EntraID MCP Server (Microsoft Graph FastMCP)
@hieuttmmo
About EntraID MCP Server (Microsoft Graph FastMCP)
MCP server for interacting with EntraID through Microsoft Graph API.
Basic information
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"EntraID MCP Server": {
"command": "uv",
"args": [
"run",
"--with",
"azure-core",
"--with",
"azure-identity",
"--with",
"fastmcp",
"--with",
"msgraph-core",
"--with",
"msgraph-sdk",
"fastmcp",
"run",
"/path/to/src/msgraph_mcp_server/server.py"
],
"env": {
"TENANT_ID": "<your-tenant-id>",
"CLIENT_ID": "<your-client-id>",
"CLIENT_SECRET": "<your-client-secret>"
}
}
}
}Tools
No tools detected
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is EntraID MCP Server (Microsoft Graph FastMCP)?
It is a modular, resource-oriented FastMCP server for interacting with Microsoft Graph API. Designed for administrators and developers, it supports advanced queries for users, sign‑in logs, MFA status, privileged users, groups, applications, service principals, devices, conditional access policies, and audit logs.
How to use EntraID MCP Server (Microsoft Graph FastMCP)?
Clone the repository and create a config/.env file with TENANT_ID, CLIENT_ID, and CLIENT_SECRET. Use fastmcp dev '/path/to/server.py' for interactive development, or fastmcp install to register it as an MCP tool with Claude. Certificate‑based authentication is also supported.
Key features of EntraID MCP Server (Microsoft Graph FastMCP)
- Modular resource structure for users, groups, and applications.
- Centralized Graph client with shared authentication.
- Full group lifecycle and membership management.
- Sign‑in logs, MFA status, and audit log queries.
- Password management with secure generation.
- Permissions helper for least‑privilege guidance.
Use cases of EntraID MCP Server (Microsoft Graph FastMCP)
- Query sign‑in logs for a specific user over the last X days.
- Get MFA status for all members of a Microsoft 365 group.
- Reset a user’s password and require a change on next sign‑in.
- Manage group members and owners (add/remove).
- List, create, update, and delete applications or service principals.
FAQ from EntraID MCP Server (Microsoft Graph FastMCP)
What Microsoft Graph permissions are required?
The server uses application permissions such as User.Read.All, Group.ReadWrite.All, AuditLog.Read.All, DeviceManagementManagedDevices.Read.All, and others. The full list
More Other MCP servers
MCP Toolbox for Databases
googleapisMCP Toolbox for Databases is an open source MCP server for databases.
Inbox Zero AI
elie222The world's best AI personal assistant for email. Open source app to help you reach inbox zero fast.
ghidraMCP
LaurieWiredMCP Server for Ghidra
Activepieces
activepiecesAI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
Inbox Zero AI MCP
elie222The world's best AI personal assistant for email. Open source app to help you reach inbox zero fast.
Comments