Azure MCP Cloud
Explore subscriptions, resource groups, VMs and AKS clusters, query Azure Monitor metrics and Log Analytics with KQL.
Quick start
- Add a Azure connection with the settings below, then click Test configuration.
- Create an API key for your agent.
- Paste the key below, click Test endpoint, and copy the configuration for your platform.
| Endpoint | https://market.oshaani.com/azure (your default connection) or https://market.oshaani.com/azure/<connection-id> |
|---|---|
| Transport | Streamable HTTP (stateless, JSON responses). MCP protocol versions 2024-11-05 to 2025-11-25 and 2026-07-28. |
| Authentication | Authorization: Bearer <API key>, using a key from the API keys page. |
Agent configuration
initialize and tools/list against the endpoint, exactly like an agent. No credits are charged.
Any MCP client that supports remote (Streamable HTTP) servers with custom headers.
{
"name": "azure",
"transport": "streamable-http",
"url": "https://market.oshaani.com/azure",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
~/.cursor/mcp.json (all projects) or .cursor/mcp.json in a project.
{
"mcpServers": {
"azure": {
"url": "https://market.oshaani.com/azure",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}
Settings > Developer > Edit Config (claude_desktop_config.json). Uses the mcp-remote bridge; needs Node.js.
{
"mcpServers": {
"azure": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://market.oshaani.com/azure",
"--header",
"Authorization:${AUTH_HEADER}"
],
"env": {
"AUTH_HEADER": "Bearer YOUR_API_KEY"
}
}
}
}
Run in your terminal, or put the JSON in .mcp.json at the project root.
claude mcp add --transport http azure https://market.oshaani.com/azure \
--header "Authorization: Bearer YOUR_API_KEY"
# .mcp.json
{
"mcpServers": {
"azure": {
"type": "http",
"url": "https://market.oshaani.com/azure",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}
.vscode/mcp.json (GitHub Copilot agent mode). VS Code prompts for the key once and stores it securely.
{
"inputs": [
{
"type": "promptString",
"id": "oshaani-mcp-key",
"description": "oshaani MCP Marketplace API key",
"password": true
}
],
"servers": {
"azure": {
"type": "http",
"url": "https://market.oshaani.com/azure",
"headers": {
"Authorization": "Bearer ${input:oshaani-mcp-key}"
}
}
}
}
~/.codeium/windsurf/mcp_config.json
{
"mcpServers": {
"azure": {
"serverUrl": "https://market.oshaani.com/azure",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}
Responses API remote MCP tool (Python SDK).
from openai import OpenAI
client = OpenAI()
response = client.responses.create(
model="gpt-4.1",
tools=[{
"type": "mcp",
"server_label": "azure",
"server_url": "https://market.oshaani.com/azure",
"headers": {"Authorization": "Bearer YOUR_API_KEY"},
"require_approval": "never", # or "always" to approve each tool call
}],
input="What can you do with these tools?",
)
print(response.output_text)
Messages API MCP connector (Python SDK).
import anthropic
client = anthropic.Anthropic()
response = client.beta.messages.create(
model="claude-sonnet-4-5",
max_tokens=1024,
messages=[{"role": "user", "content": "What can you do with these tools?"}],
mcp_servers=[{
"type": "url",
"url": "https://market.oshaani.com/azure",
"name": "azure",
"authorization_token": "YOUR_API_KEY",
}],
betas=["mcp-client-2025-04-04"],
)
print(response.content)
Official MCP Python SDK 2.x (pip install mcp); works inside any agent framework.
import asyncio
from mcp import ClientSession
from mcp.client.streamable_http import create_mcp_http_client, streamable_http_client
async def main():
headers = {"Authorization": "Bearer YOUR_API_KEY"}
async with create_mcp_http_client(headers=headers) as http:
async with streamable_http_client("https://market.oshaani.com/azure", http_client=http) as (read, write, *_):
async with ClientSession(read, write) as session:
await session.initialize()
tools = await session.list_tools()
print([tool.name for tool in tools.tools])
asyncio.run(main())
Quick check from a terminal: lists the tools without charging credits.
