Skip to content

Commit 846962e

Browse files
JillGrant615JillGrant615
authored
Merge pull request #7570 from diberry/dibery/0723-mcp
MCP: AZD, Azure tools, Key Vault -
2 parents 75fcc87 + ae86eff commit 846962e

File tree

7 files changed

+341
-57
lines changed

7 files changed

+341
-57
lines changed

‎articles/azure-mcp-server/TOC.yml‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,14 +21,16 @@ items:
2121
href: tools/azure-bicep-schema.md
2222
- name: Azure Cache for Redis
2323
href: tools/azure-cache-for-redis.md
24-
- name: Azure CLI Extension
24+
- name: Azure CLI
2525
href: tools/azure-cli-extension.md
2626
- name: Azure Cosmos DB
2727
href: tools/cosmos-db.md
2828
- name: Azure Data Explorer
2929
href: tools/azure-data-explorer.md
3030
- name: Azure DB for PostgreSQL
3131
href: tools/postgresql.md
32+
- name: Azure Developer CLI
33+
href: tools/azure-developer-cli.md
3234
- name: Azure Foundry
3335
href: tools/azure-foundry.md
3436
- name: Azure Grafana
@@ -39,6 +41,8 @@ items:
3941
href: tools/azure-aks.md
4042
- name: Azure Load Testing
4143
href: tools/azure-load-testing.md
44+
- name: Azure MCP tool
45+
href: tools/azure-mcp-tool.md
4246
- name: Azure Monitor
4347
href: tools/monitor.md
4448
- name: Azure RBAC

‎articles/azure-mcp-server/includes/tools/supported-azure-services.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,15 +17,17 @@ Azure MCP Server provides the following tools for Azure services and Azure-relat
1717
| [Azure App Configuration](../../tools/app-configuration.md) | Manage centralized application settings and feature flags. |
1818
| [Azure best practices](../../tools/azure-best-practices.md) | Get guidance on Azure Functions development, deployment, and Azure SDK usage. |
1919
| [Azure Cache for Redis](../../tools/azure-cache-for-redis.md) | Manage Azure Cache for Redis instances, Redis clusters, and access policies. |
20-
| [Azure CLI Extension](../../tools/azure-cli-extension.md) | Execute Azure CLI commands within the MCP server. |
20+
| [Azure CLI](../../tools/azure-cli-extension.md) | Execute Azure CLI commands within the MCP server. |
2121
| [Azure Cosmos DB](../../tools/cosmos-db.md) | Work with Azure Cosmos DB accounts, databases, containers, and documents. |
2222
| [Azure Data Explorer](../../tools/azure-data-explorer.md) | Work with Azure Data Explorer clusters, databases, tables, and queries. |
2323
| [Azure Database for PostgreSQL](../../tools/postgresql.md) | Manage Azure Database for PostgreSQL servers, databases, and tables. |
24+
| [Azure Developer CLI](../../tools/azure-developer-cli.md) | Execute Azure Developer CLI commands for application development and deployment. |
2425
| [Azure Foundry](../../tools/azure-foundry.md) | Work with Azure AI Foundry models, deployments, and endpoints. |
2526
| [Azure Grafana](../../tools/azure-grafana.md) | List Grafana workspaces.|
2627
| [Azure Key Vault](../../tools/key-vault-key.md) | Manage keys, secrets, certificates in Azure Key Vault. |
2728
| [Azure Kubernetes Service](../../tools/azure-aks.md) | List Azure Kubernetes Service clusters. |
2829
| [Azure Load Testing](../../tools/azure-load-testing.md) | Create, run, and see load testing. |
30+
| [Azure MCP tool](../../tools/azure-mcp-tool.md) | Discover and manage available Azure MCP Server tools. |
2931
| [Azure Monitor](../../tools/monitor.md) | Query Azure Monitor logs and metrics. |
3032
| [Azure Native ISV](../../tools/azure-native-isv.md) | Work with Azure Native ISV services, including Datadog integration for monitoring and observability. |
3133
| [Azure Quick Review CLI](../../tools/azure-compliance-quick-review.md) | Generate compliance and security reports for Azure resources.

