PlugWiki

azure-resource-lookup Skill for Claude: List and Find Azure Resources

Makes Claude list and find Azure resources of any type across subscriptions, using Azure Resource Graph.

Installs
572.8K
on skills.sh
Stars
1.6K
on GitHub
Files
1
besides SKILL.md
Updated
Oct 2026
last repo commit

azure-resource-lookup lets Claude answer "what resources do I have?" across subscriptions and resource groups. It writes Azure Resource Graph queries and runs them with az graph query. It handles orphaned resources, missing tags, unhealthy states and App Service listings.

It checks for a dedicated Azure MCP tool first for single resource types, such as VMs, storage or Key Vault. When none fits, as with App Service and Container Apps, it uses Resource Graph. The skill says never to change anything through Resource Graph, so it only reads.

Good for

  • Cloud admins asking "what do I have in Azure?"
  • Cost owners hunting orphaned disks, unused NICs and idle IPs
  • Teams auditing resources with missing tags or failed states

Install azure-resource-lookup

Claude Code

  1. 1

    Copy this prompt.

    Install the azure-resource-lookup skill in Claude Code. Run this command:
    
    /plugin install azure@claude-plugins-official
    
    Then check that it loaded and tell me how to use it.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Azure CLI signed in.

Pick one route, not both. The plugin installs all the Azure skills and wires in the Azure and Foundry tool servers they call. The skills CLI route installs only the skills named in the command, and does not wire in the Azure or Foundry tool servers, so enable the Azure MCP server separately if you want the tools the skills call. Sign in with az login first.

From the project README. Source.

What's in the skill

When it loads

List, find, and show Azure resources across subscriptions or resource groups. Handles prompts like "list the websites in my subscription", "list my web apps", "show my app services", "list virtual machines", "list my VMs", "show storage accounts", "find container apps", and "what resources do I have". USE FOR: list websites, list web apps, list app services, show websites in subscription, resource inventory, find resources by tag, tag analysis, orphaned resource discovery (not for cost analysis), unattached disks, count resources by type, cross-subscription lookup, and Azure Resource Graph queries. DO NOT USE FOR: deploying/changing resources (use azure-deploy), cost optimization (use cost-optimization from the optional azure-cost plugin), or non-Azure clouds.

Sections in SKILL.md

  1. When to Use This Skill
  2. Quick Reference
  3. MCP Tools
  4. Workflow
  5. Step 1: Check for a Dedicated MCP Tool
  6. Step 2: Generate the ARG Query
  7. Step 3: Execute and Format Results
  8. Error Handling
  9. Constraints

Key facts

Author
Microsoft
Last commit
Oct 30, 2026

What it includes

  • Uses a specific Azure MCP tool first when one covers the type

    A routing table maps VMs, storage, Cosmos DB, AKS, Service Bus and more to their MCP tools.

    Read · Dedicated-tool check

  • Generates and runs az graph query with KQL

    Claude builds the query from your request and shapes output with --query, --first and --subscriptions.

    Runs code · Resource Graph query

  • Finds unattached disks, unused NICs, idle IPs and missing tags

    Query patterns live in references/azure-resource-graph.md.

    Read · Orphan and tag audits

  • Fixes missing extension, access and syntax errors

    For a missing extension it runs az extension add --name resource-graph.

    Runs code · Error handling

From the official docs

Permissions

Low risk

Claude reads resource metadata across every subscription your account can see. Use a Reader role and scope queries in a large tenant.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • It can see resources across all your subscriptions

    Scope queries with --subscriptions in a big tenant, and use a Reader role.

  • Read-only by design

    The SKILL.md says never to attempt changes through Resource Graph.

Technical details
Scopes
  • Reads resource metadata across subscriptions you can access

  • Runs az graph query commands

  • May install the az resource-graph extension

Questions

What does azure-resource-lookup do?

It lets Claude list and find Azure resources of any type across subscriptions. It uses Azure Resource Graph, and uses dedicated MCP tools first when one covers the type.

How do I install it?

Use the install box at the top of this page. In Claude Code the plugin command installs the Azure skills together with the Azure tools they call, so pick it unless you want this one skill only. Run az login before you start.

Can it change or delete resources?

Not through Resource Graph. The SKILL.md says never to attempt mutations through it, and its steps are read queries.

What does it need?

The Azure CLI, Reader access to the subscription, and the resource-graph extension, which it installs with az extension add --name resource-graph if missing.

Is it safe?

It only reads, but it sees everything your account can see. skills.sh lists Gen Agent Trust Hub, Socket and Snyk as pass.

Why use it for web apps?

There is no dedicated MCP list command for App Service, so the SKILL.md routes "list web apps" requests through this skill.

Does it work in the Claude app, Codex or Cursor?

The Azure README lists GitHub Copilot, Claude Code, Cursor, Codex, Gemini CLI and OpenCode as hosts for the plugin. It does not list the Claude desktop or web app.

Information

updated Nov 2, 2026

Folder
skills/azure-resource-lookup

microsoft/azure-skillsskills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 3
  1. microsoft/azure-skills README · github.com
  2. azure-resource-lookup SKILL.md · github.com
  3. azure-resource-lookup on skills.sh · skills.sh

Updated Nov 2, 2026.