curl -s https://market.oshaani.com/azure \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "MCP-Protocol-Version: 2025-06-18" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
Connection settings
Entered once per connection on market.oshaani.com. Secrets are encrypted and never shown again or sent to agents.
| Setting | Type | Description |
|---|---|---|
Directory (tenant) IDtenant_id
required |
string | pattern ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ |
Application (client) IDclient_id
required |
string | pattern ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ |
Client secretclient_secret
required secret |
string | App registration > Certificates & secrets |
Default subscription IDsubscription_id
required |
string | Grant the app the Reader role on it pattern ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ |
Log Analytics workspace IDlog_analytics_workspace_id
|
string | Optional, for query_logs (needs Log Analytics Reader) pattern ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ |
Tools (7)
list_subscriptions
read-only
List subscriptions the service principal can access
No arguments.
list_resource_groups
read-only
List resource groups in a subscription
| Argument | Type | Description |
|---|---|---|
subscription_id |
string | Subscription ID; defaults to the connection's subscription pattern ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ |
list_resources
read-only
List resources, optionally within a resource group or of one type
| Argument | Type | Description |
|---|---|---|
resource_group |
string | Resource group name pattern ^[-\w._()]{1,90}$ |
resource_type |
string | e.g. Microsoft.Web/sites pattern ^[\w.]+/[\w./]+$ |
limit |
integer default 200 |
min 1, max 1000 |
subscription_id |
string | Subscription ID; defaults to the connection's subscription pattern ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ |
list_virtual_machines
read-only
List virtual machines with size, OS and power state
| Argument | Type | Description |
|---|---|---|
resource_group |
string | Resource group name pattern ^[-\w._()]{1,90}$ |
subscription_id |
string | Subscription ID; defaults to the connection's subscription pattern ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ |
list_aks_clusters
read-only
List AKS (Kubernetes) clusters with version, node pools and state
| Argument | Type | Description |
|---|---|---|
subscription_id |
string | Subscription ID; defaults to the connection's subscription pattern ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ |
get_metrics
read-only
Get Azure Monitor metrics for a resource (e.g. CPU, requests, latency)
| Argument | Type | Description |
|---|---|---|
resource_id required |
string | Full resource ID from list_resources pattern ^/subscriptions/[^?#]+$ |
metric_names required |
array of string | e.g. ['Percentage CPU'] |
timespan |
string default "PT1H" |
ISO 8601 duration, e.g. PT1H, PT30M, P1D pattern ^P(?:\d+D)?(?:T(?:\d+H)?(?:\d+M)?(?:\d+S)?)?$ |
interval |
string default "PT5M" |
ISO 8601 duration, e.g. PT1H, PT30M, P1D pattern ^P(?:\d+D)?(?:T(?:\d+H)?(?:\d+M)?(?:\d+S)?)?$ |
aggregation |
string default "Average" |
pattern ^(Average|Maximum|Minimum|Total|Count)(,(Average|Maximum|Minimum|Total|Count))*$ |
query_logs
read-only
Run a KQL query against the connection's Log Analytics workspace
| Argument | Type | Description |
|---|---|---|
query required |
string | KQL, e.g. 'AzureActivity | summarize count() by OperationNameValue | top 10 by count_' min length 1 |
timespan |
string default "PT1H" |
ISO 8601 duration, e.g. PT1H, PT30M, P1D pattern ^P(?:\d+D)?(?:T(?:\d+H)?(?:\d+M)?(?:\d+S)?)?$ |
max_rows |
integer default 500 |
min 1, max 5000 |
Billing & errors
Each successful tool call costs 2 oshaani.com credits. initialize, tools/list, failed calls and timeouts are free.
| JSON-RPC code | Meaning |
|---|---|
-32054 (HTTP 401) | Missing, unknown or revoked API key |
-32053 (HTTP 404) | No Azure connection configured for your organisation, or the connection ID is wrong |
-32055 (HTTP 403) | Connection disabled or origin not allowed |
-32052 (HTTP 429) | Rate limit reached; retry after a minute |
-32050 | Not enough oshaani.com credits for the call |
-32051 | Billing temporarily unavailable; the call was not run |
Errors from Azure itself (bad IDs, permissions) come back as tool results with isError: true so the agent can read and correct them.
See the Azure API documentation.