EntraID MCP Server

Example Use Cases

• 1

  Search, read, and manage Azure AD users and their group memberships programmatically via Microsoft Graph.

• 2

  Create, update, and manage groups, group members/owners, and enforce membership rules or dynamic group logic.

• 3

  Inspect sign-in logs, MFA status, reset passwords, and manage applications/service principals for security and auditing workflows.

Description

This project provides a resource-oriented FastMCP server wrapping Microsoft Graph API calls with a centralized Graph client and modular resource modules (users, groups, applications, service principals, sign-in logs, MFA, etc.). It supports full group lifecycle and membership management, application and service principal management, sign-in and audit log queries, MFA and password management, and a permissions helper to recommend least-privilege Graph permissions. Designed for extensibility and secure operation (dotenv/secret exclusion and Azure auth best practices), it’s intended for automation, tooling, and agent integrations via FastMCP, Claude, or Cursor.