@dockndevai/mcp-azure 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ankit Verma
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,97 @@
+# mcp-azure
+
+[![CI](https://github.com/dockndevai/mcp-azure/actions/workflows/ci.yml/badge.svg)](https://github.com/dockndevai/mcp-azure/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)
+[![npm](https://img.shields.io/npm/v/@dockndevai/mcp-azure)](https://www.npmjs.com/package/@dockndevai/mcp-azure)
+
+A [Model Context Protocol](https://modelcontextprotocol.io) server for **Azure** (via the Azure Resource Manager API — the programmatic layer behind the Azure Portal). It lets an MCP-capable client (Claude Desktop, Claude Code, Cursor, Codex, …) inventory and operate Azure resources — with a governance layer that keeps an AI agent inside safe boundaries.
+
+## What this offers
+
+- **Inventory** — list subscriptions, locations, resource groups, and resources; get any resource by ARM id.
+- **Operations** — create resource groups (in approved regions), merge tags onto any resource, and control VM power state (start / stop / restart / deallocate).
+- **Lifecycle** — delete resource groups and individual resources, guarded.
+- **Governance built in** — access modes, subscription/resource-group allowlists, protected resource groups, a location allowlist for new groups, delete gating, typed confirmation for high-impact deletes, dry-run, and JSON audit logging.
+
+## Governance & security model
+
+| Concern | Flag | Default | Effect |
+| --- | --- | --- | --- |
+| What can the server do? | `AZURE_MODE` | `read-only` | `read-only` → inventory; `read-write` → create RG, tag, VM power; `admin` → deletes. Tools above the mode are **never registered**. |
+| Which subscriptions? | `AZURE_SUBSCRIPTION_ALLOWLIST` | *(all)* | Operations on other subscriptions are refused. |
+| Which resource groups? | `AZURE_RESOURCE_GROUP_ALLOWLIST` | *(all)* | Operations outside the list are refused. |
+| Read-only-forever groups | `AZURE_PROTECTED_RESOURCE_GROUPS` | *(none)* | Readable, never mutable. |
+| Approved regions | `AZURE_LOCATION_ALLOWLIST` | *(any)* | New resource groups may only be created here. |
+| Can it delete? | `AZURE_ALLOW_DELETE` | `false` | Deletes need this **and** admin mode. |
+| Typed confirmation | `AZURE_REQUIRE_CONFIRMATION` | `true` | Deletes require `confirm` to equal the target name — not just a boolean. |
+| Preview | `AZURE_DRY_RUN` | `false` | Write/admin tools validate + log intent, then return. |
+| Audit trail | `AZURE_AUDIT_LOG` | `true` | JSON line to stderr per guarded operation. |
+
+## Tools
+
+**Read** (`read-only`+): `list_subscriptions`, `list_locations`, `list_resource_groups`, `list_resources`, `get_resource`
+
+**Write** (`read-write`+): `create_resource_group`, `tag_resource`, `control_vm`
+
+**Admin** (`admin`): `delete_resource_group`, `delete_resource` (both need `AZURE_ALLOW_DELETE` + typed `confirm`)
+
+## Quickstart — add to your agent
+
+Published on npm as [`@dockndevai/mcp-azure`](https://www.npmjs.com/package/@dockndevai/mcp-azure). Runs via `npx` with an Entra ID service principal. See [docs/CLIENTS.md](docs/CLIENTS.md) for every client and [`.env.example`](.env.example) for all variables.
+
+**Claude Code**
+
+```bash
+claude mcp add azure -e AZURE_TENANT_ID="…" -e AZURE_CLIENT_ID="…" -e AZURE_CLIENT_SECRET="…" -e AZURE_SUBSCRIPTION_ID="…" -e AZURE_MODE="read-only" -- npx -y @dockndevai/mcp-azure
+```
+
+**Claude Desktop · Cursor · Windsurf**
+
+```json
+{
+  "mcpServers": {
+    "azure": {
+      "command": "npx",
+      "args": ["-y", "@dockndevai/mcp-azure"],
+      "env": {
+        "AZURE_TENANT_ID": "…",
+        "AZURE_CLIENT_ID": "…",
+        "AZURE_CLIENT_SECRET": "…",
+        "AZURE_SUBSCRIPTION_ID": "…",
+        "AZURE_MODE": "read-only"
+      }
+    }
+  }
+}
+```
+
+## Example prompts
+
+- *"List all resource groups in my subscription and which region each is in"*
+- *"Show every resource in the rg-web group"*
+- *"Tag the app-plan resource with env=prod and owner=team-a"* (needs read-write)
+- *"Stop the build-agent VM in rg-ci"* (needs read-write)
+
+## Run from source (development)
+
+```bash
+npm install
+npm run build
+node dist/index.js   # with the environment variables set
+```
+
+## Develop
+
+```bash
+npm run dev
+npm test          # governance policy: modes, scoping, location allowlist, delete + confirmation
+npm run typecheck
+```
+
+## Publishing
+
+Ships a [`server.json`](server.json) for the official MCP registry and an [`mcpName`](package.json) for npm ownership validation. See **[PUBLISHING.md](PUBLISHING.md)**.
+
+## License
+
+MIT

package/dist/azure/client.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Thin fetch-based client for the Azure Resource Manager (ARM) REST API.
+ * Auth is OAuth2 client credentials against Entra ID; tokens are cached.
+ * https://learn.microsoft.com/rest/api/resources/
+ */
+import type { AzureConnection } from "../config.js";
+export declare class AzureError extends Error {
+    readonly status: number;
+    readonly body?: string | undefined;
+    constructor(message: string, status: number, body?: string | undefined);
+}
+export declare class AzureClient {
+    private readonly conn;
+    private token?;
+    constructor(conn: AzureConnection);
+    private getToken;
+    request<T = unknown>(method: string, path: string, opts?: {
+        apiVersion: string;
+        query?: Record<string, string | undefined>;
+        body?: unknown;
+    }): Promise<T>;
+    listSubscriptions(): Promise<unknown>;
+    listLocations(sub: string): Promise<unknown>;
+    listResourceGroups(sub: string): Promise<unknown>;
+    listResources(sub: string, rg?: string): Promise<unknown>;
+    getResource(resourceId: string, apiVersion: string): Promise<unknown>;
+    createResourceGroup(sub: string, name: string, location: string, tags?: Record<string, string>): Promise<unknown>;
+    /** Merge tags onto any resource via the generic Tags API (no per-type api-version needed). */
+    tagResource(resourceId: string, tags: Record<string, string>): Promise<unknown>;
+    /** Power action on a VM: start | powerOff | restart | deallocate. */
+    controlVm(sub: string, rg: string, vm: string, action: string): Promise<unknown>;
+    deleteResourceGroup(sub: string, name: string): Promise<unknown>;
+    deleteResource(resourceId: string, apiVersion: string): Promise<unknown>;
+}

