Azurerbac MCP Server
Azure RBAC role analysis, privilege assessment, and custom role generation for AI agents.
Data last scanned today · Reviewed today
Overview
This TypeScript-based MCP server provides tools to audit and enforce least-privilege access within Azure environments. By integrating with MCP clients, it allows users to analyze current role assignments, identify potential privilege escalation paths, and generate custom Azure role definitions in JSON and Bicep formats tailored to specific job functions.
Our verdict
With a security score of 16/100, this server is currently high-risk and not recommended for production environments. This low score stems from its status as a community-maintained project that lacks an official vendor audit, possesses no clear licensing terms, and has not been updated in over 180 days. Users should approach it as an experimental tool and independently verify the security of the authentication and deployment processes before connecting it to sensitive Azure infrastructure.
- Supports automated Azure Container Apps deployment
- Provides specific tools for analyzing privilege escalation paths
- Features only two direct dependencies
- Includes detailed documentation for Copilot Studio integration
- High-risk security score of 16/100
- No detected license limits legal usage terms
- Last code contribution occurred 183 days ago
- Lacks verification through official vendor maintenance
Setup
{
"mcpServers": {
"azurerbac-mcp": {
"args": [
"-y",
"azure-rbac-mcp"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| analyze_role_assignment | Detects over-permissioning, privilege escalation paths, and compliance flags | low |
| recommend_roles | Recommends least-privilege built-in roles for a job function or use case | low |
| generate_custom_role | Generates custom role ARM JSON + Bicep with a least-privilege score | medium |
| explain_permission | Plain-language breakdown of any Azure permission string | low |
| list_builtin_roles | Browse the role reference DB, filterable by category or risk level | low |
| list_job_profiles | Lists job function profiles (vm-operator, devops-engineer, etc.) | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What deployment options are available for this MCP server?
The server is primarily designed as a containerized Streamable HTTP service for deployment to Azure Container Apps, though it can also be run locally using Node.js for development.
›Is local Docker installation required to deploy this to Azure?
No, local Docker is not required because the deployment script and manual process leverage Azure Container Registry (ACR) Tasks to handle the image build in the cloud.
›Can this server be used with Claude Desktop?
Yes, it supports stdio mode for local use with Claude Desktop, though the HTTP server is the primary target for production deployments.
›Does the server require specific authentication to connect to Copilot Studio?
By default, the server does not require authentication, but you can configure API Key middleware if your security requirements necessitate it.
›Which compliance standards are supported by the analysis and recommendations?
The server provides guidance aligned with CMMC Level 2, HIPAA, NIST 800-171, and FedRAMP frameworks.
Alternatives
Badge
Maintain this server? Add the live badge to your README.