‎articles/azure-mcp-server/index.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ landingContent:
4141
url: tools/app-configuration.md
4242
- text: Azure Cache for Redis
4343
url: tools/azure-cache-for-redis.md
44-
- text: Azure CLI Extension
44+
- text: Azure CLI
4545
url: tools/azure-cli-extension.md
4646
- text: Azure Data Explorer
4747
url: tools/azure-data-explorer.md

‎articles/azure-mcp-server/tools/azure-developer-cli.md‎

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
---
2+
title: Azure Developer CLI Extension Tools
3+
description: Learn how to use the Azure MCP Server with the Azure Developer CLI Extension.
4+
keywords: azure mcp server, azmcp, azure developer cli extension, azd
5+
author: diberry
6+
ms.author: diberry
7+
ms.date: 07/22/2025
8+
content_well_notification:
9+
- AI-contribution
10+
ai-usage: ai-assisted
11+
ms.topic: reference
12+
ms.custom: build-2025
13+
---
14+
# Azure Developer CLI extension tools for the Azure MCP Server
15+
16+
The Azure MCP Server allows you to execute any Azure Developer CLI command using natural language prompts. You can perform application development, deployment, and management operations without needing to remember specific command syntax, parameters, or formatting.
17+
18+
[Azure Developer CLI (azd)](/azure/developer/azure-developer-cli/) is a developer-centric command-line interface (CLI) tool for creating Azure applications. It provides a set of developer-friendly commands that map to key stages in your workflow, from initializing a new project to deploying to Azure. For a complete list of Azure Developer CLI commands this tool can execute, see the [Azure Developer CLI reference documentation](/azure/developer/azure-developer-cli/reference).
19+
20+
[!INCLUDE [tip-about-params](../includes/tools/parameter-consideration.md)]
21+
22+
## Execute Azure Developer CLI command
23+
24+
The Azure MCP Server can execute Azure Developer CLI commands. This provides complete access to Azure application development and deployment operations through familiar command-line syntax.
25+
26+
**Example prompts** include:
27+
28+
- **Initialize a new project**: "Create a sample todo list app with NodeJS and MongoDB"
29+
- **Deploy application**: "Deploy my application to Azure"
30+
- **Manage environments**: "Show me my azd environments"
31+
- **Monitor application**: "Check the status of my deployed application"
32+
- **Template operations**: "List available azd templates"
33+
34+
| Parameter | Required or optional | Description |
35+
|-----------|-------------|-------------|
36+
| **Command** | Required | The Azure Developer CLI command to execute (without the 'azd' prefix). For a complete list of Azure Developer CLI commands, see the [Azure Developer CLI reference documentation](/azure/developer/azure-developer-cli/reference). |
37+
38+
## Related content
39+
40+
- [What are the Azure MCP Server tools?](index.md)
41+
- [Get started using Azure MCP Server](../get-started.md)
42+
- [Azure Developer CLI reference documentation](/azure/developer/azure-developer-cli/reference)
43+
- [Azure Developer CLI overview](/azure/developer/azure-developer-cli/overview)

‎articles/azure-mcp-server/tools/azure-mcp-tool.md‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
---
2+
title: Azure MCP Tools Management
3+
description: Learn how to use the Azure MCP Server to discover and manage available tools.
4+
keywords: azure mcp server, azmcp, tools, tool management
5+
author: diberry
6+
ms.author: diberry
7+
ms.date: 07/22/2025
8+
content_well_notification:
9+
- AI-contribution
10+
ai-usage: ai-assisted
11+
ms.topic: reference
12+
ms.custom: build-2025
13+
---
14+
# Azure MCP tools management for the Azure MCP Server
15+
16+
The Azure MCP Server provides tools to discover and manage the available Azure tools within the server. You can list all available tools using natural language prompts without remembering specific command syntax.
17+
18+
19+
[!INCLUDE [tip-about-params](../includes/tools/parameter-consideration.md)]
20+
21+
## List tools
22+
23+
The Azure MCP Server can list all available tools and their capabilities. This helps you discover what Azure services and operations you can manage through the MCP server.
24+
25+
**Example prompts** include:
26+
27+
- **List all tools**: "Show me all available Azure MCP tools"
28+
- **Discover capabilities**: "What tools are available in the Azure MCP server?"
29+
- **View tool inventory**: "List all Azure tools I can use"
30+
- **Check available services**: "What Azure services can I manage with MCP?"
31+
- **Find tools**: "Show me what Azure operations are available"
32+
33+
| Parameter | Required or optional | Description |
34+
|-----------|-------------|-------------|
35+
| None | N/A | This command requires no parameters and lists all available tools. |
36+
37+
38+
## Related content
39+
40+
- [What are the Azure MCP Server tools?](index.md)
41+
- [Get started using Azure MCP Server](../get-started.md)
42+
- [Azure MCP Server GitHub repository](https://github.com/Azure-Samples/azure-mcp-server)

