{"_id":"@coderallen/azure-cloud-master-mcp","_rev":"2-be4c98523c9d11c5399221de01018f60","name":"@coderallen/azure-cloud-master-mcp","dist-tags":{"latest":"1.0.0"},"versions":{"1.0.0":{"name":"@coderallen/azure-cloud-master-mcp","version":"1.0.0","keywords":["mcp","azure","cloud","infrastructure","devops","security"],"license":"MIT","_id":"@coderallen/azure-cloud-master-mcp@1.0.0","maintainers":[{"name":"coderallen","email":"anupa4085@gmail.com"}],"bin":{"azure-cloud-master-mcp":"dist/index.js"},"dist":{"shasum":"d6573b1aff72ae54f5d9800283878057afe0383b","tarball":"https://registry.npmjs.org/@coderallen/azure-cloud-master-mcp/-/azure-cloud-master-mcp-1.0.0.tgz","fileCount":141,"integrity":"sha512-GPiEc3BaEe9KgupAFsmza6DU4ORe1BOTg4UCGh5UjwIH7wY5HhgjdZYScamjvCbUV/Gi3rf0kx+Lkaoqkasmkg==","signatures":[{"sig":"MEUCIQD9SYAIpn47T/hUH7gt1qVXpQRfpDiDfaWVJRSfDh045AIgMW4bk3oq2ImsVOYCdXbOmEjSiasENH+Oo/ujJr09Slw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":498677},"main":"dist/index.js","types":"./dist/index.d.ts","engines":{"node":">=18.0.0"},"gitHead":"c4f89ae31b40409ff133721b04b4d5f6b65cd9dc","scripts":{"dev":"tsc --watch","build":"tsc","start":"node dist/index.js","inspect":"npx @modelcontextprotocol/inspector dist/index.js"},"_npmUser":{"name":"coderallen","email":"anupa4085@gmail.com"},"_npmVersion":"11.4.0","description":"MCP server that acts as an Azure cloud engineer - plans, provisions, analyzes, and optimizes Azure resources via az CLI","directories":{},"_nodeVersion":"22.15.1","dependencies":{"zod":"^3.24.2","@modelcontextprotocol/sdk":"^1.12.1"},"_hasShrinkwrap":false,"devDependencies":{"typescript":"^5.8.2","@types/node":"^22.13.9"},"_npmOperationalInternal":{"tmp":"tmp/azure-cloud-master-mcp_1.0.0_1772778491785_0.282294844247746","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Package no longer supported. Contact Support at https://www.npmjs.com/support for more info."}},"time":{"created":"2026-03-06T06:28:11.714Z","modified":"2026-03-06T06:37:48.967Z","1.0.0":"2026-03-06T06:28:12.011Z"},"license":"MIT","keywords":["mcp","azure","cloud","infrastructure","devops","security"],"description":"MCP server that acts as an Azure cloud engineer - plans, provisions, analyzes, and optimizes Azure resources via az CLI","maintainers":[{"name":"coderallen","email":"anupa4085@gmail.com"}],"readme":"# Azure Cloud Master MCP\r\n\r\nAn MCP server that acts as your Azure cloud engineer. Plans, provisions, analyzes, and optimizes Azure resources using `az` CLI with security, DevSecOps, and FinOps best practices.\r\n\r\n> [!WARNING]  \r\n> **DISCLAIMER: Use with awareness.** This MCP has the ability to make destructive changes to your Azure environment. We **do not recommend** using this directly against production environments without extreme caution. \r\n> \r\n> **Every destructive action requires your explicit permission and approval.** Always review the generated `az` commands before allowing the MCP to execute them.\r\n\r\n## Prerequisites\r\n\r\n- **Node.js** >= 18\r\n- **Azure CLI** installed ([Install guide](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli))\r\n- **Azure login**: `az login --use-device-code`\r\n\r\n## Quick Start\r\n\r\n### Option 1: npx (after publishing to npm)\r\n\r\n```json\r\n{\r\n  \"mcpServers\": {\r\n    \"azure-cloud-master\": {\r\n      \"command\": \"npx\",\r\n      \"args\": [\"-y\", \"azure-cloud-master-mcp\"]\r\n    }\r\n  }\r\n}\r\n```\r\n\r\n### Option 2: Local build\r\n\r\n```bash\r\ngit clone <repo-url>\r\ncd azure-cloud-master-mcp\r\nnpm install\r\nnpm run build\r\n```\r\n\r\nThen add to your IDE's MCP config:\r\n\r\n```json\r\n{\r\n  \"mcpServers\": {\r\n    \"azure-cloud-master\": {\r\n      \"command\": \"node\",\r\n      \"args\": [\"/absolute/path/to/azure-cloud-master-mcp/dist/index.js\"]\r\n    }\r\n  }\r\n}\r\n```\r\n\r\n## IDE Configuration\r\n\r\n### Claude Code\r\n\r\nAdd