Azure MCP server
Microsoft's official Azure MCP Server: manage 40+ Azure services — storage, Key Vault, Cosmos DB, SQL, Monitor, AKS, App Service, and more — from your agent.
The Azure MCP Server is Microsoft's official integration that brings the breadth of Azure to an AI agent. It connects a coding assistant to more than forty Azure services so you can manage resources conversationally — list resource groups and subscriptions, query a Log Analytics workspace, read a Key Vault secret, inspect Cosmos DB databases, or check an AKS cluster — using your own Azure credentials and Role-Based Access Control for authorization.
The server is distributed as the @azure/mcp npm package (also a Docker image) and launched with npx -y @azure/mcp@latest server start over stdio; it authenticates through the Azure CLI sign-in, managed identity, or environment credentials, and supports a read-only mode plus an elicitation step that asks for confirmation before tools return secrets. By default it runs in namespace mode, where each Azure service area is exposed as a single tool the agent expands on demand (it also offers all mode for individual tools and single mode for one unified azure tool). Covered service namespaces include storage, keyvault, cosmos, sql, mysql, postgres, redis, monitor, workbooks, appconfig, applicationinsights, aks, acr, appservice, functionapp, compute, servicefabric, servicebus, eventhubs, eventgrid, kusto, search, foundry, speech, signalr, communication, loadtesting, virtualdesktop, confidentialledger, fileshares, storagesync, managedlustre, grafana, group, subscription, role, quota, advisor, pricing, resourcehealth, policy, marketplace, deploy, bicepschema, and azureterraform, alongside best-practices, Well-Architected, and cloud-architect guidance tools.
Quick install
Copy-paste configs are provided for all 8 supported clients. Pick your client below.
Available tools
| Tool | Description |
|---|---|
| storage | Manage Azure Storage accounts, blob containers, blobs, queues, and tables. |
| keyvault | List and create keys, secrets, and certificates in Azure Key Vault (secret retrieval is gated by a confirmation step). |
| cosmos | Work with Azure Cosmos DB accounts, databases, containers, and documents, including queries. |
| sql | Work with Azure SQL Database servers, databases, firewall rules, elastic pools, and Entra admins. |
| mysql | Manage Azure Database for MySQL servers, databases, and tables. |
| postgres | Manage Azure Database for PostgreSQL servers, databases, and tables. |
| redis | Create and list Azure Managed Redis and Azure Cache for Redis resources. |
| monitor | Query Azure Monitor logs (KQL against Log Analytics) and metrics. |
| workbooks | Create, manage, and update Azure Workbooks for data visualization and reporting. |
| appconfig | Manage centralized application settings and feature flags in Azure App Configuration. |
| applicationinsights | List Azure Application Insights resources. |
| aks | List Azure Kubernetes Service clusters. |
| acr | List Azure Container Registry instances and repositories. |
| appservice | Manage Azure App Service web apps, database connections, diagnostics, deployments, and settings. |
| functionapp | List Azure Functions apps. |
| compute | Get details for Azure virtual machines, virtual machine scale sets, and managed disks. |
| servicefabric | Manage Azure Service Fabric managed clusters, including node details and restarts. |
| servicebus | Manage Azure Service Bus queues and topics and peek at messages. |
| eventhubs | Manage Azure Event Hubs namespaces and event hubs. |
| eventgrid | Manage Azure Event Grid topics and subscriptions. |
| kusto | Work with Azure Data Explorer (Kusto) clusters, databases, tables, and queries. |
| search | Manage Azure AI Search services, indexes, and queries. |
| foundry | Work with Microsoft Foundry models, deployments, and endpoints. |
| speech | Manage Azure Speech resources such as speech-to-text and text-to-speech. |
| signalr | Manage Azure SignalR resources and runtimes. |
| communication | Send SMS and email messages using Azure Communication Services. |
| loadtesting | Create, run, and view Azure Load Testing tests and runs. |
| virtualdesktop | Manage Azure Virtual Desktop host pools, session hosts, and user sessions. |
| confidentialledger | Manage Azure Confidential Ledger resources, including ledgers and transactions. |
| fileshares | Manage Azure Files file shares, including create, update, delete, and snapshot. |
| storagesync | Manage Azure File Sync services, server registration, sync groups, and endpoints. |
| managedlustre | Manage Azure Managed Lustre file systems and auto-import/export jobs. |
| grafana | List Azure Managed Grafana workspaces. |
| group | List Azure resource groups and the resources within a group. |
| subscription | List Azure subscriptions. |
| role | View and manage Azure role-based access control (RBAC) assignments. |
| quota | Manage Azure resource quotas and limits. |
| advisor | Get Azure Advisor recommendations to optimize resources and improve performance. |
| pricing | Get Azure retail pricing, cost estimates, and billing details for services, SKUs, and regions. |
| resourcehealth | Check availability status and health events for Azure resources. |
| policy | Manage Azure Policy assignments, definitions, and initiatives. |
| marketplace | Discover Azure Marketplace products and offers. |
| deploy | Deploy and manage Azure resources using templates and scripts. |
| bicepschema | Retrieve Bicep schemas for Azure resources to author Infrastructure as Code templates. |
| azureterraform | Retrieve Terraform provider docs, discover Azure Verified Modules, export resources to Terraform, and validate configurations. |
| extension | Find Azure CLI and Azure Developer CLI (azd) commands and access azd MCP tools when installed locally. |
Required configuration
- AZURE_SUBSCRIPTION_IDOptional
Default Azure subscription ID. If unset, resolved from your Azure CLI profile (az account set).
What you can do with it
Operate Azure resources in plain language
Ask the agent to list your resource groups, query a Log Analytics workspace for errors in the last hour, or read a value from App Configuration. The group, monitor, and appconfig tools execute against your own subscription using your Azure RBAC permissions.
Inspect data and storage safely
Use the storage, cosmos, and sql tools to enumerate accounts, databases, and containers and run read queries, with read-only mode and a confirmation step protecting secret-returning operations like keyvault.
FAQ
- Is it free?
- The Azure MCP Server is open source (MIT) and free. It operates on your Azure subscription, so you pay only for the Azure resources you create or use through it — and read operations on existing resources are free.
- Does it support remote/OAuth?
- It runs locally over stdio (npx -y @azure/mcp@latest server start) and authenticates with your Azure identity via the Azure CLI sign-in, managed identity, or environment credentials rather than a custom OAuth flow. Access is governed by Azure Role-Based Access Control.