A first-party Microsoft server that wraps Graph API calls behind natural language queries, specifically targeting Microsoft Entra data for IT admins and developers. Instead of exposing dozens of individual tools, it uses RAG to translate intent into complete Graph queries through three core operations: suggest queries, execute reads, and list entity properties. Currently read-only and scoped to enterprise identity scenarios like privileged access auditing, application risk assessment, device compliance checks, and license optimization. Requires one-time tenant provisioning via Graph Explorer and registering your own OAuth client app with MCP scopes. Works with Claude, ChatGPT, Copilot Studio, VS Code, and other MCP clients that support streamable HTTP transport.
claude mcp add --transport stdio microsoft-enterprisemcp uvx enterprisemcp