PlugWiki
Azure DevOps Local MCP Server logo

Azure DevOps Local MCP Server, Microsoft's official server you run yourself

Official · by MicrosoftLocal
Getnpm@azure-devops/mcpmicrosoft/azure-devops-mcpDocs

Lets your AI assistant read and update Azure DevOps work items, pull requests, pipelines, test plans and wikis from your own machine.

This is Microsoft's own Azure DevOps server, run on your computer with Node.js. It lets your assistant list and update work items, review and create pull requests, run pipelines and edit wiki pages, signed in as you. Microsoft now recommends its hosted remote server and says it will replace this one over time. Use this local version when your app cannot sign in to the hosted one, such as Claude Desktop or Codex, and note that it only works with cloud Azure DevOps Services, not on-premises servers.

Good for

  • Developers who want Claude Code, Cursor or Copilot to read their sprint, open pull requests and check builds
  • Claude Desktop and Codex users, who cannot sign in to Microsoft's hosted server yet
  • Scrum masters and leads preparing standups or sprint plans from real backlog data
  • Teams that sign in with a personal access token or Azure CLI instead of a browser

Works in

7 supported · 5 should work

Tap an app to see how to set it up and any known problems.

Install Azure DevOps Local MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the Azure DevOps Local MCP server to Claude Code. Run this command:
    
    claude mcp add --transport stdio azure-devops -- npx -y @azure-devops/mcp {organization}
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js, Azure DevOps Services organization, Work or school Microsoft account.

Read-only mode: This version has no read-only mode. To limit what it can do, load only the tool groups you need, for example add -d core work work-items.

Replace {organization} with your organization name: for https://dev.azure.com/contoso that is contoso. Microsoft's guide asks for Node.js 20 or later. The first tool call opens a browser to sign in with a work or school Microsoft account.

No browser (WSL, SSH, Docker, CI)? Run az login and add "--authentication", "azcli" after the organization name. Other sign-in options: pat (a personal access token in PERSONAL_ACCESS_TOKEN, base64 of email:pat), envvar (a bearer token in ADO_MCP_AUTH_TOKEN) and env (Azure credential chain).

To load fewer tools, add "-d", "core", "work", "work-items" (always keep core). Microsoft recommends its hosted remote server where your app supports it.

From the project README. Source.

Tools

  • Opens work items, your assigned items, comments and change history

    Gets one or many work items by ID, lists the items assigned to you or in an iteration, and shows their comments, revision history and work item type details.

    Try: “Show me my open work items in the Contoso project”

    Read · wit_work_item

  • Searches work items by text and filters

    Finds work items across projects by keywords, with filters such as state, type or assigned person.

    Try: “Find bugs mentioning login timeout”

    Read · search_workitem

  • Runs saved work item queries or a custom query

    Opens a saved query by ID or path, runs it and returns the results, or runs a custom WIQL query you describe.

    Try: “Run my 'Active bugs' saved query”

    Read · wit_query

  • Lists backlog levels and reorders backlog items

    Lists a team's backlog levels and the work items on each, and can move items up or down a backlog or iteration.

    Try: “Show the stories on our team backlog”

    Write · wit_backlog

  • Creates, updates and adds child work items

    Creates new work items, updates fields and relations on one or many items, and adds child items under a parent.

    Try: “Create a bug for the checkout crash and assign it to me”

    Write · wit_work_item_write

  • Adds or edits comments on a work item

    Adds a new comment to a work item or updates one that already exists.

    Try: “Comment on item 4521 that the fix is in review”

    Write · wit_work_item_comment_write

  • Links or unlinks work items, pull requests and builds

    Links two work items, removes links, links a work item to a pull request, or adds a repository, branch, commit or build link.

    Try: “Link work item 4521 to pull request 67”

    Delete · wit_work_item_link_write

  • Downloads a work item attachment

    Downloads a file attached to a work item, saving it on your computer or returning its contents.

    Try: “Download the screenshot attached to bug 4521”

    Files · wit_work_item_attachment

  • Uploads a file as a new attachment

    Uploads a file to Azure DevOps as an attachment, without linking it to a work item yet.

    Try: “Upload error.log as an attachment”

    Write · wit_work_item_attachment_upload

  • Attaches an uploaded file to a work item

    Links an attachment you already uploaded to a specific work item.

    Try: “Attach the uploaded log to bug 4521”

    Write · wit_work_item_attachment_link

  • Opens and lists pull requests

    Gets a pull request by ID, lists pull requests in a repository or project, and finds the pull requests that contain given commits.

    Try: “List open pull requests in the web-app repo”

    Read · repo_pull_request

  • Lists your active pull requests across the organization

    Shows the pull requests you are involved in that are still active, across every project in the organization.

    Try: “Which of my pull requests are still open?”

    Read · repo_pull_request_org

Read from the source code

Pros and cons

Good

  • Made and maintained by Microsoft, with frequent releases.
  • Free and open source under MIT.
  • Covers work items, repos and pull requests, pipelines, test plans, wikis, code search and security alerts.
  • Works in Claude Desktop and Codex, which cannot use Microsoft's hosted server yet.
  • Five sign-in options, including personal access token and Azure CLI.
  • Load only the tool groups you need to save context.

Watch out

  • No read-only mode, and Microsoft does not plan to add one here.
  • Microsoft says the hosted server will replace this one and gets new features first.
  • Cloud Azure DevOps Services only; on-premises servers are not supported.
  • Personal Microsoft accounts do not work; you need a work or school account.
  • Browser sign-in fails in WSL, SSH, Docker and CI without Azure CLI.
  • The full tool set uses a lot of context.

