msmcp-azure 2.0.0b37

Azure MCP Server - Model Context Protocol implementation for Azure

Azure MCP Server PyPI Package

All Azure MCP tools in a single server. The Azure MCP Server implements the MCP specification to create a seamless connection between AI agents and Azure services. Azure MCP Server can be used alone or with the GitHub Copilot for Azure extension in VS Code.

Table of Contents

• Overview
• Installation
• Usage
  • Getting Started
  • Sovereign Cloud Support
  • What can you do with the Azure MCP Server?
  • Complete List of Supported Azure Services
• Support and Reference
  • Documentation
  • Feedback and Support
  • Security
  • Permissions and Risk
  • Data Collection
  • Compliance Responsibility
  • Third Party Components
  • Export Control
  • No Warranty / Limitation of Liability
  • Contributing
  • Code of Conduct

Overview

Azure MCP Server supercharges your agents with Azure context across 40+ different Azure services.

Installation

• To use Azure MCP server from Python, you must have uv installed. uv is a fast Python package installer and resolver. To verify your installation run: uv --version and uvx --version.

• Configure the mcp.json file with the following:

  {
      "mcpServers": {
          "Azure MCP Server": {
              "command": "uvx",
              "args": [
                  "--from",
                  "msmcp-azure",
                  "azmcp",
                  "server",
                  "start"
              ]
          }
      }
  }
  

Note: When manually configuring Visual Studio and Visual Studio Code, use servers instead of mcpServers as the root object.

Client-Specific Configuration

IDE	File Location	Documentation Link
VS Code	.vscode/mcp.json (workspace) settings.json (user)	VS Code MCP Documentation
Visual Studio	.mcp.json (solution/workspace)	Visual Studio MCP Setup
GitHub Copilot CLI	~/.copilot/mcp-config.json	Copilot CLI MCP Configuration
Claude Code	~/.claude.json or .mcp.json (project)	Claude Code MCP Configuration
Eclipse IDE	GitHub Copilot Chat -> Configure Tools -> MCP Servers	Eclipse MCP Documentation
IntelliJ IDEA	Built-in MCP server (2025.2+) Settings > Tools > MCP Server	IntelliJ MCP Documentation
Cursor	~/.cursor/mcp.json or .cursor/mcp.json	Cursor MCP Documentation
Windsurf	~/.codeium/windsurf/mcp_config.json	Windsurf Cascade MCP Integration
Amazon Q Developer	~/.aws/amazonq/mcp.json (global) .amazonq/mcp.json (workspace)	AWS Q Developer MCP Guide
Claude Desktop	~/.claude/claude_desktop_config.json (macOS) %APPDATA%\Claude\claude_desktop_config.json (Windows)	Claude Desktop MCP Setup

Remote MCP Server (preview)

Microsoft Foundry and Microsoft Copilot Studio require remote MCP server endpoints. To self-host the Azure MCP Server for use with these platforms, deploy it as a remote MCP server on Azure Container Apps.

Check out the remote hosting azd templates for deployment options.

Usage

Getting Started

1. Open GitHub Copilot in VS Code or IntelliJ and switch to Agent mode.
2. Click refresh on the tools list
   • You should see the Azure MCP Server in the list of tools
3. Try a prompt that tells the agent to use the Azure MCP Server, such as List my Azure Storage containers
   • The agent should be able to use the Azure MCP Server tools to complete your query
4. Check out the documentation and review the troubleshooting guide for commonly asked questions
5. We're building this in the open. Your feedback is much appreciated, and will help us shape the future of the Azure MCP server
   • 👉 Open an issue in the public repository

Sovereign Cloud Support

Azure MCP Server supports connecting to Azure sovereign clouds. By default, it authenticates against the Azure Public Cloud.

Cloud	Aliases
Azure Public Cloud	AzureCloud, AzurePublicCloud, Public, AzurePublic
Azure China Cloud	AzureChinaCloud, China, AzureChina
Azure US Government	AzureUSGovernment, USGov, AzureUSGovernmentCloud, USGovernment

*The aliases are case insensitive.

