Azure MCP server

OfficialMicrosoftConfig last verified Jun 1, 2026

Microsoft's official Azure MCP Server: manage 40+ Azure services — storage, Key Vault, Cosmos DB, SQL, Monitor, AKS, App Service, and more — from your agent.

The Azure MCP Server is Microsoft's official integration that brings the breadth of Azure to an AI agent. It connects a coding assistant to more than forty Azure services so you can manage resources conversationally — list resource groups and subscriptions, query a Log Analytics workspace, read a Key Vault secret, inspect Cosmos DB databases, or check an AKS cluster — using your own Azure credentials and Role-Based Access Control for authorization.

The server is distributed as the @azure/mcp npm package (also a Docker image) and launched with npx -y @azure/mcp@latest server start over stdio; it authenticates through the Azure CLI sign-in, managed identity, or environment credentials, and supports a read-only mode plus an elicitation step that asks for confirmation before tools return secrets. By default it runs in namespace mode, where each Azure service area is exposed as a single tool the agent expands on demand (it also offers all mode for individual tools and single mode for one unified azure tool). Covered service namespaces include storage, keyvault, cosmos, sql, mysql, postgres, redis, monitor, workbooks, appconfig, applicationinsights, aks, acr, appservice, functionapp, compute, servicefabric, servicebus, eventhubs, eventgrid, kusto, search, foundry, speech, signalr, communication, loadtesting, virtualdesktop, confidentialledger, fileshares, storagesync, managedlustre, grafana, group, subscription, role, quota, advisor, pricing, resourcehealth, policy, marketplace, deploy, bicepschema, and azureterraform, alongside best-practices, Well-Architected, and cloud-architect guidance tools.

Quick install

Copy-paste configs are provided for all 8 supported clients. Pick your client below.

Add to ~/.claude.json

~/.claude.json
json
{
  "mcpServers": {
    "azure": {
      "command": "npx",
      "args": [
        "-y",
        "@azure/mcp@latest",
        "server",
        "start"
      ],
      "env": {
        "AZURE_SUBSCRIPTION_ID": "<AZURE_SUBSCRIPTION_ID>"
      }
    }
  }
}
Or via CLI
bash
claude mcp add azure -- npx -y @azure/mcp@latest server start

Available tools

ToolDescription
storageManage Azure Storage accounts, blob containers, blobs, queues, and tables.
keyvaultList and create keys, secrets, and certificates in Azure Key Vault (secret retrieval is gated by a confirmation step).
cosmosWork with Azure Cosmos DB accounts, databases, containers, and documents, including queries.
sqlWork with Azure SQL Database servers, databases, firewall rules, elastic pools, and Entra admins.
mysqlManage Azure Database for MySQL servers, databases, and tables.
postgresManage Azure Database for PostgreSQL servers, databases, and tables.
redisCreate and list Azure Managed Redis and Azure Cache for Redis resources.
monitorQuery Azure Monitor logs (KQL against Log Analytics) and metrics.
workbooksCreate, manage, and update Azure Workbooks for data visualization and reporting.
appconfigManage centralized application settings and feature flags in Azure App Configuration.
applicationinsightsList Azure Application Insights resources.
aksList Azure Kubernetes Service clusters.
acrList Azure Container Registry instances and repositories.
appserviceManage Azure App Service web apps, database connections, diagnostics, deployments, and settings.
functionappList Azure Functions apps.
computeGet details for Azure virtual machines, virtual machine scale sets, and managed disks.
servicefabricManage Azure Service Fabric managed clusters, including node details and restarts.
servicebusManage Azure Service Bus queues and topics and peek at messages.
eventhubsManage Azure Event Hubs namespaces and event hubs.
eventgridManage Azure Event Grid topics and subscriptions.
kustoWork with Azure Data Explorer (Kusto) clusters, databases, tables, and queries.
searchManage Azure AI Search services, indexes, and queries.
foundryWork with Microsoft Foundry models, deployments, and endpoints.
speechManage Azure Speech resources such as speech-to-text and text-to-speech.
signalrManage Azure SignalR resources and runtimes.
communicationSend SMS and email messages using Azure Communication Services.
loadtestingCreate, run, and view Azure Load Testing tests and runs.
virtualdesktopManage Azure Virtual Desktop host pools, session hosts, and user sessions.
confidentialledgerManage Azure Confidential Ledger resources, including ledgers and transactions.
filesharesManage Azure Files file shares, including create, update, delete, and snapshot.
storagesyncManage Azure File Sync services, server registration, sync groups, and endpoints.
managedlustreManage Azure Managed Lustre file systems and auto-import/export jobs.
grafanaList Azure Managed Grafana workspaces.
groupList Azure resource groups and the resources within a group.
subscriptionList Azure subscriptions.
roleView and manage Azure role-based access control (RBAC) assignments.
quotaManage Azure resource quotas and limits.
advisorGet Azure Advisor recommendations to optimize resources and improve performance.
pricingGet Azure retail pricing, cost estimates, and billing details for services, SKUs, and regions.
resourcehealthCheck availability status and health events for Azure resources.
policyManage Azure Policy assignments, definitions, and initiatives.
marketplaceDiscover Azure Marketplace products and offers.
deployDeploy and manage Azure resources using templates and scripts.
bicepschemaRetrieve Bicep schemas for Azure resources to author Infrastructure as Code templates.
azureterraformRetrieve Terraform provider docs, discover Azure Verified Modules, export resources to Terraform, and validate configurations.
extensionFind Azure CLI and Azure Developer CLI (azd) commands and access azd MCP tools when installed locally.

Required configuration

  • AZURE_SUBSCRIPTION_IDOptional

    Default Azure subscription ID. If unset, resolved from your Azure CLI profile (az account set).

What you can do with it

Operate Azure resources in plain language

Ask the agent to list your resource groups, query a Log Analytics workspace for errors in the last hour, or read a value from App Configuration. The group, monitor, and appconfig tools execute against your own subscription using your Azure RBAC permissions.

Inspect data and storage safely

Use the storage, cosmos, and sql tools to enumerate accounts, databases, and containers and run read queries, with read-only mode and a confirmation step protecting secret-returning operations like keyvault.

FAQ

Is it free?
The Azure MCP Server is open source (MIT) and free. It operates on your Azure subscription, so you pay only for the Azure resources you create or use through it — and read operations on existing resources are free.
Does it support remote/OAuth?
It runs locally over stdio (npx -y @azure/mcp@latest server start) and authenticates with your Azure identity via the Azure CLI sign-in, managed identity, or environment credentials rather than a custom OAuth flow. Access is governed by Azure Role-Based Access Control.
← Browse all cloud-infra servers