Microsoft MCP Server for Enterprise — Claude Code MCP server setup
This server lets an AI agent query Microsoft Entra through natural-language requests. Use it to inspect directory roles, applications, devices, and related data.
claude mcp add --transport http enterprisemcp https://mcp.svc.cloud.microsoft/enterpriseWhat Microsoft MCP Server for Enterprise does
The agent describes what it needs, and the server selects Microsoft Graph calls to retrieve the matching information. Its three tools suggest relevant queries, run them, and fetch properties for Graph entities. The supported scope covers read-only identity and directory work in Microsoft Entra, including users, groups, applications, and devices.
Before connecting, an administrator provisions the server for the tenant, registers a client application, and links the required MCP.* permissions between client and server. Third-party agents need their own registered client and a configured redirect URI. Access stays read-only, and the user’s roles and client scopes determine which data the server can retrieve.
What it helps with
- check who holds directory roles and how each assignment was made
- find applications without owners or with external permissions
- review device management and compliance states
- identify unused licenses and inactive groups
- inspect sign-in and audit events during an investigation
Example prompts for the agent
- Check who has administrative roles in Microsoft Entra and how each role was assigned.
- Find applications without owners and show their permissions.
- Group Microsoft Entra devices by management and compliance state.
How to install Microsoft MCP Server for Enterprise
Platform CLI: remote server
claude mcp add --transport http enterprisemcp https://mcp.svc.cloud.microsoft/enterprisePlatform CLI: remote server
codex mcp add microsoft-mcp-server-for-enterprise --url https://mcp.svc.cloud.microsoft/enterpriseConfig file
{
"mcpServers": {
"microsoft-mcp-server-for-enterprise": {
"url": "https://mcp.svc.cloud.microsoft/enterprise"
}
}
}Config file
{
"servers": {
"microsoft-mcp-server-for-enterprise": {
"type": "http",
"url": "https://mcp.svc.cloud.microsoft/enterprise"
}
}
}Platform CLI: remote server
gemini mcp add -t http microsoft-mcp-server-for-enterprise https://mcp.svc.cloud.microsoft/enterpriseStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about Microsoft MCP Server for Enterprise
How do I install Microsoft MCP Server for Enterprise in Claude Code?
Run claude mcp add --transport http enterprisemcp https://mcp.svc.cloud.microsoft/enterprise. Before connecting, provision the server for your tenant, register a client application, and associate the required permissions.
What does Microsoft MCP Server for Enterprise do?
It turns natural-language requests into Microsoft Graph calls to retrieve Microsoft Entra data. Its operations are read-only.
Do I need a client application for Claude Code?
Yes. Register your own MCP client in the tenant, assign the necessary MCP.* scopes, and configure its redirect URI.