package/dist/azure/client.js

@@ -0,0 +1,115 @@
+const ARM = "https://management.azure.com";
+export class AzureError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = "AzureError";
+    }
+}
+export class AzureClient {
+    conn;
+    token;
+    constructor(conn) {
+        this.conn = conn;
+    }
+    async getToken() {
+        if (this.token && this.token.expiresAt > Date.now())
+            return this.token.accessToken;
+        const url = `https://login.microsoftonline.com/${this.conn.tenantId}/oauth2/v2.0/token`;
+        const form = new URLSearchParams({
+            grant_type: "client_credentials",
+            client_id: this.conn.clientId,
+            client_secret: this.conn.clientSecret,
+            scope: `${ARM}/.default`,
+        });
+        const res = await fetch(url, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: form.toString(),
+        });
+        if (!res.ok) {
+            const body = await res.text().catch(() => "");
+            throw new AzureError(`Azure AD token request failed (${res.status}). Check tenant/client/secret.`, res.status, body);
+        }
+        const data = (await res.json());
+        this.token = { accessToken: data.access_token, expiresAt: Date.now() + (data.expires_in - 30) * 1000 };
+        return this.token.accessToken;
+    }
+    async request(method, path, opts = { apiVersion: "2021-04-01" }) {
+        const token = await this.getToken();
+        const url = new URL(path.startsWith("http") ? path : `${ARM}${path}`);
+        url.searchParams.set("api-version", opts.apiVersion);
+        for (const [k, v] of Object.entries(opts.query ?? {}))
+            if (v !== undefined)
+                url.searchParams.set(k, v);
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), this.conn.requestTimeout);
+        try {
+            const res = await fetch(url, {
+                method,
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    Accept: "application/json",
+                    ...(opts.body !== undefined ? { "Content-Type": "application/json" } : {}),
+                },
+                body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
+                signal: ctrl.signal,
+            });
+            const text = await res.text();
+            if (!res.ok)
+                throw new AzureError(`Azure ARM ${method} ${path} failed with ${res.status}.`, res.status, text);
+            return (text ? JSON.parse(text) : undefined);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    // --- Reads -----------------------------------------------------------------
+    listSubscriptions() {
+        return this.request("GET", "/subscriptions", { apiVersion: "2022-12-01" });
+    }
+    listLocations(sub) {
+        return this.request("GET", `/subscriptions/${sub}/locations`, { apiVersion: "2022-12-01" });
+    }
+    listResourceGroups(sub) {
+        return this.request("GET", `/subscriptions/${sub}/resourcegroups`, { apiVersion: "2021-04-01" });
+    }
+    listResources(sub, rg) {
+        const path = rg
+            ? `/subscriptions/${sub}/resourceGroups/${rg}/resources`
+            : `/subscriptions/${sub}/resources`;
+        return this.request("GET", path, { apiVersion: "2021-04-01" });
+    }
+    getResource(resourceId, apiVersion) {
+        return this.request("GET", resourceId, { apiVersion });
+    }
+    // --- Writes ----------------------------------------------------------------
+    createResourceGroup(sub, name, location, tags) {
+        return this.request("PUT", `/subscriptions/${sub}/resourcegroups/${name}`, {
+            apiVersion: "2021-04-01",
+            body: { location, tags },
+        });
+    }
+    /** Merge tags onto any resource via the generic Tags API (no per-type api-version needed). */
+    tagResource(resourceId, tags) {
+        return this.request("PATCH", `${resourceId}/providers/Microsoft.Resources/tags/default`, {
+            apiVersion: "2021-04-01",
+            body: { operation: "Merge", properties: { tags } },
+        });
+    }
+    /** Power action on a VM: start | powerOff | restart | deallocate. */
+    controlVm(sub, rg, vm, action) {
+        return this.request("POST", `/subscriptions/${sub}/resourceGroups/${rg}/providers/Microsoft.Compute/virtualMachines/${vm}/${action}`, { apiVersion: "2023-07-01" });
+    }
+    // --- Destructive -----------------------------------------------------------
+    deleteResourceGroup(sub, name) {
+        return this.request("DELETE", `/subscriptions/${sub}/resourcegroups/${name}`, { apiVersion: "2021-04-01" });
+    }
+    deleteResource(resourceId, apiVersion) {
+        return this.request("DELETE", resourceId, { apiVersion });
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/azure/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/azure/client.ts"],"names":[],"mappings":"AAOA,MAAM,GAAG,GAAG,8BAA8B,CAAC;AAE3C,MAAM,OAAO,UAAW,SAAQ,KAAK;IACG;IAAyB;IAA/D,YAAY,OAAe,EAAW,MAAc,EAAW,IAAa;QAC1E,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAS;QAE1E,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAOD,MAAM,OAAO,WAAW;IAGO;IAFrB,KAAK,CAAS;IAEtB,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAE9C,KAAK,CAAC,QAAQ;QACpB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QACnF,MAAM,GAAG,GAAG,qCAAqC,IAAI,CAAC,IAAI,CAAC,QAAQ,oBAAoB,CAAC;QACxF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAC7B,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACrC,KAAK,EAAE,GAAG,GAAG,WAAW;SACzB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,UAAU,CAAC,kCAAkC,GAAG,CAAC,MAAM,gCAAgC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiD,CAAC;QAChF,IAAI,CAAC,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;QACvG,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,IAAY,EACZ,OAA2F,EAAE,UAAU,EAAE,YAAY,EAAE;QAEvH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;QACtE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEvG,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3E;gBACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrE,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,UAAU,CAAC,aAAa,MAAM,IAAI,IAAI,gBAAgB,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAM,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,iBAAiB;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,aAAa,CAAC,GAAW;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,GAAG,YAAY,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,kBAAkB,CAAC,GAAW;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,GAAG,iBAAiB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,aAAa,CAAC,GAAW,EAAE,EAAW;QACpC,MAAM,IAAI,GAAG,EAAE;YACb,CAAC,CAAC,kBAAkB,GAAG,mBAAmB,EAAE,YAAY;YACxD,CAAC,CAAC,kBAAkB,GAAG,YAAY,CAAC;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,WAAW,CAAC,UAAkB,EAAE,UAAkB;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,8EAA8E;IAC9E,mBAAmB,CAAC,GAAW,EAAE,IAAY,EAAE,QAAgB,EAAE,IAA6B;QAC5F,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,GAAG,mBAAmB,IAAI,EAAE,EAAE;YACzE,UAAU,EAAE,YAAY;YACxB,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;IACD,8FAA8F;IAC9F,WAAW,CAAC,UAAkB,EAAE,IAA4B;QAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,UAAU,6CAA6C,EAAE;YACvF,UAAU,EAAE,YAAY;YACxB,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE;SACnD,CAAC,CAAC;IACL,CAAC;IACD,qEAAqE;IACrE,SAAS,CAAC,GAAW,EAAE,EAAU,EAAE,EAAU,EAAE,MAAc;QAC3D,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,kBAAkB,GAAG,mBAAmB,EAAE,gDAAgD,EAAE,IAAI,MAAM,EAAE,EACxG,EAAE,UAAU,EAAE,YAAY,EAAE,CAC7B,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,mBAAmB,CAAC,GAAW,EAAE,IAAY;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,GAAG,mBAAmB,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,cAAc,CAAC,UAAkB,EAAE,UAAkB;QACnD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,14 @@
+import type { SecurityConfig } from "./security.js";
+export interface AzureConnection {
+    tenantId: string;
+    clientId: string;
+    clientSecret: string;
+    /** Default subscription id used when a tool omits one. */
+    defaultSubscription?: string;
+    requestTimeout: number;
+}
+export interface AppConfig {
+    connection: AzureConnection;
+    security: SecurityConfig;
+}
+export declare function loadConfig(): AppConfig;

