azure-resource-lookup Skill for Claude: List and Find Azure Resources
Makes Claude list and find Azure resources of any type across subscriptions, using Azure Resource Graph.
- Installs
- 572.8K
- on skills.sh
- Stars
- 1.6K
- on GitHub
- Files
- 1
- besides SKILL.md
- Updated
- Oct 2026
- last repo commit
azure-resource-lookup lets Claude answer "what resources do I have?" across subscriptions and resource groups. It writes Azure Resource Graph queries and runs them with az graph query. It handles orphaned resources, missing tags, unhealthy states and App Service listings.
It checks for a dedicated Azure MCP tool first for single resource types, such as VMs, storage or Key Vault. When none fits, as with App Service and Container Apps, it uses Resource Graph. The skill says never to change anything through Resource Graph, so it only reads.
Good for
- Cloud admins asking "what do I have in Azure?"
- Cost owners hunting orphaned disks, unused NICs and idle IPs
- Teams auditing resources with missing tags or failed states
Install azure-resource-lookup
Claude Code
- 1
Copy this prompt.
Install the azure-resource-lookup skill in Claude Code. Run this command: /plugin install azure@claude-plugins-official Then check that it loaded and tell me how to use it.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Azure CLI signed in.
Pick one route, not both. The plugin installs all the Azure skills and wires in the Azure and Foundry tool servers they call. The skills CLI route installs only the skills named in the command, and does not wire in the Azure or Foundry tool servers, so enable the Azure MCP server separately if you want the tools the skills call. Sign in with az login first.
From the project README. Source.
What's in the skill
When it loads
List, find, and show Azure resources across subscriptions or resource groups. Handles prompts like "list the websites in my subscription", "list my web apps", "show my app services", "list virtual machines", "list my VMs", "show storage accounts", "find container apps", and "what resources do I have". USE FOR: list websites, list web apps, list app services, show websites in subscription, resource inventory, find resources by tag, tag analysis, orphaned resource discovery (not for cost analysis), unattached disks, count resources by type, cross-subscription lookup, and Azure Resource Graph queries. DO NOT USE FOR: deploying/changing resources (use azure-deploy), cost optimization (use cost-optimization from the optional azure-cost plugin), or non-Azure clouds.
Sections in SKILL.md
- When to Use This Skill
- Quick Reference
- MCP Tools
- Workflow
- Step 1: Check for a Dedicated MCP Tool
- Step 2: Generate the ARG Query
- Step 3: Execute and Format Results
- Error Handling
- Constraints
Key facts
- Author
- Microsoft
- License
- MIT (stated in SKILL.md)
- Last commit
- Oct 30, 2026
- skills.sh audits
- Gen Agent Trust Hub pass, Socket pass, Snyk pass
What it includes
Uses a specific Azure MCP tool first when one covers the type
A routing table maps VMs, storage, Cosmos DB, AKS, Service Bus and more to their MCP tools.
Read ·
Dedicated-tool checkGenerates and runs az graph query with KQL
Claude builds the query from your request and shapes output with --query, --first and --subscriptions.
Runs code ·
Resource Graph queryFinds unattached disks, unused NICs, idle IPs and missing tags
Query patterns live in references/azure-resource-graph.md.
Read ·
Orphan and tag auditsFixes missing extension, access and syntax errors
For a missing extension it runs az extension add --name resource-graph.
Runs code ·
Error handling
From the official docs
Permissions
Low risk
Claude reads resource metadata across every subscription your account can see. Use a Reader role and scope queries in a large tenant.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only mode
Watch out for
It can see resources across all your subscriptions
Scope queries with --subscriptions in a big tenant, and use a Reader role.
Read-only by design
The SKILL.md says never to attempt changes through Resource Graph.
Technical details
| Scopes |
|
|---|
Questions
What does azure-resource-lookup do?
It lets Claude list and find Azure resources of any type across subscriptions. It uses Azure Resource Graph, and uses dedicated MCP tools first when one covers the type.
How do I install it?
Use the install box at the top of this page. In Claude Code the plugin command installs the Azure skills together with the Azure tools they call, so pick it unless you want this one skill only. Run az login before you start.
Can it change or delete resources?
Not through Resource Graph. The SKILL.md says never to attempt mutations through it, and its steps are read queries.
What does it need?
The Azure CLI, Reader access to the subscription, and the resource-graph extension, which it installs with az extension add --name resource-graph if missing.
Is it safe?
It only reads, but it sees everything your account can see. skills.sh lists Gen Agent Trust Hub, Socket and Snyk as pass.
Why use it for web apps?
There is no dedicated MCP list command for App Service, so the SKILL.md routes "list web apps" requests through this skill.
Does it work in the Claude app, Codex or Cursor?
The Azure README lists GitHub Copilot, Claude Code, Cursor, Codex, Gemini CLI and OpenCode as hosts for the plugin. It does not list the Claude desktop or web app.
Information
updated Nov 2, 2026
- Repository
- microsoft/azure-skills
- Folder
skills/azure-resource-lookup
Sources
Docs, issue trackers and discussions this page is built from.
Show all 3Hide
- microsoft/azure-skills README · github.com
- azure-resource-lookup SKILL.md · github.com
- azure-resource-lookup on skills.sh · skills.sh