Use the --cloud option when starting the server, or set the AZURE_CLOUD environment variable:

# Command line
azmcp server start --cloud AzureChinaCloud

# Environment variable (PowerShell)
$env:AZURE_CLOUD = "AzureUSGovernment"
azmcp server start

Before connecting, authenticate your local tools against the target cloud:

# Azure CLI
az cloud set --name AzureChinaCloud
az login

# Azure PowerShell
Connect-AzAccount -Environment AzureChinaCloud

For full configuration options, see the Sovereign Clouds documentation.

What can you do with the Azure MCP Server?

✨ The Azure MCP Server supercharges your agents with Azure context. Here are some cool prompts you can try:

🧮 Microsoft Foundry

• List Microsoft Foundry models
• Deploy Microsoft Foundry models
• List Microsoft Foundry model deployments
• List knowledge indexes
• Get knowledge index schema configuration
• Create Microsoft Foundry agents
• List Microsoft Foundry agents
• Connect and query Microsoft Foundry agents
• Evaluate Microsoft Foundry agents

📊 Azure Advisor

• "List my Advisor recommendations"

🔎 Azure AI Search

• "What indexes do I have in my Azure AI Search service 'mysvc'?"
• "Let's search this index for 'my search query'"

🎤 Azure AI Services Speech

• "Convert this audio file to text using Azure Speech Services"
• "Recognize speech from my audio file with language detection"
• "Transcribe speech from audio with profanity filtering"
• "Transcribe audio with phrase hints for better accuracy"
• "Convert text to speech and save to output.wav"
• "Synthesize speech from 'Hello, welcome to Azure' with Spanish voice"
• "Generate MP3 audio from text with high quality format"

⚙️ Azure App Configuration

• "List my App Configuration stores"
• "Show my key-value pairs in App Config"

⚙️ Azure App Lens

• "Help me diagnose issues with my app"

🕸️ Azure App Service

• "Add a database connection for an App Service web app"
• "List the web apps in my subscription"
• "Show me the web apps in my 'my-resource-group' resource group"
• "Get the details for web app 'my-webapp' in 'my-resource-group'"
• "Get the application settings for my web app 'my-webapp' in 'my-resource-group'"
• "Add application setting 'LogLevel' with value 'INFO' to my 'my-webapp' in 'my-resource-group'"
• "Set application setting 'LogLevel' to 'WARNING' to my 'my-webapp' in 'my-resource-group'"
• "Delete application setting 'LogLevel' from my 'my-webapp' in 'my-resource-group'"
• "List the deployments for web app 'my-webapp' in 'my-resource-group'"
• "Get the deployment 'deployment-id' for web app 'my-webapp' in 'my-resource-group'"

🖥️ Azure CLI Generate

• Generate Azure CLI commands based on user intent

Example prompts that generate Azure CLI commands:

• "Get the details for app service plan 'my-app-service-plan'"

🖥️ Azure CLI Install

• Get installation instructions for Azure CLI, Azure Developer CLI and Azure Functions Core Tools CLI for your platform.

📞 Azure Communication Services

• "Send an SMS message to [phone]"
• "Send SMS with delivery reporting enabled"
• "Send a broadcast SMS to multiple recipients"
• "Send SMS with custom tracking tag"
• "Send an email from '[e-mail]' to '[e-mail]' with subject 'Hello' and message 'Welcome!'"
• "Send an HTML email to multiple recipients with CC and BCC using Azure Communication Services"
• "Send an email with reply-to address '[e-mail]' and subject 'Support Request'"
• "Send an email from my communication service endpoint with custom sender name and multiple recipients"
• "Send an email to '[e-mail]' and '[e-mail]' with subject 'Team Update' and message 'Please review the attached document.'"