package/dist/config.js

@@ -0,0 +1,47 @@
+function bool(name, fallback) {
+    const v = process.env[name];
+    if (v === undefined || v === "")
+        return fallback;
+    return ["1", "true", "yes", "on"].includes(v.toLowerCase());
+}
+function list(name) {
+    const v = process.env[name];
+    if (!v)
+        return [];
+    return v.split(",").map((s) => s.trim()).filter(Boolean);
+}
+function parseMode() {
+    const raw = (process.env.AZURE_MODE ?? "read-only").toLowerCase();
+    if (raw === "read-only" || raw === "read-write" || raw === "admin")
+        return raw;
+    throw new Error(`Invalid AZURE_MODE '${raw}'. Expected one of: read-only, read-write, admin.`);
+}
+function required(name) {
+    const v = process.env[name];
+    if (!v)
+        throw new Error(`Missing required environment variable: ${name}`);
+    return v;
+}
+export function loadConfig() {
+    return {
+        connection: {
+            tenantId: required("AZURE_TENANT_ID"),
+            clientId: required("AZURE_CLIENT_ID"),
+            clientSecret: required("AZURE_CLIENT_SECRET"),
+            defaultSubscription: process.env.AZURE_SUBSCRIPTION_ID || undefined,
+            requestTimeout: Number(process.env.AZURE_TIMEOUT_MS ?? 30000),
+        },
+        security: {
+            mode: parseMode(),
+            subscriptionAllowlist: list("AZURE_SUBSCRIPTION_ALLOWLIST"),
+            resourceGroupAllowlist: list("AZURE_RESOURCE_GROUP_ALLOWLIST"),
+            protectedResourceGroups: list("AZURE_PROTECTED_RESOURCE_GROUPS"),
+            locationAllowlist: list("AZURE_LOCATION_ALLOWLIST").map((l) => l.toLowerCase().replace(/\s+/g, "")),
+            allowDelete: bool("AZURE_ALLOW_DELETE", false),
+            requireConfirmation: bool("AZURE_REQUIRE_CONFIRMATION", true),
+            dryRun: bool("AZURE_DRY_RUN", false),
+            auditLog: bool("AZURE_AUDIT_LOG", true),
+        },
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAgBA,SAAS,IAAI,CAAC,IAAY,EAAE,QAAiB;IAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAClE,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC;IAC/E,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,mDAAmD,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,UAAU,EAAE;YACV,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;YACrC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;YACrC,YAAY,EAAE,QAAQ,CAAC,qBAAqB,CAAC;YAC7C,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS;YACnE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,KAAK,CAAC;SAC9D;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS,EAAE;YACjB,qBAAqB,EAAE,IAAI,CAAC,8BAA8B,CAAC;YAC3D,sBAAsB,EAAE,IAAI,CAAC,gCAAgC,CAAC;YAC9D,uBAAuB,EAAE,IAAI,CAAC,iCAAiC,CAAC;YAChE,iBAAiB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACnG,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC;YAC9C,mBAAmB,EAAE,IAAI,CAAC,4BAA4B,EAAE,IAAI,CAAC;YAC7D,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC;YACpC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC;SACxC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { loadConfig } from "./config.js";
+import { buildServer } from "./server.js";
+async function main() {
+    let config;
+    try {
+        config = loadConfig();
+    }
+    catch (err) {
+        process.stderr.write(`[azure-mcp] Configuration error: ${err.message}\n`);
+        process.exit(1);
+    }
+    const { server, enabled } = buildServer(config);
+    process.stderr.write(`[azure-mcp] Starting in '${config.security.mode}' mode` +
+        `${config.security.dryRun ? " (DRY RUN)" : ""}. ` +
+        `${enabled.length} tools enabled: ${enabled.join(", ")}\n`);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((err) => {
+    process.stderr.write(`[azure-mcp] Fatal: ${err.stack ?? err}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,KAAK,UAAU,IAAI;IACjB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAqC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4BAA4B,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ;QACtD,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI;QACjD,GAAG,OAAO,CAAC,MAAM,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC7D,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAuB,GAAa,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/security.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Governance & security policy engine for Azure Resource Manager.
+ *
+ * Shared model (access modes + capability gating + delete gating + dry-run +
+ * audit) plus Azure governance controls:
+ *   - Subscription and resource-group allowlists.
+ *   - Protected resource groups: readable, never mutated or deleted.
+ *   - Location allowlist: new resource groups may only be created in approved regions.
+ *   - High-impact confirmation: destructive ops must echo back the exact target name.
+ *
+ * Pure logic, no I/O — fully unit-testable.
+ */
+export type Capability = "read" | "write" | "admin";
+export type AccessMode = "read-only" | "read-write" | "admin";
+export interface SecurityConfig {
+    mode: AccessMode;
+    /** If set, only these subscription ids are in scope. Empty = all. */
+    subscriptionAllowlist: string[];
+    /** If set, only these resource groups may be touched. Empty = all. */
+    resourceGroupAllowlist: string[];
+    /** Resource groups that can be read but never mutated or deleted. */
+    protectedResourceGroups: string[];
+    /** If set, resource groups may only be created in these locations. Empty = any. */
+    locationAllowlist: string[];
+    allowDelete: boolean;
+    requireConfirmation: boolean;
+    dryRun: boolean;
+    auditLog: boolean;
+}
+export declare class PolicyError extends Error {
+    constructor(message: string);
+}
+export interface GuardContext {
+    tool: string;
+    capability: Capability;
+    subscription?: string;
+    resourceGroup?: string;
+    location?: string;
+    destructive?: boolean;
+    confirmExpected?: string;
+    confirmProvided?: string;
+}
+export declare class SecurityPolicy {
+    private readonly config;
+    constructor(config: SecurityConfig);
+    get mode(): AccessMode;
+    isCapabilityEnabled(capability: Capability): boolean;
+    isSubscriptionAllowed(sub: string): boolean;
+    isResourceGroupAllowed(rg: string): boolean;
+    isResourceGroupProtected(rg: string): boolean;
+    isLocationAllowed(loc: string): boolean;
+    guard(ctx: GuardContext): {
+        dryRun: boolean;
+    };
+    private audit;
+}