‎articles/azure-mcp-server/tools/key-vault-key.md‎

Lines changed: 118 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
---
22
title: Azure Key Vault Tools
3-
description: Learn how to use the Azure MCP Server with Azure Key Vault keys.
3+
description: Learn how to use the Azure MCP Server with Azure Key Vault keys, secrets, and certificates.
44
keywords: azure mcp server, azmcp, key vault
55
author: diberry
66
ms.author: diberry
7-
ms.date: 07/01/2025
7+
ms.date: 07/22/2025
88
content_well_notification:
99
- AI-contribution
1010
ai-usage: ai-assisted
@@ -13,22 +13,24 @@ ms.custom: build-2025
1313
---
1414
# Azure Key Vault tools for the Azure MCP Server
1515

16-
The Azure MCP Server allows you to manage Azure Key Vault resources, including keys, secrets, and certificates with natural language prompts. You can manage keys without remembering specialized command syntax.
16+
The Azure MCP Server allows you to manage Azure Key Vault resources, including keys, secrets, and certificates with natural language prompts. You can manage these resources without remembering specialized command syntax.
1717

1818
[Azure Key Vault](/azure/key-vault/general/overview) is a cloud service for securely storing and accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, or cryptographic keys.
1919

2020
[!INCLUDE [tip-about-params](../includes/tools/parameter-consideration.md)]
2121

22-
## Create key
22+
## Keys
23+
24+
### Create key
2325

2426
The Azure MCP Server can create a new key in an Azure Key Vault. This allows you to add cryptographic keys for your applications.
2527

2628
Example prompts include:
2729

28-
- **Create key**: "Create a new RSA key named 'app-encryption-key' in my 'mykeyvault' Key Vault."
29-
- **Generate key**: "Generate a new EC key called 'signing-key' in Key Vault 'security-kv'"
30-
- **Add key**: "Add a new 2048-bit RSA key named 'data-key' to my Key Vault"
31-
- **Set up key**: "Create an encryption key for my application in Key Vault"
30+
- **Create RSA key**: "Create a new RSA key named 'app-encryption-key' in my 'mykeyvault' Key Vault."
31+
- **Generate EC key**: "Generate a new EC key called 'signing-key' in Key Vault 'security-kv'"
32+
- **Add encryption key**: "Add a new 2048-bit RSA key named 'data-key' to my Key Vault"
33+
- **Set up signing key**: "Create an EC key for JWT signing in my Key Vault"
3234
- **Make new key**: "Create a P-256 EC key called 'jwt-signing' in my 'api-vault'"
3335

3436
| Parameter | Required or optional | Description |
@@ -38,14 +40,14 @@ Example prompts include:
3840
| **Key** | Required | The name of the key to create. |
3941
| **Key type** | Required | The type of key to create (RSA, EC). |
4042

41-
## Get key
43+
### Get key
4244

4345
The Azure MCP Server can retrieve details of a specific key from an Azure Key Vault. This allows you to view key properties and metadata.
4446