🖥️ Azure Compute

• "List all my managed disks in subscription 'my-subscription'"
• "Show me all disks in resource group 'my-resource-group'"
• "Get details of disk 'my-disk' in resource group 'my-resource-group'"
• "Create a 128 GB Premium_LRS managed disk named 'my-disk' in resource group 'my-resource-group'"
• "Create a managed disk from snapshot in resource group 'my-resource-group'"
• "Create a disk 'my-disk' in resource group 'my-resource-group' with tags env=prod team=infra"
• "Delete managed disk 'my-disk' in resource group 'my-resource-group'"
• "Update disk 'my-disk' in resource group 'my-resource-group' to 256 GB"
• "Change the SKU of disk 'my-disk' to Premium_LRS"
• "Set the IOPS limit on ultra disk 'my-disk' in resource group 'my-resource-group' to 10000"
• "List all virtual machines in my subscription"
• "Show me all VMs in resource group 'my-resource-group'"
• "Get details for virtual machine 'my-vm' in resource group 'my-resource-group'"
• "Get virtual machine 'my-vm' with instance view including power state and runtime status"
• "Show me the power state and provisioning status of VM 'my-vm'"
• "What is the current status of my virtual machine 'my-vm'?"
• "Create a new VM named 'my-vm' in resource group 'my-rg' for web workloads"
• "Create a Linux VM with Ubuntu 22.04 and SSH key authentication"
• "Create a development VM with Standard_B2s size in East US"
• "Update VM 'my-vm' tags to environment=production"
• "Create a VMSS named 'my-vmss' with 3 instances for web workloads"
• "Update VMSS 'my-vmss' capacity to 5 instances"
• "Delete virtual machine 'my-vm' in resource group 'my-resource-group'"
• "Force delete VM 'my-vm' in resource group 'my-rg' using force-deletion"
• "Delete virtual machine scale set 'my-vmss' in resource group 'my-resource-group'"
• "Force delete VMSS 'my-vmss' in resource group 'my-rg' using force-deletion"

�📦 Azure Container Apps

• "List the container apps in my subscription"
• "Show me the container apps in my 'my-resource-group' resource group"

🔐 Azure Confidential Ledger

• "Append entry {"foo":"bar"} to ledger contoso"
• "Get entry with id 2.40 from ledger contoso"

📦 Azure Container Registry (ACR)

• "List all my Azure Container Registries"
• "Show me my container registries in the 'my-resource-group' resource group"
• "List all my Azure Container Registry repositories"

📊 Azure Cosmos DB

• "Show me all my Cosmos DB databases"
• "List containers in my Cosmos DB database"

🧮 Azure Data Explorer

• "Get Azure Data Explorer databases in cluster 'mycluster'"
• "Sample 10 rows from table 'StormEvents' in Azure Data Explorer database 'db1'"

📣 Azure Event Grid

• "List all Event Grid topics in subscription 'my-subscription'"
• "Show me the Event Grid topics in my subscription"
• "List all Event Grid topics in resource group 'my-resourcegroup' in my subscription"
• "List Event Grid subscriptions for topic 'my-topic' in resource group 'my-resourcegroup'"
• "List Event Grid subscriptions for topic 'my-topic' in subscription 'my-subscription'"
• "List Event Grid Subscriptions in subscription 'my-subscription'"
• "List Event Grid subscriptions for topic 'my-topic' in location 'my-location'"
• "Publish an event with data '{"name": "test"}' to topic 'my-topic' using CloudEvents schema"
• "Send custom event data to Event Grid topic 'analytics-events' with EventGrid schema"