package/dist/security.js

@@ -0,0 +1,104 @@
+/**
+ * Governance & security policy engine for Azure Resource Manager.
+ *
+ * Shared model (access modes + capability gating + delete gating + dry-run +
+ * audit) plus Azure governance controls:
+ *   - Subscription and resource-group allowlists.
+ *   - Protected resource groups: readable, never mutated or deleted.
+ *   - Location allowlist: new resource groups may only be created in approved regions.
+ *   - High-impact confirmation: destructive ops must echo back the exact target name.
+ *
+ * Pure logic, no I/O — fully unit-testable.
+ */
+const MODE_RANK = { "read-only": 0, "read-write": 1, admin: 2 };
+const CAPABILITY_RANK = { read: 0, write: 1, admin: 2 };
+export class PolicyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "PolicyError";
+    }
+}
+export class SecurityPolicy {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    get mode() {
+        return this.config.mode;
+    }
+    isCapabilityEnabled(capability) {
+        return CAPABILITY_RANK[capability] <= MODE_RANK[this.config.mode];
+    }
+    isSubscriptionAllowed(sub) {
+        if (this.config.subscriptionAllowlist.length === 0)
+            return true;
+        return this.config.subscriptionAllowlist.includes(sub);
+    }
+    isResourceGroupAllowed(rg) {
+        if (this.config.resourceGroupAllowlist.length === 0)
+            return true;
+        return this.config.resourceGroupAllowlist.includes(rg);
+    }
+    isResourceGroupProtected(rg) {
+        return this.config.protectedResourceGroups.includes(rg);
+    }
+    isLocationAllowed(loc) {
+        if (this.config.locationAllowlist.length === 0)
+            return true;
+        return this.config.locationAllowlist.includes(loc.toLowerCase().replace(/\s+/g, ""));
+    }
+    guard(ctx) {
+        if (!this.isCapabilityEnabled(ctx.capability)) {
+            this.audit(ctx, "DENY", `capability '${ctx.capability}' exceeds mode '${this.config.mode}'`);
+            throw new PolicyError(`Operation '${ctx.tool}' requires '${ctx.capability}' access but the server runs in '${this.config.mode}' mode.`);
+        }
+        if (ctx.subscription !== undefined && !this.isSubscriptionAllowed(ctx.subscription)) {
+            this.audit(ctx, "DENY", `subscription '${ctx.subscription}' not in allowlist`);
+            throw new PolicyError(`Subscription '${ctx.subscription}' is not in the configured allowlist (AZURE_SUBSCRIPTION_ALLOWLIST).`);
+        }
+        if (ctx.resourceGroup !== undefined) {
+            if (!this.isResourceGroupAllowed(ctx.resourceGroup)) {
+                this.audit(ctx, "DENY", `resource group '${ctx.resourceGroup}' not in allowlist`);
+                throw new PolicyError(`Resource group '${ctx.resourceGroup}' is not in the configured allowlist (AZURE_RESOURCE_GROUP_ALLOWLIST).`);
+            }
+            if (ctx.capability !== "read" && this.isResourceGroupProtected(ctx.resourceGroup)) {
+                this.audit(ctx, "DENY", `resource group '${ctx.resourceGroup}' is protected`);
+                throw new PolicyError(`Resource group '${ctx.resourceGroup}' is protected (AZURE_PROTECTED_RESOURCE_GROUPS); mutations are refused.`);
+            }
+        }
+        if (ctx.location !== undefined && !this.isLocationAllowed(ctx.location)) {
+            this.audit(ctx, "DENY", `location '${ctx.location}' not in allowlist`);
+            throw new PolicyError(`Location '${ctx.location}' is not in the configured allowlist (AZURE_LOCATION_ALLOWLIST).`);
+        }
+        if (ctx.destructive && !this.config.allowDelete) {
+            this.audit(ctx, "DENY", "delete not enabled");
+            throw new PolicyError(`Destructive operation '${ctx.tool}' is disabled. Set AZURE_ALLOW_DELETE=true to enable it.`);
+        }
+        if (ctx.destructive && this.config.requireConfirmation && ctx.confirmExpected !== undefined) {
+            if (ctx.confirmProvided !== ctx.confirmExpected) {
+                this.audit(ctx, "DENY", "confirmation mismatch");
+                throw new PolicyError(`Operation '${ctx.tool}' is high-impact. Re-run with confirm="${ctx.confirmExpected}" to proceed.`);
+            }
+        }
+        const dryRun = ctx.capability !== "read" && this.config.dryRun;
+        this.audit(ctx, dryRun ? "DRY_RUN" : "ALLOW");
+        return { dryRun };
+    }
+    audit(ctx, decision, reason) {
+        if (!this.config.auditLog)
+            return;
+        const line = {
+            ts: new Date().toISOString(),
+            audit: "azure-mcp",
+            decision,
+            tool: ctx.tool,
+            capability: ctx.capability,
+            subscription: ctx.subscription ?? null,
+            resourceGroup: ctx.resourceGroup ?? null,
+            destructive: ctx.destructive ?? false,
+            ...(reason ? { reason } : {}),
+        };
+        process.stderr.write(`${JSON.stringify(line)}\n`);
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,MAAM,SAAS,GAA+B,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC5F,MAAM,eAAe,GAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAkBpF,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAaD,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAED,mBAAmB,CAAC,UAAsB;QACxC,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,qBAAqB,CAAC,GAAW;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,sBAAsB,CAAC,EAAU;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,wBAAwB,CAAC,EAAU;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,iBAAiB,CAAC,GAAW;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,GAAiB;QACrB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,UAAU,mBAAmB,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7F,MAAM,IAAI,WAAW,CACnB,cAAc,GAAG,CAAC,IAAI,eAAe,GAAG,CAAC,UAAU,oCAAoC,IAAI,CAAC,MAAM,CAAC,IAAI,SAAS,CACjH,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,iBAAiB,GAAG,CAAC,YAAY,oBAAoB,CAAC,CAAC;YAC/E,MAAM,IAAI,WAAW,CACnB,iBAAiB,GAAG,CAAC,YAAY,sEAAsE,CACxG,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,aAAa,oBAAoB,CAAC,CAAC;gBAClF,MAAM,IAAI,WAAW,CACnB,mBAAmB,GAAG,CAAC,aAAa,wEAAwE,CAC7G,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,IAAI,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBAClF,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,aAAa,gBAAgB,CAAC,CAAC;gBAC9E,MAAM,IAAI,WAAW,CACnB,mBAAmB,GAAG,CAAC,aAAa,0EAA0E,CAC/G,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,QAAQ,oBAAoB,CAAC,CAAC;YACvE,MAAM,IAAI,WAAW,CACnB,aAAa,GAAG,CAAC,QAAQ,kEAAkE,CAC5F,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;YAC9C,MAAM,IAAI,WAAW,CACnB,0BAA0B,GAAG,CAAC,IAAI,0DAA0D,CAC7F,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC5F,IAAI,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;gBACjD,MAAM,IAAI,WAAW,CACnB,cAAc,GAAG,CAAC,IAAI,0CAA0C,GAAG,CAAC,eAAe,eAAe,CACnG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,GAAiB,EAAE,QAAgB,EAAE,MAAe;QAChE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO;QAClC,MAAM,IAAI,GAAG;YACX,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK,EAAE,WAAW;YAClB,QAAQ;YACR,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;YACtC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;YACxC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,KAAK;YACrC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/server.d.ts

