Azure MCP Server

✓ verified

Query and manage Azure resources through the Azure CLI auth.

Don't have ToolPiper? We'll take you to the download.

Open repository →

Publisher

Microsoft

License

MIT

Transport

Local subprocess

Tools

5

What this server does

Microsoft's Azure MCP server lets the assistant explore and operate your Azure estate using the credentials you already have from az login. List subscriptions and resource groups, inspect storage accounts and Cosmos DB, query Log Analytics, and reach dozens of other services. Because it authenticates through the Azure CLI and DefaultAzureCredential, there is no separate key to paste: the server can do whatever your signed-in identity is permitted to do. Sign in to a non-production subscription while you get comfortable.

Tools included

  • group_list

    List Azure resource groups.

  • storage_account_list

    List storage accounts.

  • cosmos_query

    Query a Cosmos DB database.

  • monitor_log_query

    Run a Log Analytics query.

  • subscription_list

    List subscriptions.

The authoritative list comes from the server's tools/list at runtime. This catalog entry may lag the upstream until the next ToolPiper release.

Install in ToolPiper

ToolPiper handles the JSON configuration. Click Install, fill in any required tokens, and the server is ready in your chat.

Don't have ToolPiper? We'll take you to the download.

Install in another client

Install in another MCP client (Claude Desktop, Cursor, Continue, Cline)

Add this to ~/Library/Application Support/Claude/claude_desktop_config.json.

{
  "mcpServers": {
    "azure": {
      "command": "npx",
      "args": [
        "-y",
        "@azure/mcp@latest",
        "server",
        "start"
      ]
    }
  }
}

Example prompts

  • "List my resource groups and which region each is in."

  • "Show the storage accounts in the production group and their access tiers."

  • "Run a Log Analytics query for failed requests in the last hour."

Security notes

The server authenticates through your existing Azure CLI session and DefaultAzureCredential, so it inherits your identity and its RBAC. It can do whatever you can do, including writes if your role allows them. Sign in to a least-privilege or non-production subscription before connecting. There is no separate secret to manage; your az login session is the credential.

Related tools