Merge branch 'main' of https://github.com/MicrosoftDocs/azure-ai-docs-pr into aoai-updates

Author: PatrickFarley

.openpublishing.publish.config.json

@@ -127,6 +127,12 @@
       "url": "https://github.com/azure-ai-foundry/foundry-samples",
       "branch": "main",
       "branch_mapping": {}
+    },
+        {
+      "path_to_root": "foundry-samples-nov25-updates",
+      "url": "https://github.com/azure-ai-foundry/foundry-samples",
+      "branch": "nov25-updates",
+      "branch_mapping": {}
     },
     {
       "path_to_root": "azureml-examples-main",
@@ -194,6 +200,12 @@
       "branch": "main",
       "branch_mapping": {}
     },
+    {
+      "path_to_root": "azure-search-java-samples",
+      "url": "https://github.com/Azure-Samples/azure-search-java-samples",
+      "branch": "main",
+      "branch_mapping": {}
+    },
     {
       "path_to_root": "azure-search-dotnet-samples",
       "url": "https://github.com/Azure-Samples/azure-search-dotnet-samples",

articles/ai-foundry/.openpublishing.redirection.ai-studio.json

@@ -210,6 +210,11 @@
             "redirect_url": "/azure/ai-foundry/how-to/deploy-models-llama",
             "redirect_document_id": true
           },
+          {
+            "source_path_from_root": "/articles/ai-foundry/open-ai/how-to/deployment-types.md",
+            "redirect_url": "/azure/ai-foundry/foundry-models/concepts/deployment-types",
+            "redirect_document_id": true
+          },
           {
             "source_path_from_root": "/articles/ai-foundry/how-to/deploy-models-llama.md",
             "redirect_url": "/azure/ai-foundry/concepts/models-featured#meta",

articles/ai-foundry/agents/concepts/model-region-support.md

@@ -38,7 +38,7 @@ Projects are currently the unit of sharing and isolation in Foundry. See the [wh
 
 ### Prerequisites 
 
-* An Azure subscription - [Create one for free](https://azure.microsoft.com/free/cognitive-services).
+* An Azure subscription - [Create one for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
 * Ensure that the individual creating the account and project has the **Azure AI Account Owner** role at the subscription scope
 * If configuring a [standard setup](#choose-your-setup), the same individual must also have permissions to assign roles to required resources (Cosmos DB, Azure AI Search, Azure Blob Storage). For more information on RBAC roles, specific to Azure AI Foundry Agent Service, see [Azure AI Foundry Agent Service RBAC roles](../concepts/rbac-azure-ai-foundry.md).
     * The built-in role needed is **Role Based Access Administrator**.

articles/ai-foundry/agents/environment-setup.md

@@ -8,7 +8,7 @@ metadata:
   ms.service: azure-ai-foundry
   ms.subservice: azure-ai-foundry-agent-service
   ms.topic: faq
-  ms.date: 06/30/2025
+  ms.date: 10/09/2025
   ms.author: aahi
   author: aahill
 title: Azure AI Foundry Agent Service frequently asked questions
@@ -55,8 +55,4 @@ sections:
       - question: |
           Is there any additional pricing or quota for using Foundry Agent Service? 
         answer: |
-          No. All [quotas](quotas-limits.md) apply to using models with Foundry Agent Service.
-      - question: |
-          Does the Foundry Agent Service API support non-Azure OpenAI models?   
-        answer: |
-          Yes, the Foundry Agent Service API supports non-Azure OpenAI models. See the [models](concepts\model-region-support.md) page for more information.
+          No. All [quotas](quotas-limits.md) apply to using models with Foundry Agent Service.

articles/ai-foundry/agents/faq.yml

@@ -7,7 +7,7 @@ manager: nitinme
 ms.service: azure-ai-foundry
 ms.subservice: azure-ai-foundry-agent-service
 ms.topic: how-to
-ms.date: 09/30/2025
+ms.date: 10/10/2025
 author: aahill
 ms.author: aahi
 ---
@@ -74,6 +74,21 @@ For more information on using MCP, see:
 
 1. Submit your approval to the agent with `call_id` by setting `approve` to `true`.
 
+## Host a local MCP server
+
+The Azure AI Foundry Agent Service runtime only accepts a remote MCP server endpoint. If you want to add tools from a local MCP server, you'll have to self-host it on [Azure Container Apps](/samples/azure-samples/mcp-container-ts/mcp-container-ts/) or [Azure Functions](https://github.com/Azure-Samples/mcp-sdk-functions-hosting-python/blob/main/ExistingServer.md) to get a remote MCP server endpoint. Pay attention to the following considerations when attempting to host local MCP servers in the cloud:
+
+|Local MCP server setup | Hosting in Azure Container Apps | Hosting in Azure Functions |
+|:---------:|:---------:|:---------:|
+| **Transport** | HTTP POST/GET endpoints required. | HTTP streamable required. | 
+| **Code changes** | Container rebuild required. | Azure Functions-specific configuration files required in the root directory. |
+| **Authentication** | Custom authentication implementation required. | Key-based only. OAuth needs API Management. |
+| **Language** | Any language that runs in Linux containers (Python, Node.js, .NET, TypeScript, Go). | Python, Node.js, Java, .NET only. |
+| **Container Requirements** | Linux (linux/amd64) only. No privileged containers.| Containerized servers are not supported. |
+| **Dependencies** | All dependencies must be in container image. | OS-level dependencies (such as Playwright) are not supported. |
+| **State** | Stateless only. | Stateless only. |
+| **UVX/NPX** | Supported. | Not supported. `npx` start commands not supported. |
+
 ## Related content
 
 * [Code samples for the Model Context Protocol tool](./model-context-protocol-samples.md)

articles/ai-foundry/agents/how-to/tools/model-context-protocol.md

@@ -50,7 +50,7 @@ If you want to continue using your hub-based project and connection string, you
 > * Make sure your Azure OpenAI resource and Azure AI Foundry account and project are in the same region. 
 
