# Microsoft MCP Server for Enterprise

This server lets an AI agent query Microsoft Entra through natural-language requests. Use it to inspect directory roles, applications, devices, and related data.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 60
- Author: microsoft
- License: CC-BY-4.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/microsoft/EnterpriseMCP
- Updated: 2026-10-23
- HTML: https://affpapa.org/en/nevibecode/mcp/microsoft-mcp-server-for-enterprise

## What it does

The agent describes what it needs, and the server selects Microsoft Graph calls to retrieve the matching information. Its three tools suggest relevant queries, run them, and fetch properties for Graph entities. The supported scope covers read-only identity and directory work in Microsoft Entra, including users, groups, applications, and devices.

Before connecting, an administrator provisions the server for the tenant, registers a client application, and links the required `MCP.*` permissions between client and server. Third-party agents need their own registered client and a configured redirect URI. Access stays read-only, and the user’s roles and client scopes determine which data the server can retrieve.

## Requirements
- Remote server: `https://mcp.svc.cloud.microsoft/enterprise`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http enterprisemcp https://mcp.svc.cloud.microsoft/enterprise
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add microsoft-mcp-server-for-enterprise --url https://mcp.svc.cloud.microsoft/enterprise
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "microsoft-mcp-server-for-enterprise": {
            "url": "https://mcp.svc.cloud.microsoft/enterprise"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "microsoft-mcp-server-for-enterprise": {
            "type": "http",
            "url": "https://mcp.svc.cloud.microsoft/enterprise"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http microsoft-mcp-server-for-enterprise https://mcp.svc.cloud.microsoft/enterprise
```

## When to use it
- check who holds directory roles and how each assignment was made
- find applications without owners or with external permissions
- review device management and compliance states
- identify unused licenses and inactive groups
- inspect sign-in and audit events during an investigation

## Example prompts
- Check who has administrative roles in Microsoft Entra and how each role was assigned.
- Find applications without owners and show their permissions.
- Group Microsoft Entra devices by management and compliance state.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md