to `~/.claude/claude_desktop_config.json`:\r\n\r\n```json\r\n{\r\n  \"mcpServers\": {\r\n    \"azure-cloud-master\": {\r\n      \"command\": \"node\",\r\n      \"args\": [\"C:/path/to/azure-cloud-master-mcp/dist/index.js\"]\r\n    }\r\n  }\r\n}\r\n```\r\n\r\n### VS Code\r\n\r\nAdd to `.vscode/settings.json` or VS Code MCP settings:\r\n\r\n```json\r\n{\r\n  \"mcp\": {\r\n    \"servers\": {\r\n      \"azure-cloud-master\": {\r\n        \"command\": \"node\",\r\n        \"args\": [\"C:/path/to/azure-cloud-master-mcp/dist/index.js\"]\r\n      }\r\n    }\r\n  }\r\n}\r\n```\r\n\r\n### Antigravity\r\n\r\nAdd via MCP server configuration with the same `node` + path pattern.\r\n\r\n## Available Tools\r\n\r\n| Tool | Purpose | Makes Changes? |\r\n|------|---------|:-:|\r\n| `azure_check_auth` | Verify `az login` status | No |\r\n| `azure_execute_commands` | Run az commands (**with approval**) | **Yes** |\r\n| `azure_generate_plan` | Create deployment plan for architectures | No |\r\n| `azure_list_resource_groups` | List all resource groups | No |\r\n| `azure_list_resources` | List resources in a Resource Group | No |\r\n| `azure_cost_analysis` | Cost optimization audit | No |\r\n| `azure_apply_best_practice` | Generate copy-paste remediation commands | No |\r\n\r\n### 🛡️ Security Analyzers (Generates Markdown Reports)\r\n\r\nAll analysis tools identify risks and output a detailed Markdown report internally while returning summaries directly to the chat!\r\n\r\n| Tool | Purpose | Makes Changes? |\r\n|------|---------|:-:|\r\n| `azure_analyze_security` | General Security & best practice audit | No |\r\n| `azure_analyze_vm` | Check VMs for unencrypted disks, public IPs | No |\r\n| `azure_analyze_sqldb` | Check SQL DBs for TDE, weak TLS, Auth | No |\r\n| `azure_analyze_aks` | Check AKS for RBAC, API Server restrictions | No |\r\n| `azure_analyze_appgw` | Analyze App Gateway for WAF, HTTPS | No |\r\n| `azure_analyze_vnet` | Check VNets for missing NSGs, peering security| No |\r\n| `azure_analyze_entraid` | Analyze Azure AD permissions, Roles, CA | No |\r\n| `azure_analyze_appservice_traffic` | Analyze AppService network access | No |\r\n| `azure_analyze_storage` | Analyze Storage Accounts for public access | No |\r\n| `azure_analyze_nsg` | Analyze NSGs for exposed RDP/SSH/HTTP ports | No |\r\n| `azure_analyze_acr` | Check Container Registry anonymity & access | No |\r\n| `azure_analyze_keyvault` | Check KeyVault soft-delete & RBAC | No |\r\n\r\n## Example Prompts\r\n\r\n- \"Check if I'm logged in to Azure\"\r\n- \"Show me all my resource groups\"\r\n- \"I need a Hub and Spoke network for dev environment\"\r\n- \"Analyze my-rg for security issues\"\r\n- \"Audit my VMs and SQL Databases for security vulnerabilities\"\r\n- \"Check if my resources are cost-optimized\"\r\n- \"Fix the NSG issue NSG-001 on my-nsg\"\r\n\r\n## 📝 Automated Reporting\r\n\r\nWhenever you run a security analysis tool (e.g., `azure_analyze_vm`), the MCP automatically creates a timestamped markdown report inside the `reports/` directory locally.\r\n\r\n## Architecture\r\n\r\n```\r\nYour IDE <--MCP/stdio--> Azure Cloud Master <--subprocess--> az CLI <--> Azure\r\n```\r\n\r\nThe MCP server never stores credentials. It relies entirely on the user's existing `az login` session.\r\n\r\n## Security Model\r\n\r\n1. Auth is validated on every request\r\n2. Only `az` CLI commands are allowed (no arbitrary shell commands)\r\n3. Dangerous operations (`az logout`, `az ad app delete`, etc.) are blocked\r\n4. **DISCLAIMER:** The MCP can make destructive changes. Operations via `azure_execute_commands` require explicit user permission and approval before execution.\r\n5. Execution stops on first failure - no silent errors\r\n\r\n## Testing\r\n\r\n```bash\r\nnpm run build\r\nnpx @modelcontextprotocol/inspector dist/index.js\r\n```\r\n\r\n## License\r\n\r\nMIT\r\n","readmeFilename":"README.md"}