📂 Azure File Shares

• "Get details about a specific file share in my resource group"
• "Create a new Azure managed file share with NFS protocol"
• "Create a file share with 64 GiB storage, 3000 IOPS, and 125 MiB/s throughput"
• "Update the provisioned storage size of my file share"
• "Update network access settings for my file share"
• "Delete a file share from my resource group"
• "Check if a file share name is available"
• "Get details about a file share snapshot"
• "Create a snapshot of my file share"
• "Update tags on a file share snapshot"
• "Delete a file share snapshot"
• "Get a private endpoint connection for my file share"
• "Update private endpoint connection status to Approved"
• "Delete a private endpoint connection"
• "Get file share limits and quotas for a region"
• "Get provisioning recommendations for my file share workload"
• "Get usage data and metrics for my file share"

🔑 Azure Key Vault

• "List all secrets in my key vault 'my-vault'"
• "Create a new secret called 'apiKey' with value 'xyz' in key vault 'my-vault'"
• "List all keys in key vault 'my-vault'"
• "Create a new RSA key called 'encryption-key' in key vault 'my-vault'"
• "List all certificates in key vault 'my-vault'"
• "Import a certificate file into key vault 'my-vault' using the name 'tls-cert'"
• "Get the account settings for my key vault 'my-vault'"

☸️ Azure Kubernetes Service (AKS)

• "List my AKS clusters in my subscription"
• "Show me all my Azure Kubernetes Service clusters"
• "List the node pools for my AKS cluster"
• "Get details for the node pool 'np1' of my AKS cluster 'my-aks-cluster' in the 'my-resource-group' resource group"

⚡ Azure Managed Lustre

• "List the Azure Managed Lustre clusters in resource group 'my-resource-group'"
• "How many IP Addresses I need to create a 128 TiB cluster of AMLFS 500?"
• "Check if 'my-subnet-id' can host an Azure Managed Lustre with 'my-size' TiB and 'my-sku' in 'my-region'
• Create a 4 TIB Azure Managed Lustre filesystem in 'my-region' attaching to 'my-subnet' in virtual network 'my-virtual-network'

📊 Azure Monitor

• "Query my Log Analytics workspace"

🧭 Azure Monitor Instrumentation (under Azure Monitor)

• "List available Azure Monitor onboarding learning resources"
• "Get the learning resource at 'concepts/dotnet/opentelemetry-pipeline.md'"
• "Start Azure Monitor instrumentation orchestration for my local workspace"
• "Continue to the next orchestration step after I complete the previous action"
• "Send brownfield analysis findings to continue migration planning"

🔧 Azure Resource Management

• "List my resource groups"
• "List my Azure CDN endpoints"
• "Help me build an Azure application using Node.js"

🗄️ Azure SQL Database

• "List all SQL servers in my subscription"
• "List all SQL servers in my resource group 'my-resource-group'"
• "Show me details about my Azure SQL database 'mydb'"
• "List all databases in my Azure SQL server 'myserver'"
• "Update the performance tier of my Azure SQL database 'mydb'"
• "Rename my Azure SQL database 'mydb' to 'newname'"
• "List all firewall rules for my Azure SQL server 'myserver'"
• "Create a firewall rule for my Azure SQL server 'myserver'"
• "Delete a firewall rule from my Azure SQL server 'myserver'"
• "List all elastic pools in my Azure SQL server 'myserver'"
• "List Active Directory administrators for my Azure SQL server 'myserver'"
• "Create a new Azure SQL server in my resource group 'my-resource-group'"
• "Show me details about my Azure SQL server 'myserver'"
• "Delete my Azure SQL server 'myserver'"

💾 Azure Storage

• "List my Azure storage accounts"
• "Get details about my storage account 'mystorageaccount'"
• "Create a new storage account in East US with Data Lake support"
• "Get details about my Storage container"
• "Upload my file to the blob container"

🔄 Azure Migrate

• "Generate a Platform Landing Zone"
• "Turn off DDoS protection in my Platform Landing Zone"
• "Turn off Bastion host in my Platform Landing Zone"

🏛️ Azure Well-Architected Framework

• "List all services with Well-Architected Framework guidance"
• "What services have architectural guidance?"
• "Get Well-Architected Framework guidance for App Service"
• "What's the architectural guidance for Azure Cosmos DB?"

