Unauthorized when using the DevOps MCP

[kaspervanlohuizen-meh]

Hi,

I am trying to use the DevOps MCP, but receive the following error on all the tools I have tried: TF400813: The user '' is not authorized to access this resource.

I have started the MCP server, and used to prompt to select my project. I have used az login in the VS Code terminal, and I can use az devops project list to retrieve projects. However, when I ask copilot to list my ADO projects I appear to not be authorized. I have also tried using a PAT when logging in.

How can I make sure that copilot uses the MCP with the correct authentication?

[sheldonhull]

I'm having the same issue, despite retrieving the token in the call to mcp server. Still says unauthorized user.

"azuredevops": {
  "type": "stdio",
  "command": "zsh",
  "args": [
    "-l",
    "-c",
      "eval \"$(${env:HOME}/.local/share/aquaproj-aqua/bin/fnm env)\" && export AZURE_DEVOPS_EXT_PAT=\"$(az account get-access-token --resource 499b84ac-1321-427f-aa17-267ca6975798 --tenant 'HARDCODED' --query 'accessToken' --output tsv)\" 2>/dev/null && npx -y @azure-devops/mcp ${input:azuredevops_org}"

    ]
}

I've handled fnm, token retrieval i think, and used sh -c as another option, but nothing changes the unauthorized. In my main terminal I can do the command though so I know entra based tokens should be working.

[danhellem]

PAT's are not supported. You must use the Azure CLI and az login for this remote MCP Server