Model Context Protocol moderate risk

Azure Devops

This MCP server enables AI assistants to interact with Azure DevOps via a standardized protocol, supporting various authentication methods and DevOps operations.

Connections & Capabilities

Connects To

GitHubAzure

Capabilities

readwriteexec

Quickstart

Install

npx -y @tiberriver256/mcp-server-azure-devops

Config

{
  "mcpServers": {
    "azureDevOps": {
      "command": "npx",
      "args": ["-y", "@tiberriver256/mcp-server-azure-devops"],
      "env": {
        "AZURE_DEVOPS_ORG_URL": "https://dev.azure.com/your-organization",
        "AZURE_DEVOPS_AUTH_METHOD": "azure-identity",
        "AZURE_DEVOPS_DEFAULT_PROJECT": "your-project-name"
      }
    }
  }
}

Exposed MCP Tools (37)

safe

get_me

Retrieves details of the authenticated user.

Read-only operation, no side effects.

safe

list_organizations

Lists all accessible Azure DevOps organizations.

Read-only operation, no side effects.

safe

list_projects

Lists all projects within an organization.

Read-only operation, no side effects.

safe

get_project

Retrieves details of a specific project.

Read-only operation, no side effects.

safe

get_project_details

Retrieves comprehensive details of a project.

Read-only operation, no side effects.

safe

list_repositories

Lists all repositories within a project.

Read-only operation, no side effects.

safe

get_repository

Retrieves details of a specific repository.

Read-only operation, no side effects.

safe

get_repository_details

Retrieves detailed information about a repository.

Read-only operation, no side effects.

safe

get_file_content

Retrieves the content of a file from a repository.

Read-only operation, no side effects.

safe

get_repository_tree

Lists a repository's file tree.

Read-only operation, no side effects.

moderate

create_branch

Creates a new branch from an existing one.

Creates a new branch, modifying the repository.

moderate

create_commit

Commits file changes to a branch.

Commits changes, modifying the repository content.

safe

get_work_item

Retrieves a work item by ID.

Read-only operation, no side effects.

moderate

create_work_item

Creates a new work item.

Creates a new work item, modifying the project.

moderate

update_work_item

Updates an existing work item.

Updates a work item, modifying the project.

safe

list_work_items

Lists work items in a project.

Read-only operation, no side effects.

moderate

manage_work_item_link

Manages links between work items.

Modifies links between work items.

safe

search_code

Searches for code across repositories.

Read-only operation, no side effects.

safe

search_wiki

Searches for content across wiki pages.

Read-only operation, no side effects.

safe

search_work_items

Searches for work items.

Read-only operation, no side effects.

safe

list_pipelines

Lists pipelines in a project.

Read-only operation, no side effects.

safe

get_pipeline

Retrieves details of a specific pipeline.

Read-only operation, no side effects.

safe

list_pipeline_runs

Lists recent runs for a pipeline.

Read-only operation, no side effects.

safe

get_pipeline_run

Retrieves detailed run information for a pipeline.

Read-only operation, no side effects.

safe

download_pipeline_artifact

Downloads a single artifact file as text.

Read-only operation, no side effects.

safe

pipeline_timeline

Retrieves the stage and job timeline for a run.

Read-only operation, no side effects.

safe

get_pipeline_log

Retrieves log content for a pipeline.

Read-only operation, no side effects.

moderate

trigger_pipeline

Triggers a pipeline run.

Triggers a pipeline execution, potentially consuming resources.

safe

get_wikis

Lists all wikis in a project.

Read-only operation, no side effects.

safe

get_wiki_page

Retrieves content of a specific wiki page.

Read-only operation, no side effects.

moderate

create_pull_request

Creates a new pull request.

Creates a new pull request, modifying the repository.

safe

get_pull_request

Retrieves a pull request by ID.

Read-only operation, no side effects.

safe

list_pull_requests

Lists pull requests in a repository.

Read-only operation, no side effects.

moderate

add_pull_request_comment

Adds a comment to a pull request.

Adds a comment, modifying the pull request.

safe

get_pull_request_comments

Retrieves comments from a pull request.

Read-only operation, no side effects.

moderate

update_pull_request

Updates an existing pull request.

Updates a pull request, modifying the repository.

safe

get_pull_request_changes

Lists changes in a pull request.

Read-only operation, no side effects.

Safety Assessment

The server offers a balance of read and write capabilities, making it powerful but requiring careful configuration. Using Azure Identity is safer than PAT. Exercise caution when using tools that modify resources or trigger pipelines.

Supports multiple authentication methods, including Azure Identity.
Environment variable configuration minimizes hardcoded secrets.
Feature-based architecture promotes modularity and easier auditing.
Provides a range of tools with varying danger levels, allowing for granular control.

Personal Access Tokens (PATs) require careful management to prevent unauthorized access.
Write operations can modify Azure DevOps resources.
Improperly configured permissions can lead to unintended data exposure or modification.
The `trigger_pipeline` tool could potentially be abused to trigger unwanted pipeline executions.