MCP.so
Sign In

EntraID MCP Server (Microsoft Graph FastMCP)

@hieuttmmo

About EntraID MCP Server (Microsoft Graph FastMCP)

MCP server for interacting with EntraID through Microsoft Graph API.

Basic information

Category

Other

Runtime

python

Transports

stdio

Publisher

hieuttmmo

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "EntraID MCP Server": {
      "command": "uv",
      "args": [
        "run",
        "--with",
        "azure-core",
        "--with",
        "azure-identity",
        "--with",
        "fastmcp",
        "--with",
        "msgraph-core",
        "--with",
        "msgraph-sdk",
        "fastmcp",
        "run",
        "/path/to/src/msgraph_mcp_server/server.py"
      ],
      "env": {
        "TENANT_ID": "<your-tenant-id>",
        "CLIENT_ID": "<your-client-id>",
        "CLIENT_SECRET": "<your-client-secret>"
      }
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is EntraID MCP Server (Microsoft Graph FastMCP)?

It is a modular, resource-oriented FastMCP server for interacting with Microsoft Graph API. Designed for administrators and developers, it supports advanced queries for users, sign‑in logs, MFA status, privileged users, groups, applications, service principals, devices, conditional access policies, and audit logs.

How to use EntraID MCP Server (Microsoft Graph FastMCP)?

Clone the repository and create a config/.env file with TENANT_ID, CLIENT_ID, and CLIENT_SECRET. Use fastmcp dev '/path/to/server.py' for interactive development, or fastmcp install to register it as an MCP tool with Claude. Certificate‑based authentication is also supported.

Key features of EntraID MCP Server (Microsoft Graph FastMCP)

  • Modular resource structure for users, groups, and applications.
  • Centralized Graph client with shared authentication.
  • Full group lifecycle and membership management.
  • Sign‑in logs, MFA status, and audit log queries.
  • Password management with secure generation.
  • Permissions helper for least‑privilege guidance.

Use cases of EntraID MCP Server (Microsoft Graph FastMCP)

  • Query sign‑in logs for a specific user over the last X days.
  • Get MFA status for all members of a Microsoft 365 group.
  • Reset a user’s password and require a change on next sign‑in.
  • Manage group members and owners (add/remove).
  • List, create, update, and delete applications or service principals.

FAQ from EntraID MCP Server (Microsoft Graph FastMCP)

What Microsoft Graph permissions are required?

The server uses application permissions such as User.Read.All, Group.ReadWrite.All, AuditLog.Read.All, DeviceManagementManagedDevices.Read.All, and others. The full list

Comments

More Other MCP servers