entraadm MCP server

<!-- mcp-name: io.github.shigechika/entraadm-mcp -->

entraadm-mcp

English | 日本語

MCP server for Microsoft Entra ID sign-in and audit-log triage. Read-only.

Why this instead of the official Microsoft MCP Server for Enterprise

Microsoft ships an official MCP Server for Enterprise for Entra ID data. It is a good fit for an interactive admin at a keyboard, and is not a fit for an unattended triage bot:

(client credentials) auth, so it cannot run headless behind a service account. entraadm-mcp is built for that case: app-only in production, with a delegated (az login) fallback for local development.

• Delegated auth only. The official server does not support app-only

server exposes one tool that lets the model construct arbitrary GET/schema-discovery calls against Microsoft Graph. That is flexible for a human, and awkward to put behind an allow-list for an automated triage profile. entraadm-mcp exposes seven fixed, read-only tools instead.

• A general-purpose Graph query tool, not a fixed tool set. The official

triage still needs a lookup table. entraadm-mcp annotates every sign-in failure with what the code actually means.

• No AADSTS translation. Sign-in failures come back as raw error codes;

sign-ins on status/errorCode server-side, and has no built-in password-spray view. signinfailurestats aggregates client-side and flags IPs with failed sign-ins against many distinct users — the pattern Entra's per-account smart lockout does not catch on its own.

• No cross-request aggregation. Microsoft Graph itself cannot filter

Tools

Every tool is read-only. Write operations (unblocking an account, resetting a password, revoking a session) are out of scope for this server.

Auth model

Two auth modes, selected by which environment variables are set:

Setting one or two of the three app-only variables is a configuration error and the server refuses to start, rather than silently falling back to a different auth mode than intended.

Required Graph permissions

A missing permission never crashes a tool. It degrades that tool (or that one field) to {"error": "...", "missingpermission": "..."} with a human-readable explanation of what role or permission is needed, so healthcheck and every other tool stay usable even before full permissions are granted.

Setup

uv tool install entraadm-mcp
# or
pip install entraadm-mcp

Configuration

Set the three app-only variables for production/unattended use:

Shortened. The full README is on GitHub.