Azure MCP Server: Setup for Claude Code, Cursor and Other Apps

• Lists your resource groups

  Lists the resource groups in a subscription.

  Try: “List the resource groups in my subscription.”

  Network · azmcp group list

• Lists the resources in a group

  Lists everything inside one resource group.

  Try: “What is in the resource group my-rg?”

  Network · azmcp group resource list

• Lists your storage accounts

  Lists the Azure Storage accounts in a subscription.

  Try: “List my Azure Storage accounts.”

  Network · azmcp storage account list

• Lists Cosmos DB accounts

  Lists Cosmos DB accounts in a subscription.

  Try: “Which Cosmos DB accounts do I have?”

  Network · azmcp cosmos list

• Queries items in a Cosmos DB container

  Runs a query against items in a Cosmos DB container.

  Try: “Query the orders container for items from today.”

  Network · azmcp cosmos database container item query

• Shows App Service web apps

  Gets details of web apps in a subscription or resource group.

  Try: “Show details of my web app.”

  Network · azmcp appservice webapp get

• Changes web app settings

  Updates app settings on an App Service web app.

  Try: “Add the setting LOG_LEVEL=debug to my web app.”

  Write · azmcp appservice webapp settings update-appsettings

• Starts, stops or restarts a web app

  Changes the running state of an App Service web app.

  Try: “Restart my web app.”

  Write · azmcp appservice webapp change-state

• Shows Kubernetes clusters

  Gets details of Azure Kubernetes Service clusters.

  Try: “Show my AKS clusters.”

  Network · azmcp aks cluster get

• Reads a Key Vault secret

  Gets a secret from an Azure Key Vault.

  Try: “Get the secret db-password from my vault.”

  Network · azmcp keyvault secret get

• Creates a Key Vault secret

  Stores a new secret in an Azure Key Vault.

  Try: “Create a secret api-key in my vault.”

  Write · azmcp keyvault secret create

• Reads Azure Monitor metrics

  Queries metrics for a resource.

  Try: “Show CPU usage for my VM over the last 24 hours.”

  Network · azmcp monitor metrics query

• Searches resource logs

  Runs a query against logs for a resource.

  Try: “Find errors in the logs for this resource.”

  Network · azmcp monitor resource log query

• Looks up Bicep resource schemas

  Gets the Bicep schema for a resource type.

  Try: “Show the Bicep schema for a storage account.”

  Network · azmcp bicepschema get

• Deletes a virtual machine

  Deletes an Azure virtual machine.

  Try: “Delete the VM test-vm-01.”

  Delete · azmcp compute vm delete

• Deletes an Event Hub

  Deletes an Event Hub from a namespace.

  Try: “Delete the Event Hub old-events.”

  Delete · azmcp eventhubs eventhub delete

Watch out for

• It can delete VMs, disks and other resources

  The command reference lists delete commands for virtual machines, disks, Event Hubs and more. Use read-only mode unless you need changes.

• It can read and create Key Vault secrets

  Secret values pass through the assistant. Limit Key Vault access on the account you use.

• The README warns about destructive actions

  Microsoft says autonomous or misconfigured clients may do destructive things and asks you to apply least-privilege roles first.

• Telemetry is on by default

  The README says usage data goes to Microsoft unless you turn telemetry off as described there.

Security advisories