EntraID MCP Server
A modular server for interacting with Microsoft Graph API that enables management of users, groups, applications, sign-in logs, MFA status, and other Azure AD resources through natural language commands.
What is EntraID MCP Server?
EntraID MCP Server is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to modular server for interacting with microsoft graph api that enables management of users, groups, applications, sign-in logs, mfa status, and other azure ad resources through natural language commands...
A modular server for interacting with Microsoft Graph API that enables management of users, groups, applications, sign-in logs, MFA status, and other Azure AD resources through natural language commands.
This server falls under the Security category on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- A modular server for interacting with Microsoft Graph API th
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx entraid-mcp-serverConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use EntraID MCP Server
The EntraID MCP Server provides natural language access to Microsoft Entra ID (formerly Azure Active Directory) through the Microsoft Graph API. It exposes tools for managing users, groups, applications, service principals, sign-in logs, MFA status, passwords, conditional access policies, and managed devices — covering the full lifecycle of identity and access management tasks. Security teams and IT administrators can use it to audit access, investigate sign-in anomalies, and make bulk changes through conversational AI instead of navigating the Azure portal.
Prerequisites
- An Azure AD tenant with an app registration (Service Principal) created
- Client ID, Client Secret, and Tenant ID from the Azure app registration
- Microsoft Graph API permissions granted to the app (User.Read.All, Group.ReadWrite.All, AuditLog.Read.All, and others as needed)
- Python 3.9+ and the FastMCP CLI installed
- Required Python packages: msgraph-sdk, azure-identity, azure-core, msgraph-core
Create an Azure App Registration
In the Azure portal, go to Azure Active Directory → App registrations → New registration. Create a new app, then generate a Client Secret under Certificates & secrets. Grant the required Microsoft Graph API application permissions and have an admin grant consent.
Clone the repository and create the .env file
Clone the server and create a .env file with your Azure credentials.
git clone https://github.com/hieuttmmo/entraid-mcp-server.git
cd entraid-mcp-server
# Create .env with your credentials
echo "TENANT_ID=your-tenant-id" > .env
echo "CLIENT_ID=your-client-id" >> .env
echo "CLIENT_SECRET=your-client-secret" >> .envInstall Python dependencies
Install the required Python packages for the Microsoft Graph SDK and Azure identity.
pip install msgraph-sdk azure-identity azure-core msgraph-core fastmcpTest the server with FastMCP dev mode
Run in dev mode to verify the server starts and your credentials work before connecting to Claude.
fastmcp dev '/path/to/entraid-mcp-server/src/msgraph_mcp_server/server.py'Install for Claude integration
Use fastmcp install to register the server with Claude Desktop, injecting the environment variables from your .env file automatically.
fastmcp install '/path/to/entraid-mcp-server/src/msgraph_mcp_server/server.py' \
--with msgraph-sdk --with azure-identity --with azure-core --with msgraph-core \
-f /path/to/.envRestart Claude Desktop and verify
Restart Claude Desktop and ask it to retrieve information about a user to confirm the Microsoft Graph API connection is working.
EntraID MCP Server Examples
Client configuration
Manual claude_desktop_config.json entry for the EntraID MCP Server using a Python venv.
{
"mcpServers": {
"entraid": {
"command": "python",
"args": ["/path/to/entraid-mcp-server/src/msgraph_mcp_server/server.py"],
"env": {
"TENANT_ID": "your-tenant-id",
"CLIENT_ID": "your-client-id",
"CLIENT_SECRET": "your-client-secret"
}
}
}
}Prompts to try
Example prompts for managing Microsoft Entra ID through Claude.
- "List all users in the tenant who have the Global Administrator role"
- "Show sign-in logs for user [email protected] from the past 7 days"
- "Check which users in the 'Engineering' group do not have MFA enabled"
- "Create a new security group called 'VPN-Access' with description 'Users allowed VPN access'"
- "Reset the password for user [email protected] and require change on next login"
- "List all enterprise applications and their assigned permissions"Troubleshooting EntraID MCP Server
Authentication fails with AADSTS error codes
Verify TENANT_ID, CLIENT_ID, and CLIENT_SECRET are correct. Common issues: the client secret has expired (regenerate in Azure portal), or admin consent was not granted for the required Graph API permissions. Go to the app registration → API permissions and click 'Grant admin consent'.
Access denied (403) when calling specific Graph API endpoints
The app registration needs specific Graph API application permissions for each capability. Check the required permissions in the server's documentation — for example, AuditLog.Read.All for sign-in logs, UserAuthenticationMethod.Read.All for MFA status. Add missing permissions and re-grant admin consent.
fastmcp command not found
Install FastMCP with 'pip install fastmcp'. If the command still is not found, check that Python's scripts directory is on your PATH, or use 'python -m fastmcp' instead of 'fastmcp'.
Frequently Asked Questions about EntraID MCP Server
What is EntraID MCP Server?
EntraID MCP Server is a Model Context Protocol (MCP) server that modular server for interacting with microsoft graph api that enables management of users, groups, applications, sign-in logs, mfa status, and other azure ad resources through natural language commands. It connects AI assistants to external tools and data sources through a standardized interface.
How do I install EntraID MCP Server?
Follow the installation instructions on the EntraID MCP Server GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with EntraID MCP Server?
EntraID MCP Server works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is EntraID MCP Server free to use?
Yes, EntraID MCP Server is open source and available under the MIT license. You can use it freely in both personal and commercial projects.
EntraID MCP Server Alternatives — Similar Security Servers
Looking for alternatives to EntraID MCP Server? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up EntraID MCP Server in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use EntraID MCP Server?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.