 ## Prerequisites
-* An Azure subscription - [Create one for free](https://azure.microsoft.com/free/cognitive-services).
+* An Azure subscription - [Create one for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
 * Ensure that the individual creating the account and project has the **Azure AI Account Owner** role at the subscription scope
 * If configuring a [standard setup](#choose-basic-or-standard-agent-setup), the same individual must also have permissions to assign roles to required resources (Cosmos DB, Search, Storage). For more information about RBAC in Azure AI Foundry, see [RBAC in Azure AI Foundry](../../../ai-foundry/concepts/rbac-azure-ai-foundry.md).
     * The built-in role needed is **Role Based Access Administrator**.

articles/ai-foundry/agents/how-to/use-your-own-resources.md

@@ -37,16 +37,17 @@ For customers without an existing virtual network, the Standard Setup with Priva
 - **Subnet IP address limitation**: both subnets must have IP ranges under `172.16.0.0/12` or `192.168.0.0/16`, i.e. class B or C private address ranges reserved for private networking. Public Class A, B or C address ranges are not supported. Private Class A address ranges have limited region support. For more information, see [our Private Network Secured Agent deployment template on GitHub](https://github.com/azure-ai-foundry/foundry-samples/blob/main/samples/microsoft/infrastructure-setup/15-private-network-standard-agent-setup/README.md).
 - **Agent subnet exclusivity**: The agent subnet cannot be shared by multiple Azure AI Foundry resources. Each AI Foundry must use a dedicated agent subnet.
 - **Agent subnet size**: The recommended size of the delegated Agent subnet is /24 (256 addresses) due to the delegation of the subnet to `Microsoft.App/environment`. For more on the subnet sizing, see [Configuring virtual networks for Azure Container Apps](/azure/container-apps/custom-virtual-networks?tabs=workload-profiles-env#subnet).
-- **Agent subnet egress firewall allowlisting**: If you are integrating an Azure Firewall with your private network secured standard agent, please allowlist the Fully Qualified Domain Names (FQDNs) listed in the [Integrate with Azure Firewall](/azure/container-apps/use-azure-firewall#application-rules) article.
-- **All Foundry workspace resources must be deployed in the same region as the virtual network (VNet)**. This includes Cosmos DB, Storage Account, AI Search, Foundry Account, Project, and Managed Identity.  
-    - **Exception:** You may connect your Foundry Project to models deployed in a different region (on another AI Foundry or Azure OpenAI resource) by configuring an appropriate AI Services connection on the Project's [capability host](/azure/templates/microsoft.cognitiveservices/accounts/projects/capabilityhosts).
+- **Agent subnet egress firewall allowlisting**: If you are integrating an Azure Firewall with your private network secured standard agent, please allowlist the Fully Qualified Domain Names (FQDNs) listed under __Managed Identity__ in the [Integrate with Azure Firewall](/azure/container-apps/use-azure-firewall#application-rules) article or add the Service Tag __AzureActiveDirectory__.
+    - Verify no TLS inspection happens in the Firewall that could be adding a self-signed certificate. During failures, inspect if there is any traffic landing on the Firewall and what traffic is being blocked by the Firewall. 
+- **All Foundry workspace resources must be deployed in the same region as the virtual network (VNet)**. This includes Cosmos DB, Storage Account, AI Search, Foundry Account, Project, Managed Identity, Azure OpenAI, or another Foundry resource used for model deployments. 
+    - **Exception:** You may connect your Foundry Project to models deployed in a different region by configuring an appropriate AI Services connection on the Project's [capability host](/azure/templates/microsoft.cognitiveservices/accounts/projects/capabilityhosts). 
 - **Region availability**:
   - For supported regions for model deployments, see: [Azure OpenAI model region support](../concepts/model-region-support.md#available-models).
 - **Azure Blob Storage**: using Azure Blob Storage files with the File Search tool isn't supported.
 - **Private MCP Server**: using private MCP servers deployed in the same virtual network is not supported, only publicly accessible MCP servers are supported.
 
 ## Prerequisites
-* An Azure subscription - [Create one for free](https://azure.microsoft.com/free/cognitive-services).
+* An Azure subscription - [Create one for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
 * Ensure that the individual creating the account and project has the **Azure AI Account Owner** role at the subscription scope
 * The person deploying the template must also have permissions to assign roles to required resources (Cosmos DB, Search, Storage).
     * The built-in role needed is **Role Based Access Administrator**.

articles/ai-foundry/agents/how-to/virtual-networks.md

@@ -8,14 +8,31 @@ ms.author: aahi
 ms.service: azure-ai-foundry
 ms.subservice: azure-ai-foundry-agent-service
 ms.topic: overview
-ms.date: 08/07/2025
+ms.date: 10/08/2025
 ms.custom: azure-ai-agents
 ---
 
 # What's new in Azure AI Foundry Agent Service
 
 This article provides a summary of the latest releases and major documentation updates for Azure AI Foundry Agent Service.
 
+## October 2025
+
+### Additional model support
+
+The Agent Service supports the following [models](./concepts/model-region-support.md):
+* gpt-5
+* gpt-5-mini
+* gpt-5-nano
+* gpt-5-chat
+
+
+## September 2025
+
+### Computer Use tool
+
+The [Computer Use](./how-to/tools/computer-use.md) tool is now available in preview. Computer Use is a specialized AI tool that uses a specialized model that can perform tasks by interacting with computer systems and applications through their user interfaces.
+
 ## August 2025
 
 ### Java SDK Availability