Azure
Microsoft's official Azure MCP. 40+ Azure services in one server: storage, compute, databases, AI, monitoring.
Delv Safety Grade: A
Score 82/100 · assessed 2026-04-28
Microsoft's official Azure MCP server provides comprehensive access to 40+ Azure services including storage, compute, databases, AI, and monitoring. The maintainer credentials are impeccable (Microsoft itself), and the server is open source with good documentation. However, the permission scope is extremely broad. With valid Azure credentials, this server can read and write across your entire Azure estate: deploy apps, query databases, manage secrets, modify storage, and access monitoring data. The install method via npm is standard and verifiable. The required environment variables (tenant ID, client ID, client secret) grant service principal access, which means the scope is limited only by what that principal is authorized to do in your Azure subscription. This is appropriate for production troubleshooting and infrastructure work, but represents significant blast radius if credentials leak or the AI makes mistakes. No known security incidents.
Lethal Trifecta (prompt-injection exposure)
TWO OF THREESame shape as AWS.
Green flags
- Official Microsoft vendor with strong security track record
- Open source repository with active maintenance and issue tracking
- Standard npm distribution with semantic versioning
- Uses Azure service principal auth model (industry standard)
- Comprehensive documentation and clear capability descriptions
Red flags
- Extremely broad scope: 40+ services means large attack surface if compromised
- Service principal credentials in env vars grant wide Azure subscription access
- Write capabilities across storage, compute, databases without fine-grained controls
- Key Vault access means potential exposure of production secrets
- No apparent sandboxing or rate limiting mentioned in documentation
Permissions requested
Install
npm install -g @azure/mcp
AZURE_TENANT_IDAZURE_CLIENT_IDAZURE_CLIENT_SECRETReview
The definitive Azure integration for Claude and compatible hosts. Install it if Azure is your day job and you want to query, deploy, and troubleshoot without leaving your agent. Skip it if you're only dabbling in Azure or prefer lighter, single-service MCPs.
Good at
- Covers 40+ Azure services in one server, so you don't need multiple MCPs for storage, compute, and monitoring.
- Official Microsoft support means it tracks Azure API changes and deprecations reliably.
- Azure Monitor integration lets you query logs and metrics in natural language, which is faster than writing KQL.
- Service principal authentication handles token refresh automatically, no manual re-auth.
- Deploying to App Service or reading Cosmos DB documents via chat actually works as advertised.
Watch out
- The tool list gets crowded because you load all 40+ services even if you only need two or three.
- Setting up the service principal and RBAC roles is fiddly if you're not already familiar with Entra ID.
- Permission errors are cryptic when the service principal lacks a specific role, which slows down initial setup.
- Hosts beyond Claude Desktop require manual config adjustments, no one-click install.
- Overkill if you only interact with one or two Azure services occasionally.
Use cases
- Querying Azure Monitor from the agent
- Listing storage accounts and SAS tokens
- Deploying to App Service via natural language
- Reading Cosmos DB documents on demand
Getting started
Works with
Similar MCPs
- ESXi MCPManages VMware ESXi and vCenter for VM lifecycle and real-time performance monitoring via REST and SSE.
- TerraformHashiCorp's official Terraform MCP. Connects agents to the Terraform Registry for module discovery and infrastructure-as-code automation.
- HerokuHeroku's official MCP. Manage apps, databases, dynos, and pipelines through the platform CLI from inside an agent.
- AWS LabsAWS Labs ships a growing family of MCPs for S3, Lambda, EKS, CDK, etc. Modular install — pick the services you actually use.