EntraID MCP Server (Microsoft Graph FastMCP)

Name: EntraID MCP Server (Microsoft Graph FastMCP)
Author: hieuttmmo

@hieuttmmo

代码仓库

关于 EntraID MCP Server (Microsoft Graph FastMCP)

MCP server for interacting with EntraID through Microsoft Graph API.

#microsoft-entra-id #mcp-server #microsoft-graph-api

基本信息

分类

其他

运行时

python

传输方式

stdio

发布者

hieuttmmo

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "EntraID MCP Server": {
      "command": "uv",
      "args": [
        "run",
        "--with",
        "azure-core",
        "--with",
        "azure-identity",
        "--with",
        "fastmcp",
        "--with",
        "msgraph-core",
        "--with",
        "msgraph-sdk",
        "fastmcp",
        "run",
        "/path/to/src/msgraph_mcp_server/server.py"
      ],
      "env": {
        "TENANT_ID": "<your-tenant-id>",
        "CLIENT_ID": "<your-client-id>",
        "CLIENT_SECRET": "<your-client-secret>"
      }
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is EntraID MCP Server (Microsoft Graph FastMCP)?

It is a modular, resource-oriented FastMCP server for interacting with Microsoft Graph API. Designed for administrators and developers, it supports advanced queries for users, sign‑in logs, MFA status, privileged users, groups, applications, service principals, devices, conditional access policies, and audit logs.

How to use EntraID MCP Server (Microsoft Graph FastMCP)?

Clone the repository and create a config/.env file with TENANT_ID, CLIENT_ID, and CLIENT_SECRET. Use fastmcp dev '/path/to/server.py' for interactive development, or fastmcp install to register it as an MCP tool with Claude. Certificate‑based authentication is also supported.

Key features of EntraID MCP Server (Microsoft Graph FastMCP)

Modular resource structure for users, groups, and applications.
Centralized Graph client with shared authentication.
Full group lifecycle and membership management.
Sign‑in logs, MFA status, and audit log queries.
Password management with secure generation.
Permissions helper for least‑privilege guidance.

Use cases of EntraID MCP Server (Microsoft Graph FastMCP)

Query sign‑in logs for a specific user over the last X days.
Get MFA status for all members of a Microsoft 365 group.
Reset a user’s password and require a change on next sign‑in.
Manage group members and owners (add/remove).
List, create, update, and delete applications or service principals.

FAQ from EntraID MCP Server (Microsoft Graph FastMCP)

What Microsoft Graph permissions are required?

The server uses application permissions such as User.Read.All, Group.ReadWrite.All, AuditLog.Read.All, DeviceManagementManagedDevices.Read.All, and others. The full list