Permissions

medium risk · 4 things to watch

Medium risk

The assistant can commit code, change work items and start pipeline runs with your account, and this version cannot be switched to read-only. Load only the tool groups you need and if you sign in with a token, give it only the scopes you need.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • There is no read-only mode on this version

    Every write tool loads by default and Microsoft does not plan a read-only switch here. Load only the tool groups you need, or use the hosted server, which has one. github.com

  • It can commit code and run pipelines

    It can commit files, create and update pull requests, queue or cancel pipeline runs, edit wiki pages and remove work item links. Ask it to show you each change before it runs. github.com

  • Keep tokens out of the config file

    Token sign-in reads from environment variables. Set them outside the config file or in a secrets manager, never in a file you commit. github.com

  • It acts as your own account

    The assistant can reach everything your account can in that organization. A token with narrow scopes limits that. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyThe local server has no read-only flag (Microsoft declined to add one in issue 1262). Load fewer tool groups with -d, for example -d core work work-items, or use the hosted remote server with the X-MCP-Readonly: true header.
Talks toYour Azure DevOps organization (dev.azure.com). Microsoft sign-in
Sign-in and keysInteractive Microsoft sign-in by default; PAT or bearer token read from environment variables when you choose those methods.

Alternatives

Use Microsoft's hosted remote server if your app supports it, since it needs no install and can be set to read-only. Use this local one for Claude Desktop, Codex or token sign-in, and a community server if you run Azure DevOps Server on-premises.

ServerOfficialRunsSign-inCan change thingsGitHub stars
Azure DevOps LocalThis pageOfficialLocalAccountYes2.1K
Azure DevOps RemoteOfficialHostedAccountYes–
mcp-server-azure-devopsCommunityLocalToken–398
azure-devops-mcp-onpremCommunityLocal––16

What people say

People like having all of Azure DevOps in one Microsoft-made server and dislike how much context it uses and that it cannot be locked to read-only.

What people like

  • Made by Microsoft, with frequent releases and setup guides for many apps.
  • Covers boards, repos, pipelines, test plans and wikis in one server.

Common complaints

  • Loading every tool can use a large share of the context window.
  • There is no read-only switch on the local server, and Microsoft has said it will not add one.
  • One user found plain Azure CLI calls used less context for the same job.

In their words

Questions

Is the Azure DevOps MCP server free?

Yes. Microsoft says the server is free to use. Your normal Azure DevOps plan still applies, and your AI app may charge separately.

Should I use the local or the remote Azure DevOps MCP server?

Use the remote server if your app supports it: Microsoft recommends it, hosts it and adds new features there first. Use this local one for Claude Desktop and Codex, which cannot sign in to the remote server yet, or when you want token or Azure CLI sign-in.

What is the Azure DevOps remote MCP server URL?

https://mcp.dev.azure.com/{organization}, with your organization name at the end. This local version has no URL; it runs on your computer.

Does it work with Azure DevOps Server on-premises?

No. It only supports cloud Azure DevOps Services, and Microsoft has no plans for on-premises. Community servers such as Tiberriver256's support on-premises servers with a personal access token.

Can I make it read-only?

Not on this local version. Microsoft closed the request and said read-only is only in the remote server. Here you can load fewer tool groups, for example only work items.

Can I sign in with a personal access token?

Yes. Choose the PAT sign-in option and set the token in an environment variable, encoded as the setup guide describes. Azure CLI and bearer token sign-in also work.

Why can't I sign in with my personal Microsoft account?

Personal accounts are not supported. Your account has to be a work or school account backed by Microsoft Entra ID.

Why does sign-in fail in WSL, SSH or Docker?

The default sign-in opens a browser, and those environments have none. Run az login first and switch the server to Azure CLI sign-in.

Can it connect to more than one organization?

No, one organization at a time. Change the organization name in the setup to switch.

Why does it use so much of my context window?

It loads every tool group by default. Load only the groups you need, such as core, work and work items, to cut that down.

Examples

  • Prepare for standup from your assigned work items

    Get my work items for project MyProject and help me prepare for standup - what did I complete, what am I working on, and what's blocked?

    Source
  • Plan a sprint from the product backlog

    Get all work items in the product backlog for MyProject and prioritize them for a two-week sprint with three developers

    Source
  • Explain a pull request using its linked work items

    Get details for pull request #67 and its linked work items and help me understand the business effect of these code changes

    Source
  • See what is in the current iteration for a team

    List work items in current iteration for 'Contoso' project and 'Contoso Team'

    Source
  • Update onboarding docs in the project wiki

    Update the wiki page '/Getting Started' with new onboarding instructions

    Source

Information

updated Nov 2, 2026

Publisher
Microsoft (official)
Package
@azure-devops/mcp
Registry
npm
Transport
stdio
Auth
OAuth
Version
2.11.0
License
MIT
Last commit
Oct 30, 2026
Open issues
5

DocsGitHubnpmInstall guideChangelogIssues

Other Azure DevOps MCP servers

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 10
  1. Getting Started · github.com
  2. GitHub · github.com
  3. Microsoft Learn · learn.microsoft.com
  4. GitHub · github.com
  5. GitHub · github.com
  6. GitHub · github.com
  7. Microsoft Learn · learn.microsoft.com
  8. GitHub · github.com
  9. Hacker News · news.ycombinator.com
  10. GitHub · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.