AzureOps MCP Server

An MCP (Model Context Protocol) server that exposes Azure resource operations as tools for GitHub Copilot and other MCP-compatible agents. Built with .NET 10 and the Azure Resource Manager SDK. Authentication uses DefaultAzureCredential — az login locally, system-assigned Managed Identity in Azure.

Part of the MCP on Azure: From Zero to Production series on Microsoft Azure in Practice.

Blog Series

Each branch in this repo corresponds to a published article. Follow the series to build this server from scratch.

Tools

Prerequisites

• .NET 10 SDK
• Azure CLI
• Azure subscription with at least Reader and Resource Health Reader roles on the target scope

Local Development

# Authenticate
az login

# Run — binds to http://localhost:5100
dotnet run

# Health check
Invoke-RestMethod http://localhost:5100/health

Required RBAC (local)

$MY_ID = az ad signed-in-user show --query id -o tsv

az role assignment create --role "Reader" `
  --assignee $MY_ID `
  --scope "/subscriptions/{your-sub-id}/resourceGroups/{your-rg}"

az role assignment create --role "Resource Health Reader" `
  --assignee $MY_ID `
  --scope "/subscriptions/{your-sub-id}"

GitHub Copilot Integration

.vscode/mcp.json is pre-configured. Open Copilot Chat (Ctrl+Alt+I), switch to Agent mode, confirm azureops-mcp appears in the Tools panel.

Example prompts:

Get the last 5 deployments for subscription {sub-id}, resource group {rg}
Check FinOps tag compliance for subscription {sub-id}, resource group {rg}
Check the health of resource group {rg} in subscription {sub-id}

Deploy to Azure Container Apps

1. Set variables

$RG       = "rg-azureops-mcp"
$LOCATION = "eastus"
$ACR      = "azureopsmcpacr"
$ACA_ENV  = "azureops-mcp-env"
$ACA_APP  = "azureops-mcp-server"
$SUB_ID   = az account show --query id -o tsv

2. Create infrastructure

az group create --name $RG --location $LOCATION

az acr create --resource-group $RG --name $ACR --sku Basic --admin-enabled false

az containerapp env create --name $ACA_ENV --resource-group $RG --location $LOCATION

3. Build and push image

az acr build --registry $ACR --image azureops-mcp-server:latest .

4. Deploy with Managed Identity

# Enable admin for bootstrap pull (disabled again after step 6)
az acr update --name $ACR --admin-enabled true
$ACR_PASS = az acr credential show --name $ACR --query "passwords[0].value" -o tsv

az containerapp create `
  --name $ACA_APP --resou

... [View full README on GitHub](https://github.com/divyeshg94/AzureOpsMcpServer#readme)