Complete List of Supported Azure Services

The Azure MCP Server provides tools for interacting with 43+ Azure service areas:

• 🧮 Microsoft Foundry - AI model management, AI model deployment, and knowledge index management
• 📊 Azure Advisor - Advisor recommendations
• 🔎 Azure AI Search - Search engine/vector database operations
• 🎤 Azure AI Services Speech - Speech-to-text recognition and text-to-speech synthesis
• ⚙️ Azure App Configuration - Configuration management
• 🕸️ Azure App Service - Web app hosting
• 🛡️ Azure Best Practices - Secure, production-grade guidance
• 🖥️ Azure CLI Generate - Generate Azure CLI commands from natural language
• 📞 Azure Communication Services - SMS messaging and communication
• � Azure Compute - Virtual Machine, Virtual Machine Scale Set, and Disk management
• �🔐 Azure Confidential Ledger - Tamper-proof ledger operations
• 📦 Azure Container Apps - Container hosting
• 📦 Azure Container Registry (ACR) - Container registry management
• 📊 Azure Cosmos DB - NoSQL database operations
• 🧮 Azure Data Explorer - Analytics queries and KQL
• 🐬 Azure Database for MySQL - MySQL database management
• 🐘 Azure Database for PostgreSQL - PostgreSQL database management
• 🏭 Azure Device Registry - Device Registry namespace management
• 📊 Azure Event Grid - Event routing and management
• 📁 Azure File Shares - Azure managed file share operations
• ⚡ Azure Functions - Function App management and functions project files, language support, and templates source code
• 🔑 Azure Key Vault - Secrets, keys, and certificates
• ☸️ Azure Kubernetes Service (AKS) - Container orchestration
• 📦 Azure Load Testing - Performance testing
• 🚀 Azure Managed Grafana - Monitoring dashboards
• 🗃️ Azure Managed Lustre - High-performance Lustre filesystem operations
• 🏪 Azure Marketplace - Product discovery
• 🔄 Azure Migrate - Platform Landing Zone generation and modification guidance
• 📈 Azure Monitor - Logging, metrics, health monitoring, and instrumentation onboarding/migration workflow for local applications
• ⚖️ Azure Policy - Policies set to enforce organizational standards
• ⚙️ Azure Native ISV Services - Third-party integrations
• 🛡️ Azure Quick Review CLI - Compliance scanning
• 📊 Azure Quota - Resource quota and usage management
• 🎭 Azure RBAC - Access control management
• 🔴 Azure Redis Cache - In-memory data store
• 🏗️ Azure Resource Groups - Resource organization
• 🚌 Azure Service Bus - Message queuing
• 🧵 Azure Service Fabric - Managed cluster node operations
• 🏥 Azure Service Health - Resource health status and availability
• 🗄️ Azure SQL Database - Relational database management
• 🗄️ Azure SQL Elastic Pool - Database resource sharing
• 🗄️ Azure SQL Server - Server administration
• 💾 Azure Storage - Blob storage
• Azure Storage Sync - Azure File Sync management operations
• 📋 Azure Subscription - Subscription management
• 🏗️ Azure Terraform Best Practices - Infrastructure as code guidance
• 🖥️ Azure Virtual Desktop - Virtual desktop infrastructure
• 🏛️ Azure Well-Architected Framework - Architectural best practices and design patterns
• 📊 Azure Workbooks - Custom visualizations
• 🏗️ Bicep - Azure resource templates
• 🏗️ Cloud Architect - Guided architecture design

Support and Reference

Documentation

• See our official documentation on learn.microsoft.com to learn how to use the Azure MCP Server to interact with Azure resources through natural language commands from AI agents and other types of clients.
• For additional command documentation and examples, see Azure MCP Commands.
• Use Prompt Templates to set tenant and subscription context once at the beginning of your Copilot session, avoiding repetitive information in subsequent prompts.

