What Azure authentication is required?

The server requires environment variables `TENANT_ID`, `CLIENT_ID`, and `CLIENT_SECRET` for Azure AD authentication via the MSAL library.

Which tools are implemented?

Implemented tools: `get_builtin_policies`, `get_policies_in_category`, `get_policy_content`, `deploy_policy_assignment`, `query_policy_compliance`, `delete_policy_assignment`, and `create_policy_definition`.

What credentials does it need?

It reads `TENANT_ID`, `CLIENT_ID`, `CLIENT_SECRET` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

AzPolicyMCP MCP Server

Simple MCP server to help create Azure Policies for any resource type.

Remote serverstreamable-httpPython

What is the AzPolicyMCP MCP Server?

Simple MCP server to help create Azure Policies for any resource type.

What you get

This document outlines the requirements for an Azure Policy Model Context Protocol (MCP) Server. The primary goal of this server is to empower Large Language Models (LLMs) to assist users in generating, validating, and deploying Azure custom policies effectively. It solves the problem of LLMs generating potentially incorrect or non-compliant Azure policy JSON by providing tools to fetch relevant built-in policies as examples, validate the structure of generated policies against the official schema, and manage policy assignments via the Azure REST API. It also aims to assist the LLM in selecting the

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
server.py	Main FastMCP application definition, registers tools (get_builtin_policies, get_policies_in_category, get_policy_content, deploy_policy_assignment, query_policy_compliance, delete_policy_assignment, and create_policy_def

Configuration

Variable	Description	Required
TENANT_ID	Configuration value read at startup.	Optional
CLIENT_ID	Configuration value read at startup.	Optional
CLIENT_SECRET	Credential the server authenticates with.	Yes

Example prompts to try

“Use AzPolicyMCP to TENANT ID.”
“Use AzPolicyMCP to CLIENT ID.”
“Use AzPolicyMCP to CLIENT SECRET.”

Frequently asked questions

It enables LLMs to assist users in generating, validating, and deploying accurate Azure custom policies, preventing incorrect policy JSON.

Alternatives to the AzPolicyMCP MCP Server

n8n

Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.

Developer ToolsRemoteTypeScript★ 22.5k

AWS

Official

AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.

Cloud & DevOpsPython★ 7.0k

Aws Customer Playbook Advisor MCP

AWS Security Playbook Advisor MCP Server

Cloud & DevOpsTypeScript

Python Sandbox

A MCP server that enables LLMs to run python code safely in isolated Docker containers.

Cloud & DevOpsPython

Mcp-oci

A Model Context Protocol server for Oracle Cloud Infrastructure (OCI). It gives an MCP-capable client (Claude Desktop, Claude Code, Cursor, Copilot, …) the ability to discover live OCI resources…

Cloud & DevOps

BrewPage MCP

Publish HTML, Markdown, KV, JSON, and files to brewpage.app from AI assistants. No signup.

Developer Tools