4547
Example prompts include:
4648

47-
- **Get key**: "Show me details of the 'app-encryption-key' in my 'mykeyvault' Key Vault."
48-
- **View key**: "Get information about the 'signing-key' in Key Vault 'security-kv'"
49+
- **Get key details**: "Show me details of the 'app-encryption-key' in my 'mykeyvault' Key Vault."
50+
- **View key info**: "Get information about the 'signing-key' in Key Vault 'security-kv'"
4951
- **Retrieve key**: "Get properties of the 'data-key' in my Key Vault"
5052
- **Check key**: "Show me the details of the encryption key in my vault"
5153
- **Find key**: "Get the properties of 'jwt-signing' key in 'api-vault'"
@@ -56,13 +58,52 @@ Example prompts include:
5658
| **Vault** | Required | The name of the Key Vault. |
5759
| **Key** | Required | The name of the key to retrieve. |
5860

59-
## Get secret
61+
### List keys
62+
63+
The Azure MCP Server can list all keys in an Azure Key Vault. This helps you manage your cryptographic keys and view your key inventory.
64+
65+
Example prompts include:
66+
67+
- **List all keys**: "Show me all keys in my 'mykeyvault' Key Vault."
68+
- **View keys**: "What keys do I have in Key Vault 'security-kv'?"
69+
- **Find keys**: "List keys in my Key Vault 'central-keys'"
70+
- **Query keys**: "Show all keys including managed keys in my Key Vault"
71+
- **Check keys**: "What keys are available in my 'encryption-vault'?"
72+
73+
| Parameter | Required or optional | Description |
74+
|-----------|-------------|-------------|
75+
| **Subscription** | Required | The Azure subscription ID or name. |
76+
| **Vault** | Required | The name of the Key Vault. |
77+
| **Include managed** | Required | Whether or not to include managed keys in results. |
78+
79+
## Secrets
80+
81+
### Create secret
82+
83+
The Azure MCP Server can create a new secret in an Azure Key Vault. This allows you to securely store sensitive information like passwords, API keys, and connection strings.
84+
85+
Example prompts include:
86+
87+
- **Create API secret**: "Create a secret named 'api-key' with value 'xyz123' in my 'production-vault' Key Vault."
88+
- **Store password**: "Add a secret called 'database-password' to Key Vault 'security-kv'"
89+
- **Save connection string**: "Create a secret for my database connection string in Key Vault"
90+
- **Add credentials**: "Store my service principal secret in Key Vault 'api-vault'"
91+
- **Set configuration**: "Create a secret named 'app-config' in my Key Vault"
92+
93+
| Parameter | Required or optional | Description |
94+
|-----------|-------------|-------------|
95+
| **Subscription** | Required | The Azure subscription ID or name. |
96+
| **Vault** | Required | The name of the Key Vault. |
97+
| **Name** | Required | The name of the secret to create. |
98+
| **Value** | Required | The value of the secret to store. |
99+
100+
### Get secret
60101

61102
The Azure MCP Server can retrieve a specific secret from a Key Vault. This is useful for accessing sensitive configuration values, API keys, connection strings, and other secrets stored securely in Azure Key Vault.
62103

63104
Example prompts include:
64105

65-
- **Get a specific secret**: "Retrieve the 'database-connection-string' secret from my 'production-vault' Key Vault."
106+
- **Get specific secret**: "Retrieve the 'database-connection-string' secret from my 'production-vault' Key Vault."
66107
- **Access API key**: "Get the 'third-party-api-key' secret from the 'api-secrets' vault"
67108
- **Check secret value**: "What is the value of the 'ssl-certificate-password' secret in my Key Vault?"
68109
- **Retrieve configuration**: "Get the 'app-config-secret' from vault 'eastus-keyvault'"
@@ -74,25 +115,80 @@ Example prompts include:
74115
| **Vault** | Required | The name of the Key Vault. |
75116
| **Name** | Required | The name of the secret to retrieve. |
76117

77-
## List keys
118+
### List secrets
78119

79-
The Azure MCP Server can list all keys in an Azure Key Vault. This helps you manage your cryptographic keys.
120+
The Azure MCP Server can list all secrets in an Azure Key Vault. This helps you manage your stored secrets and view your secret inventory.
80121

