", "run", "python", "-m", "azops_mcp"]
    }
  }
}

Cursor — add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "azops-mcp": {
      "command": "uv",
      "args": ["--directory", "/full/path/to/azops-mcp", "run", "python", "-m", "azops_mcp"]
    }
  }
}

Restart your AI client after saving the configuration.

4. Start Using

User: List my Azure subscriptions
User: Show resource groups in subscription xxx-xxx-xxx
User: Start the VM "web-server" in resource group "production"
User: What VMs are running in my dev resource group?

Authentication

Priority Method When
1 Service Principal AZURE_CLIENT_ID + SECRET + TENANT_ID all set in .env
2 Azure CLI After az login (recommended for development)
3 Managed Identity When running in Azure

See the Authentication docs for the full walkthrough.

Available Tools (90+)

Category Tools
Health health_check
Subscriptions & Auth list_subscriptions, set_subscription, auth_status, account_show, account_clear, account_get_access_token, list_locations, list_tenants
Management Groups list_management_groups, get_management_group
RBAC list_role_definitions, create_role_assignment, delete_role_assignment, list_role_assignments_for_principal
Governance list_resource_locks, list_tags, get_activity_log
Resource Groups list_resource_groups, list_resources
VMs & VMSS list_vms, get_vm_status, start_vm, stop_vm, restart_vm, deallocate_vm, scale_vmss
Storage list_storage_accounts, get_storage_status
App Configuration appconfig_list, appconfig_show, appconfig_kv_list, appconfig_kv_show, appconfig_kv_set, appconfig_kv_delete
App Service appservice_plan_list, appservice_plan_show, webapp_list, webapp_show, webapp_start, webapp_stop, webapp_restart
Web Apps for Containers webapp_create_for_container, webapp_grant_cr_access, webapp_configure_vnet_integration, webapp_assign_identity, webapp_view_logs, webapp_set_container_registry_credentials, webapp_delete
Container Registry acr_list_registries, acr_show_registry, acr_create_registry, acr_delete_registry, acr_update_registry, acr_get_credentials, acr_get_login_server, acr_list_repositories, acr_list_tags, acr_show_task, acr_list_tasks, acr_create_task, acr_delete_task, acr_run_task, acr_list_builds, acr_show_quotas, acr_show_usage, acr_list_network_rules, acr_update_network_rules, acr_reset_client
Virtual Networks vnet_list, vnet_show, vnet_create, vnet_delete, vnet_subnet_list, vnet_subnet_show, vnet_subnet_create, vnet_subnet_delete, vnet_peering_list
Azure AD (Entra ID) aad_list_users, aad_show_user, aad_create_user, aad_delete_user, aad_list_applications, aad_create_application, aad_list_groups, aad_verify_tenant, aad_reset_client
Docker Runtime list_containers, get_container_logs, restart_container
Monitoring get_system_metrics, check_service_health, get_infrastructure_status

Docker

Run the MCP server as a container:

# Build the image
docker compose build

# Run the MCP server interactively (stdio transport)
docker compose run --rm mcp-server

See the Docker docs for full instructions.

Project Structure

azops-mcp/
├── src/azops_mcp/
│   ├── __main__.py               # Module entry point
│   ├── server.py                 # MCP server — 93 tool definitions
│   ├── config.py                 # Configuration management
│   ├── tools/                    # Azure SDK integrations (by category)
│   │   ├── _clients.py           # Shared auth & Azure SDK client factories
│   │   ├── subscription.py       # Subscriptions, auth, tenants, locations
│   │   ├── resource_groups.py    # Resource groups, tags, locks, activity log
│   │   ├── compute.py            # VMs, VMSS, resource listing
│   │   ├── networking.py         # VNets, subnets, peerings
│   │   ├── authorization.py      # RBAC roles & assignments
│   │   ├── management_groups.py  # Management group hierarchy
│   │   ├── app_configuration.py  # App Configuration stores & key-values
│   │   ├── app_service.py        # App Service plans & web apps
│   │   ├── container_registry.py # Azure Container Registry (ACR)
│   │   ├── active_directory.py   # Azure AD / Entra ID
│   │   ├── webapp_deployment.py  # Web App for Containers deployment
│   │   ├── docker.py             # Local Docker container runtime
│   │   └── monitoring.py         # System metrics & health
│   └── utils/
│       └── helpers.py            # HTTP client, error formatting
├── tests/                        # Unit tests (per integration)
│   ├── test_subscription.py
│   ├── test_resource_groups.py
│   ├── test_compute.py
│   ├── test_networking.py
│   ├── test_authorization.py
│   ├── test_container_registry.py
│   ├── test_active_directory.py
│   ├── test_webapp_deployment.py
│   ├── test_docker.py
│   ├── test_monitoring.py
│   ├── test_health.py
│   └── test_config.py
├── docs/                          # GitHub Pages documentation
├── Dockerfile                     # MCP server container image
├── docker-compose.yml             # Docker Compose for the MCP server
├── pyproject.toml                 # Dependencies & metadata
├── quickstart.sh                  # Setup script
└── .env.example                   # Configuration template

Configuration

Variable Default Description
AZURE_SUBSCRIPTION_ID — Default subscription
AZURE_DEFAULT_LOCATION eastus Default region for new resources
LOG_LEVEL INFO DEBUG, INFO, WARNING, ERROR
RATE_LIMIT_ENABLED true Enable rate limiting
RATE_LIMIT_REQUESTS_PER_MINUTE 60 Max requests/minute

See .env.example for the complete list.

Development

# Install with dev dependencies
uv pip install -e ".[dev]"

# Run tests
pytest

# Code quality
black src/ tests/
ruff check src/ tests/
mypy src/

# Run server manually
uv run python -m azops_mcp

Documentation

Full documentation is available at artemkozlenkov.github.io/azops-mcp.

License

MIT

Metadata

Release files for azops-mcp 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for azops-mcp 0.1.0
File Size Uploaded
azops_mcp-0.1.0.tar.gz 71.1 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for azops-mcp 0.1.0
File Interpreter ABI Platform
azops_mcp-0.1.0-py3-none-any.whl Python 3 none any Details

Total release size: 126.2 kB

Release files / azops_mcp-0.1.0.tar.gz

Download URL azops_mcp-0.1.0.tar.gz
Size 71.1 kB
Tags Source
SHA-256 checksum
How to use checksums
6599aae4698f3c26f60b93768e1ad777dff543efebf3f6d8cf9534cc731d4c7a
BLAKE2b-256 checksum
How to use checksums
59520e4b391155a47a4623631a4dbbf90e80768ca215071d3ab03bda5687df1d
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.7

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Feb 9, 2026.

Transparency log

Release files / azops_mcp-0.1.0-py3-none-any.whl

Download URL azops_mcp-0.1.0-py3-none-any.whl
Size 55.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
259affd488bd988b4837fb45470fad2bfec7e7bda87a10170b0500e91f51241a
BLAKE2b-256 checksum
How to use checksums
9affa3cd54d7ca236053dc2c8ec89e6a99b284110848245002b34a05de308639
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.7

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Feb 9, 2026.

Transparency log

Release history Release notifications | RSS feed

This release

0.1.0 This release

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page