@@ -0,0 +1,6 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { AppConfig } from "./config.js";
+export declare function buildServer(config: AppConfig): {
+    server: McpServer;
+    enabled: string[];
+};

package/dist/server.js

@@ -0,0 +1,44 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { AzureClient, AzureError } from "./azure/client.js";
+import { PolicyError, SecurityPolicy } from "./security.js";
+import { adminTools } from "./tools/admin.js";
+import { readTools } from "./tools/read.js";
+import { writeTools } from "./tools/write.js";
+const ALL_TOOLS = [...readTools, ...writeTools, ...adminTools];
+export function buildServer(config) {
+    const policy = new SecurityPolicy(config.security);
+    const client = new AzureClient(config.connection);
+    const ctx = { client, policy, defaultSubscription: config.connection.defaultSubscription };
+    const server = new McpServer({ name: "mcp-azure", version: "0.1.0" });
+    const enabled = [];
+    for (const tool of ALL_TOOLS) {
+        if (!policy.isCapabilityEnabled(tool.capability))
+            continue;
+        enabled.push(tool.name);
+        server.registerTool(tool.name, tool.config, async (args) => {
+            try {
+                return await tool.handler(args ?? {}, ctx);
+            }
+            catch (err) {
+                return toErrorResult(err);
+            }
+        });
+    }
+    return { server, enabled };
+}
+function toErrorResult(err) {
+    let message;
+    if (err instanceof PolicyError)
+        message = `Policy denied: ${err.message}`;
+    else if (err instanceof AzureError)
+        message = `Azure error (${err.status}): ${err.message}${err.body ? `\n${truncate(err.body)}` : ""}`;
+    else if (err instanceof Error)
+        message = `${err.name}: ${err.message}`;
+    else
+        message = String(err);
+    return { content: [{ type: "text", text: message }], isError: true };
+}
+function truncate(s, max = 800) {
+    return s.length > max ? `${s.slice(0, max)}…` : s;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,SAAS,GAAc,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,CAAC;AAE1E,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;IACxG,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,SAAS;QAC3D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;YAClF,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,OAAe,CAAC;IACpB,IAAI,GAAG,YAAY,WAAW;QAAE,OAAO,GAAG,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC;SACrE,IAAI,GAAG,YAAY,UAAU;QAAE,OAAO,GAAG,gBAAgB,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;SACnI,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;;QAClE,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAG,GAAG,GAAG;IACpC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/tools/admin.d.ts

