Model Context Protocol low risk

Azure Resource Graph

This MCP server provides read-only access to Azure Resource Graph, enabling querying and retrieval of Azure resource metadata across subscriptions.

Connections & Capabilities

Connects To

Azure

Capabilities

read

Quickstart

Install

npm install
npm

Config

{
  "mcpServers": {
    "azure-resource-graph-mcp-server": {
      "command": "node",
      "args": [
        "C:\\YOUR_WORKSPACE\\azure-resource-graph-mcp-server\\build\\index.js"
      ],
      "env": {
        "SUBSCRIPTION_ID": "xxxxxx-xx-xx-xx-xxxxxx"
      },
    }
  }
}

Exposed MCP Tools (1)

safe

query-resources

Retrieves Azure resources and their details based on a Resource Graph query.

Read-only operation; retrieves resource metadata without modifying resources.

Safety Assessment

This MCP server is generally safe for querying Azure Resource Graph data. The primary risk lies in crafting queries that expose sensitive information, which is mitigated by proper Azure RBAC and credential management. Ensure users understand the scope of their permissions and avoid overly broad queries.

Read-only access to Azure Resource Graph data.
Uses Azure DefaultAzureCredential for authentication, leveraging existing Azure security.
No direct write or delete operations on Azure resources.
Queries are executed within the scope of the authenticated user's permissions.

Potential for information disclosure based on query content.
Reliance on user-configured Azure credentials.
Risk of exposing subscription IDs if not handled carefully.
Custom queries could potentially be crafted to retrieve sensitive information if permissions are overly broad.

Quickstart

Install

npm install
npm

Config

{
  "mcpServers": {
    "azure-resource-graph-mcp-server": {
      "command": "node",
      "args": [
        "C:\\YOUR_WORKSPACE\\azure-resource-graph-mcp-server\\build\\index.js"
      ],
      "env": {
        "SUBSCRIPTION_ID": "xxxxxx-xx-xx-xx-xxxxxx"
      },
    }
  }
}

Safety Assessment

Read-only access to Azure Resource Graph data.
Uses Azure DefaultAzureCredential for authentication, leveraging existing Azure security.
No direct write or delete operations on Azure resources.
Queries are executed within the scope of the authenticated user's permissions.

Potential for information disclosure based on query content.
Reliance on user-configured Azure credentials.
Risk of exposing subscription IDs if not handled carefully.
Custom queries could potentially be crafted to retrieve sensitive information if permissions are overly broad.