81122
Example prompts include:
82123

83-
- **List keys**: "Show me all keys in my 'mykeyvault' Key Vault."
84-
- **View keys**: "What keys do I have in Key Vault 'security-kv'?"
85-
- **Find keys**: "List keys in my Key Vault 'central-keys'"
86-
- **Query keys**: "Show all keys in my Key Vault"
87-
- **Check keys**: "What keys are available in my 'encryption-vault'?"
124+
- **List all secrets**: "Show me all secrets in my 'production-vault' Key Vault."
125+
- **View secrets**: "What secrets do I have in Key Vault 'api-secrets'?"
126+
- **Find secrets**: "List secrets in my Key Vault 'configuration-kv'"
127+
- **Query secrets**: "Show all secrets in my Key Vault"
128+
- **Check secrets**: "What secrets are stored in my 'eastus-keyvault'?"
129+
130+
| Parameter | Required or optional | Description |
131+
|-----------|-------------|-------------|
132+
| **Subscription** | Required | The Azure subscription ID or name. |
133+
| **Vault** | Required | The name of the Key Vault. |
134+
135+
## Certificates
136+
137+
### Create certificate
138+
139+
The Azure MCP Server can create a new certificate in an Azure Key Vault using the default policy. This allows you to generate SSL/TLS certificates for your applications.
140+
141+
Example prompts include:
142+
143+
- **Create SSL certificate**: "Create a certificate named 'web-ssl-cert' in my 'production-vault' Key Vault."
144+
- **Generate certificate**: "Create a new certificate called 'api-tls-cert' in Key Vault 'security-kv'"
145+
- **Add certificate**: "Generate a certificate for my web application in Key Vault"
146+
- **Set up TLS cert**: "Create a certificate named 'app-certificate' in my Key Vault"
147+
- **Make new cert**: "Create a certificate called 'service-cert' in 'certificates-vault'"
148+
149+
| Parameter | Required or optional | Description |
150+
|-----------|-------------|-------------|
151+
| **Subscription** | Required | The Azure subscription ID or name. |
152+
| **Vault** | Required | The name of the Key Vault. |
153+
| **Name** | Required | The name of the certificate to create. |
154+
155+
### Get certificate
156+
157+
The Azure MCP Server can retrieve details of a specific certificate from an Azure Key Vault. This allows you to view certificate properties, expiration dates, and metadata.
158+
159+
Example prompts include:
160+
161+
- **Get certificate details**: "Show me details of the 'web-ssl-cert' certificate in my 'production-vault' Key Vault."
162+
- **View certificate info**: "Get information about the 'api-tls-cert' certificate in Key Vault 'security-kv'"
163+
- **Retrieve certificate**: "Get properties of the 'app-certificate' in my Key Vault"
164+
- **Check certificate**: "Show me the details of the SSL certificate in my vault"
165+
- **Find certificate**: "Get the properties of 'service-cert' certificate in 'certificates-vault'"
166+
167+
| Parameter | Required or optional | Description |
168+
|-----------|-------------|-------------|
169+
| **Subscription** | Required | The Azure subscription ID or name. |
170+
| **Vault** | Required | The name of the Key Vault. |
171+
| **Name** | Required | The name of the certificate to retrieve. |
172+
173+
### List certificates
174+
175+
The Azure MCP Server can list all certificates in an Azure Key Vault. This helps you manage your certificates and track expiration dates.
176+
177+
Example prompts include:
178+
179+
- **List all certificates**: "Show me all certificates in my 'production-vault' Key Vault."
180+
- **View certificates**: "What certificates do I have in Key Vault 'security-kv'?"
181+
- **Find certificates**: "List certificates in my Key Vault 'certificates-kv'"
182+
- **Query certificates**: "Show all certificates in my Key Vault"
183+
- **Check certificates**: "What certificates are available in my 'ssl-vault'?"
88184

89185
| Parameter | Required or optional | Description |
90186
|-----------|-------------|-------------|
91187
| **Subscription** | Required | The Azure subscription ID or name. |
92188
| **Vault** | Required | The name of the Key Vault. |
93-
| **Include managed** | Optional | Whether or not to include managed keys in results. |
94189

95190
## Related content
96191

97192
- [What are the Azure MCP Server tools?](index.md)
98-
- [Get started using Azure MCP Server](../get-started.md)
193+
- [Get started using Azure MCP Server](../get-started.md)
194+
- [Azure Key Vault documentation](/azure/key-vault/)

0 commit comments

Comments
 (0)