@@ -0,0 +1,6 @@
+import type { ToolDef } from "./types.js";
+/**
+ * Admin (destructive) tools. Each needs admin mode + AZURE_ALLOW_DELETE, and —
+ * when AZURE_REQUIRE_CONFIRMATION is on — a `confirm` value matching the target name.
+ */
+export declare const adminTools: ToolDef[];

package/dist/tools/admin.js

@@ -0,0 +1,72 @@
+import { z } from "zod";
+import { jsonResult, resolveSub, textResult } from "./types.js";
+const subArg = { subscription: z.string().optional().describe("Subscription id (defaults to AZURE_SUBSCRIPTION_ID)") };
+/**
+ * Admin (destructive) tools. Each needs admin mode + AZURE_ALLOW_DELETE, and —
+ * when AZURE_REQUIRE_CONFIRMATION is on — a `confirm` value matching the target name.
+ */
+export const adminTools = [
+    {
+        name: "delete_resource_group",
+        capability: "admin",
+        config: {
+            title: "Delete resource group",
+            description: "Permanently delete a resource group and everything in it. Requires admin mode, AZURE_ALLOW_DELETE=true, " +
+                "and confirm equal to the resource group name. Irreversible.",
+            inputSchema: {
+                ...subArg,
+                name: z.string().describe("Resource group name"),
+                confirm: z.string().optional().describe("Must equal the resource group name to proceed"),
+            },
+        },
+        handler: async (a, ctx) => {
+            const sub = resolveSub(a, ctx);
+            const name = a.name;
+            const { dryRun } = ctx.policy.guard({
+                tool: "delete_resource_group",
+                capability: "admin",
+                subscription: sub,
+                resourceGroup: name,
+                destructive: true,
+                confirmExpected: name,
+                confirmProvided: a.confirm,
+            });
+            if (dryRun)
+                return textResult(`[dry-run] Would delete resource group '${name}' and all its resources.`);
+            await ctx.client.deleteResourceGroup(sub, name);
+            return jsonResult({ deleted: true, resourceGroup: name });
+        },
+    },
+    {
+        name: "delete_resource",
+        capability: "admin",
+        config: {
+            title: "Delete a resource",
+            description: "Permanently delete a single resource by ARM id. Requires admin mode, AZURE_ALLOW_DELETE=true, and confirm " +
+                "equal to the resource name. Provide the api-version for the resource type. Irreversible.",
+            inputSchema: {
+                resourceId: z.string().describe("Full ARM resource id"),
+                resourceName: z.string().describe("Resource name — used for the confirmation check"),
+                apiVersion: z.string().describe("API version for this resource type"),
+                resourceGroup: z.string().optional().describe("Resource group (for scoping/audit)"),
+                confirm: z.string().optional().describe("Must equal the resource name to proceed"),
+            },
+        },
+        handler: async (a, ctx) => {
+            const name = a.resourceName;
+            const { dryRun } = ctx.policy.guard({
+                tool: "delete_resource",
+                capability: "admin",
+                resourceGroup: a.resourceGroup,
+                destructive: true,
+                confirmExpected: name,
+                confirmProvided: a.confirm,
+            });
+            if (dryRun)
+                return textResult(`[dry-run] Would delete resource '${name}' (${a.resourceId}).`);
+            await ctx.client.deleteResource(a.resourceId, a.apiVersion);
+            return jsonResult({ deleted: true, resource: name });
+        },
+    },
+];
+//# sourceMappingURL=admin.js.map

package/dist/tools/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/tools/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;AAEvH;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EACT,0GAA0G;gBAC1G,6DAA6D;YAC/D,WAAW,EAAE;gBACX,GAAG,MAAM;gBACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;gBAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;aACzF;SACF;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAc,CAAC;YAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAClC,IAAI,EAAE,uBAAuB;gBAC7B,UAAU,EAAE,OAAO;gBACnB,YAAY,EAAE,GAAG;gBACjB,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;gBACjB,eAAe,EAAE,IAAI;gBACrB,eAAe,EAAE,CAAC,CAAC,OAA6B;aACjD,CAAC,CAAC;YACH,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,0CAA0C,IAAI,0BAA0B,CAAC,CAAC;YACxG,MAAM,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACT,4GAA4G;gBAC5G,0FAA0F;YAC5F,WAAW,EAAE;gBACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;gBACpF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;gBACrE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;gBACnF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;aACnF;SACF;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,IAAI,GAAG,CAAC,CAAC,YAAsB,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAClC,IAAI,EAAE,iBAAiB;gBACvB,UAAU,EAAE,OAAO;gBACnB,aAAa,EAAE,CAAC,CAAC,aAAmC;gBACpD,WAAW,EAAE,IAAI;gBACjB,eAAe,EAAE,IAAI;gBACrB,eAAe,EAAE,CAAC,CAAC,OAA6B;aACjD,CAAC,CAAC;YACH,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,oCAAoC,IAAI,MAAM,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;YAC9F,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,UAAoB,EAAE,CAAC,CAAC,UAAoB,CAAC,CAAC;YAChF,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;KACF;CACF,CAAC"}

package/dist/tools/read.d.ts

@@ -0,0 +1,2 @@
+import type { ToolDef } from "./types.js";
+export declare const readTools: ToolDef[];