Feedback and Support

• Check the Troubleshooting guide to diagnose and resolve common issues with the Azure MCP Server.
• Review the Known Issues for current limitations and workarounds.
• For advanced troubleshooting, you can enable support logging using the --dangerously-write-support-logs-to-dir option.
• We're building this in the open. Your feedback is much appreciated, and will help us shape the future of the Azure MCP server.
  • 👉 Open an issue in the public GitHub repository — we’d love to hear from you!

Security

Your credentials are always handled securely through the official Azure Identity SDK - we never store or manage tokens directly.

MCP as a phenomenon is very novel and cutting-edge. As with all new technology standards, consider doing a security review to ensure any systems that integrate with MCP servers follow all regulations and standards your system is expected to adhere to. This includes not only the Azure MCP Server, but any MCP client/agent that you choose to implement down to the model provider.

You should follow Microsoft security guidance for MCP servers, including enabling Entra ID authentication, secure token management, and network isolation. Refer to Microsoft Security Documentation for details.

Permissions and Risk

MCP clients can invoke operations based on the user’s Azure RBAC permissions. Autonomous or misconfigured clients may perform destructive actions. You should review and apply least-privilege RBAC roles and implement safeguards before deployment. Certain safeguards, such as flags to prevent destructive operations, are not standardized in the MCP specification and may not be supported by all clients.

Data Collection

The software may collect information about you and your use of the software and send it to Microsoft. Microsoft may use this information to provide services and improve our products and services. You may turn off the telemetry as described in the repository. There are also some features in the software that may enable you and Microsoft to collect data from users of your applications. If you use these features, you must comply with applicable law, including providing appropriate notices to users of your applications together with a copy of Microsoft's privacy statement. You can learn more about data collection and use in the help documentation and our privacy statement. Your use of the software operates as your consent to these practices.

Telemetry Configuration

Telemetry collection is on by default. The server supports two telemetry streams:

1. User-provided telemetry: If you configure your own Application Insights connection string via the APPLICATIONINSIGHTS_CONNECTION_STRING environment variable, telemetry will be sent to your Application Insights resource.

2. Microsoft telemetry: By default, telemetry is also sent to Microsoft to help improve the product. This can be disabled separately from user-provided telemetry. See Disabling All Telemetry section below for more details.

Disabling All Telemetry

To disable all telemetry collection (both user-provided and Microsoft), set the environment variable AZURE_MCP_COLLECT_TELEMETRY to false:

export AZURE_MCP_COLLECT_TELEMETRY=false

Disabling Microsoft Telemetry Only

To disable only Microsoft telemetry collection while keeping your own Application Insights telemetry active, set the environment variable AZURE_MCP_COLLECT_TELEMETRY_MICROSOFT to false:

export AZURE_MCP_COLLECT_TELEMETRY_MICROSOFT=false

Compliance Responsibility

This MCP server may interact with clients and services outside Microsoft compliance boundaries. You are responsible for ensuring that any integration complies with applicable organizational, regulatory, and contractual requirements.

Third Party Components

This MCP server may use or depend on third party components. You are responsible for reviewing and complying with the licenses and security posture of any third-party components.

Export Control

Use of this software must comply with all applicable export laws and regulations, including U.S. Export Administration Regulations and local jurisdiction requirements.

No Warranty / Limitation of Liability

This software is provided “as is” without warranties or conditions of any kind, either express or implied. Microsoft shall not be liable for any damages arising from use, misuse, or misconfiguration of this software.

Contributing

We welcome contributions to the Azure MCP Server! Whether you're fixing bugs, adding new features, or improving documentation, your contributions are welcome.

Please read our Contributing Guide for guidelines on:

• 🛠️ Setting up your development environment
• ✨ Adding new commands
• 📝 Code style and testing requirements
• 🔄 Making pull requests

Code of Conduct

This project has adopted the Microsoft Open Source Code of Conduct. For more information, see the Code of Conduct FAQ or contact [e-mail] with any additional questions or comments.