hieutran/entraid-mcp-server

EntraID MCP Server (Microsoft Graph FastMCP)

This project provides a modular, resource-oriented FastMCP server for interacting with Microsoft Graph API. It is designed for extensibility, maintainability, and security, supporting advanced queries for users, sign-in logs, MFA status, and privileged users.

• Modular Resource Structure:
• Each resource (users, sign-in logs, MFA, etc.) is implemented in its own module under src/msgraph_mcp_server/resources/.
• Easy to extend with new resources (e.g., groups, devices).
• Centralized Graph Client:
• Handles authentication and client initialization.
• Shared by all resource modules.
• Comprehensive User Operations:
• Search users by name/email.
• Get user by ID.
• List all privileged users (directory role members).
• Full Group Lifecycle & Membership Management:
• Create, read, update, and delete groups.
• Add/remove group members and owners.
• Search and list groups and group members.
• Application & Service Principal Management:
• List, create, update, and delete applications (app registrations).
• List, create, update, and delete service principals.
• View app role assignments and delegated permissions for both applications and service principals.
• Sign-in Log Operations:
• Query sign-in logs for a user for the last X days.
• MFA Operations:
• Get MFA status for a user.
• Get MFA status for all members of a group.
• Password Management:
• Reset user passwords d

Works with Claude (desktop and mobile), Cursor, Windsurf, VS Code, and any MCP-compatible AI app.

Category: Developer Tools