package/dist/tools/read.js

@@ -0,0 +1,76 @@
+import { z } from "zod";
+import { jsonResult, resolveSub } from "./types.js";
+const subArg = { subscription: z.string().optional().describe("Subscription id (defaults to AZURE_SUBSCRIPTION_ID)") };
+export const readTools = [
+    {
+        name: "list_subscriptions",
+        capability: "read",
+        config: { title: "List subscriptions", description: "List subscriptions the service principal can see (filtered by allowlist).", inputSchema: {} },
+        handler: async (_a, { client, policy }) => {
+            policy.guard({ tool: "list_subscriptions", capability: "read" });
+            const data = (await client.listSubscriptions());
+            const subs = (data.value ?? [])
+                .filter((s) => policy.isSubscriptionAllowed(s.subscriptionId))
+                .map((s) => ({ subscriptionId: s.subscriptionId, displayName: s.displayName, state: s.state }));
+            return jsonResult(subs);
+        },
+    },
+    {
+        name: "list_locations",
+        capability: "read",
+        config: { title: "List locations", description: "List the regions available to a subscription.", inputSchema: { ...subArg } },
+        handler: async (a, ctx) => {
+            const sub = resolveSub(a, ctx);
+            ctx.policy.guard({ tool: "list_locations", capability: "read", subscription: sub });
+            return jsonResult(await ctx.client.listLocations(sub));
+        },
+    },
+    {
+        name: "list_resource_groups",
+        capability: "read",
+        config: { title: "List resource groups", description: "List resource groups in a subscription (filtered by allowlist).", inputSchema: { ...subArg } },
+        handler: async (a, ctx) => {
+            const sub = resolveSub(a, ctx);
+            ctx.policy.guard({ tool: "list_resource_groups", capability: "read", subscription: sub });
+            const data = (await ctx.client.listResourceGroups(sub));
+            const groups = (data.value ?? [])
+                .filter((g) => ctx.policy.isResourceGroupAllowed(g.name))
+                .map((g) => ({ name: g.name, location: g.location, protected: ctx.policy.isResourceGroupProtected(g.name) }));
+            return jsonResult(groups);
+        },
+    },
+    {
+        name: "list_resources",
+        capability: "read",
+        config: {
+            title: "List resources",
+            description: "List resources in a subscription, or within a specific resource group.",
+            inputSchema: { ...subArg, resourceGroup: z.string().optional().describe("Limit to this resource group") },
+        },
+        handler: async (a, ctx) => {
+            const sub = resolveSub(a, ctx);
+            const rg = a.resourceGroup;
+            ctx.policy.guard({ tool: "list_resources", capability: "read", subscription: sub, resourceGroup: rg });
+            const data = (await ctx.client.listResources(sub, rg));
+            const items = (data.value ?? []).map((r) => ({ id: r.id, name: r.name, type: r.type, location: r.location, kind: r.kind }));
+            return jsonResult(items);
+        },
+    },
+    {
+        name: "get_resource",
+        capability: "read",
+        config: {
+            title: "Get resource",
+            description: "Fetch a resource by its full ARM id. Provide the api-version for the resource type.",
+            inputSchema: {
+                resourceId: z.string().describe("Full ARM resource id (/subscriptions/…/providers/…)"),
+                apiVersion: z.string().describe("API version for this resource type, e.g. 2023-07-01"),
+            },
+        },
+        handler: async (a, ctx) => {
+            ctx.policy.guard({ tool: "get_resource", capability: "read" });
+            return jsonResult(await ctx.client.getResource(a.resourceId, a.apiVersion));
+        },
+    },
+];
+//# sourceMappingURL=read.js.map

package/dist/tools/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;AAEvH,MAAM,CAAC,MAAM,SAAS,GAAc;IAClC;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,2EAA2E,EAAE,WAAW,EAAE,EAAE,EAAE;QAClJ,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YACxC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAsF,CAAC;YACrI,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;iBAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAClG,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,+CAA+C,EAAE,WAAW,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE;QAC7H,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;YACpF,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,iEAAiE,EAAE,WAAW,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE;QACrJ,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1F,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAA0D,CAAC;YACjH,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;iBAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAChH,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE;YACN,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,wEAAwE;YACrF,WAAW,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE;SAC1G;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,aAAmC,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;YACvG,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAA+C,CAAC;YACrG,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5H,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE;YACN,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,qFAAqF;YAClG,WAAW,EAAE;gBACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;gBACtF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;aACvF;SACF;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,UAAoB,EAAE,CAAC,CAAC,UAAoB,CAAC,CAAC,CAAC;QAClG,CAAC;KACF;CACF,CAAC"}

package/dist/tools/types.d.ts

@@ -0,0 +1,30 @@
+import type { ZodRawShape } from "zod";
+import type { AzureClient } from "../azure/client.js";
+import type { Capability, SecurityPolicy } from "../security.js";
+export interface ToolContext {
+    client: AzureClient;
+    policy: SecurityPolicy;
+    defaultSubscription?: string;
+}
+export interface ToolResult {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: boolean;
+    [key: string]: unknown;
+}
+export interface ToolDef<Shape extends ZodRawShape = ZodRawShape> {
+    name: string;
+    capability: Capability;
+    config: {
+        title: string;
+        description: string;
+        inputSchema: Shape;
+    };
+    handler: (args: Record<string, unknown>, ctx: ToolContext) => Promise<ToolResult>;
+}
+export declare function jsonResult(value: unknown): ToolResult;
+export declare function textResult(text: string): ToolResult;
+/** Resolve the subscription for a call: explicit arg, else the configured default. */
+export declare function resolveSub(args: Record<string, unknown>, ctx: ToolContext): string;

package/dist/tools/types.js

@@ -0,0 +1,14 @@
+export function jsonResult(value) {
+    return { content: [{ type: "text", text: JSON.stringify(value, null, 2) }] };
+}
+export function textResult(text) {
+    return { content: [{ type: "text", text }] };
+}
+/** Resolve the subscription for a call: explicit arg, else the configured default. */
+export function resolveSub(args, ctx) {
+    const sub = args.subscription ?? ctx.defaultSubscription;
+    if (!sub)
+        throw new Error("No subscription provided and AZURE_SUBSCRIPTION_ID is not set.");
+    return sub;
+}
+//# sourceMappingURL=types.js.map

package/dist/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAuBA,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,UAAU,CAAC,IAA6B,EAAE,GAAgB;IACxE,MAAM,GAAG,GAAI,IAAI,CAAC,YAAmC,IAAI,GAAG,CAAC,mBAAmB,CAAC;IACjF,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/write.d.ts

