
Azure MCP Server
OfficialMicrosoft's official Azure MCP server, including Azure Blob Storage container and blob tools.
Add to your client
Copy the config for your MCP client and paste it into its config file.
npx -y @azure/mcp@latest server startPaste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"azure-mcp-server": {
"command": "npx",
"args": [
"-y",
"@azure/mcp@latest",
"server",
"start"
]
}
}
}Before you start
- Node.js LTS (20 or later) to run via npx — or .NET 10 (`dnx`) / `uv` (uvx) as alternative runtimes
- The Azure CLI installed and signed in with `az login`, or DefaultAzureCredential configured (managed identity / environment credentials)
- An Azure subscription with appropriate RBAC roles on the resources you want to access (e.g. Storage Blob Data Reader/Contributor for blob operations)
About Azure MCP Server
The Azure MCP Server is Microsoft's official Model Context Protocol server that brings 40+ Azure services to AI agents, including first-class support for Azure Storage. It runs locally over stdio and is distributed on npm as @azure/mcp (with a .NET dnx/Azure.Mcp option as well). It works in VS Code, Visual Studio, IntelliJ, Eclipse, and any MCP client.
For Azure Storage specifically, it manages storage accounts, blob containers, blobs, and tables: creating accounts and containers, listing/getting accounts and containers, listing blobs or fetching a single blob's properties, listing storage tables, and uploading a local file to a blob. Each tool is annotated (read-only vs. destructive) and the server supports a global read-only mode for safety.
Authentication uses Azure's standard identity model — az login via the Azure CLI or DefaultAzureCredential — so the agent operates with your existing Azure RBAC permissions, no separate keys required. Sovereign clouds (Azure Public, China, US Government) are supported.
Note: development moved from the Azure/azure-mcp repository (archived Feb 2026) to microsoft/mcp, where the server now lives under servers/Azure.Mcp.Server.
Tools & capabilities (7)
storage account createCreate a storage account in a resource group/location (destructive).
storage account getGet details for one or all storage accounts in a subscription (read-only).
storage blob container createCreate a new blob container in a storage account (destructive).
storage blob container getList containers or get details for a specific container (read-only).
storage blob getList blobs in a container or get properties for a single blob (read-only).
storage blob uploadUpload a local file to a blob if it doesn't already exist.
storage table listList the tables in a storage account (read-only).
When to use it
- Use it when you want an agent to inspect Azure Storage — listing storage accounts, blob containers, and blobs — in natural language.
- Use it when you need to read a specific blob's properties or upload a local file into a container from your IDE.
- Use it when you're already working across many Azure services and want one MCP server that covers storage plus 40+ others.
- Use it when you want safe access via read-only mode and per-tool destructive annotations.
- Use it when you operate in a sovereign cloud (Azure China or US Government) and need MCP tooling that supports it.
Quick setup
- 1Install Node.js LTS and the Azure CLI.
- 2Sign in with `az login` (or configure DefaultAzureCredential / a managed identity).
- 3Add the server to your MCP client with command `npx` and args `-y @azure/mcp@latest server start`.
- 4Optionally enable read-only mode or scope which tool namespaces are exposed.
- 5Restart the client and verify the Azure Storage tools appear, then try listing your storage accounts.
Security notes
The server acts with your authenticated Azure identity, so its reach equals your Azure RBAC assignments; sign in with a least-privilege account. Storage tools can create containers and modify blobs in your subscription.
Azure MCP Server FAQ
What is the npm package name?
`@azure/mcp`. Run it with `npx -y @azure/mcp@latest server start`. A .NET tool (`Azure.Mcp`, via `dnx`) and a uvx option also exist.
How does authentication work?
Via Azure's standard identity model — `az login` (Azure CLI) or DefaultAzureCredential. The agent inherits your Azure RBAC permissions; no separate API key is needed.
How is Azure Blob Storage supported?
Through the storage tool group: create/get storage accounts, create/get blob containers, list or get individual blobs, list storage tables, and upload a local file to a blob.
Where is the repository now?
The original `Azure/azure-mcp` repo was archived in February 2026; development moved to `microsoft/mcp`, with the server under `servers/Azure.Mcp.Server`.
Can I prevent destructive operations?
Yes. The server supports a read-only mode, and each tool carries destructive/read-only annotations so clients can surface or restrict mutating actions like account/container creation.
Alternatives to Azure MCP Server
Official MCP reference server for secure local filesystem read/write within allowed directories.
Official MCP server for reading, searching, and manipulating a local Git repository's files and history.
Official AWS Labs MCP server to manage and query S3 Tables (table buckets, namespaces, tables).
Compare Azure MCP Server with: