Azure MCP Server

Azure MCP Server lets an agent handle requests like "list my storage accounts", "query this Log Analytics table" or "show the node pools of my AKS cluster" against your own subscriptions. It signs in with the Azure credentials already on your machine, so there is no separate API key. Microsoft also ships it as NuGet, PyPI and Docker packages.

Setup

npx -y @azure/mcp@latest server start runs over stdio. Sign in first with az login, Azure PowerShell, azd or VS Code; the server tries a chain of credentials and uses the first that works. In Claude Code, /plugin install azure@claude-plugins-official adds the server with Azure skills.

• --mode namespace (default, one tool per service), all or single
• --namespace storage --namespace keyvault exposes only those services
• --read-only blocks write operations

What it exposes

• Data and secrets: Storage, Cosmos DB, Azure SQL, PostgreSQL, Key Vault
• Monitoring and management: Azure Monitor and Log Analytics queries, Resource Health, Advisor, Quota
• Apps and containers: AKS, App Service, Container Apps, Container Registry

Limits

• The agent can do only what your Azure RBAC roles allow.
• Telemetry to Microsoft is on by default; AZURE_MCP_COLLECT_TELEMETRY=false turns it off.
• Microsoft says the local server is meant for developer use inside your organization.

Aimed at developers who already manage Azure from the CLI. For documentation lookups, Microsoft's separate Learn server at https://learn.microsoft.com/api/mcp needs no account.