@@ -0,0 +1,2 @@
+import type { ToolDef } from "./types.js";
+export declare const writeTools: ToolDef[];

package/dist/tools/write.js

@@ -0,0 +1,84 @@
+import { z } from "zod";
+import { jsonResult, resolveSub, textResult } from "./types.js";
+const subArg = { subscription: z.string().optional().describe("Subscription id (defaults to AZURE_SUBSCRIPTION_ID)") };
+export const writeTools = [
+    {
+        name: "create_resource_group",
+        capability: "write",
+        config: {
+            title: "Create resource group",
+            description: "Create a resource group in an approved location.",
+            inputSchema: {
+                ...subArg,
+                name: z.string().describe("Resource group name"),
+                location: z.string().describe("Azure region, e.g. eastus"),
+                tags: z.record(z.string()).optional().describe("Optional tags"),
+            },
+        },
+        handler: async (a, ctx) => {
+            const sub = resolveSub(a, ctx);
+            const name = a.name;
+            const location = a.location;
+            const { dryRun } = ctx.policy.guard({
+                tool: "create_resource_group",
+                capability: "write",
+                subscription: sub,
+                resourceGroup: name,
+                location,
+            });
+            if (dryRun)
+                return textResult(`[dry-run] Would create resource group '${name}' in ${location}.`);
+            return jsonResult(await ctx.client.createResourceGroup(sub, name, location, a.tags));
+        },
+    },
+    {
+        name: "tag_resource",
+        capability: "write",
+        config: {
+            title: "Tag a resource",
+            description: "Merge tags onto any resource by its ARM id (uses the generic Tags API).",
+            inputSchema: {
+                ...subArg,
+                resourceId: z.string().describe("Full ARM resource id"),
+                resourceGroup: z.string().optional().describe("Resource group (for scoping/audit)"),
+                tags: z.record(z.string()).describe("Tags to merge, e.g. { \"env\": \"prod\", \"owner\": \"team-a\" }"),
+            },
+        },
+        handler: async (a, ctx) => {
+            const sub = resolveSub(a, ctx);
+            const { dryRun } = ctx.policy.guard({
+                tool: "tag_resource",
+                capability: "write",
+                subscription: sub,
+                resourceGroup: a.resourceGroup,
+            });
+            if (dryRun)
+                return textResult(`[dry-run] Would merge tags onto ${a.resourceId}: ${JSON.stringify(a.tags)}`);
+            return jsonResult(await ctx.client.tagResource(a.resourceId, a.tags));
+        },
+    },
+    {
+        name: "control_vm",
+        capability: "write",
+        config: {
+            title: "Control a VM (power state)",
+            description: "Start, stop (deallocate), power off, or restart a virtual machine.",
+            inputSchema: {
+                ...subArg,
+                resourceGroup: z.string().describe("Resource group of the VM"),
+                vmName: z.string().describe("Virtual machine name"),
+                action: z.enum(["start", "powerOff", "restart", "deallocate"]).describe("Power action"),
+            },
+        },
+        handler: async (a, ctx) => {
+            const sub = resolveSub(a, ctx);
+            const rg = a.resourceGroup;
+            const { dryRun } = ctx.policy.guard({ tool: "control_vm", capability: "write", subscription: sub, resourceGroup: rg });
+            if (dryRun)
+                return textResult(`[dry-run] Would ${a.action} VM ${a.vmName} in ${rg}.`);
+            await ctx.client.controlVm(sub, rg, a.vmName, a.action);
+            return jsonResult({ ok: true, vm: a.vmName, action: a.action, resourceGroup: rg });
+        },
+    },
+];
+//# sourceMappingURL=write.js.map

package/dist/tools/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/tools/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;AAEvH,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,kDAAkD;YAC/D,WAAW,EAAE;gBACX,GAAG,MAAM;gBACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;gBAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;gBAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;aAChE;SACF;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAc,CAAC;YAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAkB,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAClC,IAAI,EAAE,uBAAuB;gBAC7B,UAAU,EAAE,OAAO;gBACnB,YAAY,EAAE,GAAG;gBACjB,aAAa,EAAE,IAAI;gBACnB,QAAQ;aACT,CAAC,CAAC;YACH,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,0CAA0C,IAAI,QAAQ,QAAQ,GAAG,CAAC,CAAC;YACjG,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,IAA0C,CAAC,CAAC,CAAC;QAC7H,CAAC;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,yEAAyE;YACtF,WAAW,EAAE;gBACX,GAAG,MAAM;gBACT,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBACvD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;gBACnF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,kEAAkE,CAAC;aACxG;SACF;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAClC,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,OAAO;gBACnB,YAAY,EAAE,GAAG;gBACjB,aAAa,EAAE,CAAC,CAAC,aAAmC;aACrD,CAAC,CAAC;YACH,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,mCAAmC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5G,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,UAAoB,EAAE,CAAC,CAAC,IAA8B,CAAC,CAAC,CAAC;QAC5G,CAAC;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,4BAA4B;YACnC,WAAW,EAAE,oEAAoE;YACjF,WAAW,EAAE;gBACX,GAAG,MAAM;gBACT,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;gBAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBACnD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;aACxF;SACF;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,aAAuB,CAAC;YACrC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;YACvH,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,mBAAmB,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,OAAO,EAAE,GAAG,CAAC,CAAC;YACtF,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAgB,EAAE,CAAC,CAAC,MAAgB,CAAC,CAAC;YAC5E,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;KACF;CACF,CAAC"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@dockndevai/mcp-azure",
+  "mcpName": "io.github.dockndevai/mcp-azure",
+  "version": "0.1.0",
+  "description": "Model Context Protocol server for Azure (Resource Manager) — inventory, tags, VM power, and lifecycle with governance controls (access modes, subscription/resource-group scoping, protected groups, location allowlist, delete gating, confirmation, dry-run, audit).",
+  "type": "module",
+  "license": "MIT",
+  "repository": { "type": "git", "url": "git+https://github.com/dockndevai/mcp-azure.git" },
+  "bugs": { "url": "https://github.com/dockndevai/mcp-azure/issues" },
+  "homepage": "https://github.com/dockndevai/mcp-azure#readme",
+  "bin": { "mcp-azure": "dist/index.js" },
+  "files": ["dist"],
+  "engines": { "node": ">=20" },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "prepublishOnly": "npm run build",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc -p tsconfig.json --noEmit"
+  },
+  "keywords": ["mcp", "model-context-protocol", "azure", "azure-resource-manager", "cloud", "devops", "governance", "llm", "ai"],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.9.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.6.3",
+    "vitest": "^3.2.7"
+  }
+}