MCP Directory

How to add Azure MCP Server to Windsurf

Microsoft's official Azure MCP server, including Azure Blob Storage container and blob tools. Paste the config into ~/.codeium/windsurf/mcp_config.json and restart Windsurf.

Last updated June 15, 2026 · 2.4k★ · stdio · oauth · official

Windsurf config for Azure MCP Server

npx -y @azure/mcp@latest server start
{
  "mcpServers": {
    "azure-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@azure/mcp@latest",
        "server",
        "start"
      ]
    }
  }
}

Setup steps

  1. 1Open Windsurf → Cascade → the hammer/MCP icon → Configure (or edit ~/.codeium/windsurf/mcp_config.json).
  2. 2Paste the Azure MCP Server config below.
  3. 3Fill in placeholder secrets, then save.
  4. 4Click Refresh in the MCP panel.
  5. 5Azure MCP Server's tools become available to Cascade.

Before you start

  • Node.js LTS (20 or later) to run via npx — or .NET 10 (`dnx`) / `uv` (uvx) as alternative runtimes
  • The Azure CLI installed and signed in with `az login`, or DefaultAzureCredential configured (managed identity / environment credentials)
  • An Azure subscription with appropriate RBAC roles on the resources you want to access (e.g. Storage Blob Data Reader/Contributor for blob operations)

What Azure MCP Server can do in Windsurf

storage account create

Create a storage account in a resource group/location (destructive).

storage account get

Get details for one or all storage accounts in a subscription (read-only).

storage blob container create

Create a new blob container in a storage account (destructive).

storage blob container get

List containers or get details for a specific container (read-only).

storage blob get

List blobs in a container or get properties for a single blob (read-only).

storage blob upload

Upload a local file to a blob if it doesn't already exist.

storage table list

List the tables in a storage account (read-only).

Security

The server acts with your authenticated Azure identity, so its reach equals your Azure RBAC assignments; sign in with a least-privilege account. Storage tools can create containers and modify blobs in your subscription.

Azure MCP Server + Windsurf FAQ

Where is the Windsurf config file?

Windsurf reads MCP servers from ~/.codeium/windsurf/mcp_config.json. Paste the Azure MCP Server config there under the "mcpServers" key and restart the client.

Is Azure MCP Server safe to use with Windsurf?

The server acts with your authenticated Azure identity, so its reach equals your Azure RBAC assignments; sign in with a least-privilege account. Storage tools can create containers and modify blobs in your subscription.

What is the npm package name?

`@azure/mcp`. Run it with `npx -y @azure/mcp@latest server start`. A .NET tool (`Azure.Mcp`, via `dnx`) and a uvx option also exist.

How does authentication work?

Via Azure's standard identity model — `az login` (Azure CLI) or DefaultAzureCredential. The agent inherits your Azure RBAC permissions; no separate API key is needed.

How is Azure Blob Storage supported?

Through the storage tool group: create/get storage accounts, create/get blob containers, list or get individual blobs, list storage tables, and upload a local file to a blob.

View repo Full Azure MCP Server page