Microsoft MCP Server for Enterprise

Overview

Built on the open Model Context Protocol, the public preview of Microsoft MCP Server for Enterprise lets AI agents access Microsoft Entra data by converting natural language queries into Microsoft Graph API calls. This MCP server empowers developers and IT Administrators to integrate the management of organizational data into AI-powered workflows.

Full Documentation: Overview of Microsoft MCP Server for Enterprise

MCP Server Provisioning (execute once per tenant)

To get started with the Microsoft MCP Server for Enterprise, follow these steps to provision the MCP Server in your tenant (requires Microsoft Entra admin privileges):

1. Install Microsoft.Entra.Beta PowerShell module (version 1.0.13 or later):

   Install-Module Microsoft.Entra.Beta -Force -AllowClobber
   

2. Connect Microsoft Entra ID to the tenant you'd like to register the MCP Server:

   Connect-Entra -Scopes 'Application.ReadWrite.All', 'DelegatedPermissionGrant.ReadWrite.All'
   

3. Register the MCP Server for Enterprise in your tenant and grant all permissions to Visual Studio Code:

   Grant-EntraBetaMCPServerPermission -ApplicationName VisualStudioCode
   

If you have any issue on any of the above steps, please refer to the detailed installation instructions. You can try to execute the following to ensure Microsoft Graph PowerShell SDK Modules do not conflict with Microsoft.Entra.Beta:

Install-Module Uninstall-Graph
Uninstall-Graph -All

Visual Studio Code Configuration

1. Click Install Microsoft MCP Server for Enterprise to launch VS Code's MCP install page.
2. Click the Install button in VS Code and Login with your account from the tenant above.
3. Open Copilot Chat and ask a question about your tenant.

Azure Foundry Configuration

1. Navigate to Azure Foundry Portal.
2. Go to Agents on the left and click Create agent button on the top right.
3. Assign a name, and expand Tools section
4. Click Add and then Add a new tool
5. Go to the Catalog and search for "Microsoft MCP Server for Enterprise"
6. Select "Microsoft MCP Server for Enterprise" and click Create
7. Add the Client ID of your MCP Client (you might need to register a new MCP Client application in your tenant, and assign the required MCP.* scopes)
8. Click Connect
9. Update the Redirect URI of your MCP Client application to include the Azure Foundry redirect URI (shown in the portal after clicking Connect)
10. Ask a question about your tenant data in the Azure Foundry chat interface.
11. Click Open Consent button and login with your Admin account from the tenant above.

Tools

This MCP Server is atypical: instead of exposing a separate tool per Microsoft Graph operation, it applies Retrieval-Augmented Generation (RAG) and few-shot prompting to generate complete Microsoft Graph queries.
It exposes only three tools to implement a reliable and grounded workflow:

1. microsoft_graph_suggest_queries: Finds relevant Microsoft Graph API calls based on user intent.
2. microsoft_graph_get: Executes read-only Microsoft Graph API calls, respecting User roles and MCP Client scopes.
3. microsoft_graph_list_properties: Retrieves properties of specific Microsoft Graph entities to help the AI model

Current scope and capabilities

For Public Preview, our focus is to support *

... View full README on GitHub