BOD-25-01-CSA-Microsoft-Policy-MCP

Instructions

Implementation Reference

• cisa-m365/src/index.ts:589-612 (handler)

  The main execution logic for the 'complete_auth_methods_migration' tool. It updates the authentication methods policy via Microsoft Graph API to mark the migration as 'completed'.

  private async completeAuthMethodsMigration() {
    try {
      // Set migration status using Microsoft Graph API
      await this.graphClient
        .api('/policies/authenticationMethodsPolicy')
        .patch({
          migrationState: 'completed',
        });
  
      return {
        content: [
          {
            type: 'text',
            text: 'Authentication Methods migration marked as complete successfully',
          },
        ],
      };
    } catch (error: unknown) {
      throw new McpError(
        ErrorCode.InternalError,
        `Failed to complete auth methods migration: ${error instanceof Error ? error.message : 'Unknown error'}`
      );
    }
  }

• cisa-m365/src/index.ts:168-175 (registration)

  Tool registration in the listTools response, including name, description, and input schema (no parameters required).

  {
    name: 'complete_auth_methods_migration',
    description: 'Set Authentication Methods Manage Migration to Complete (MS.AAD.3.4v1)',
    inputSchema: {
      type: 'object',
      properties: {},
    },
  },

• cisa-m365/src/index.ts:335-336 (registration)

  Dispatch case in the CallToolRequest handler that routes execution to the completeAuthMethodsMigration method.

  case 'complete_auth_methods_migration':
    return await this.completeAuthMethodsMigration();

• cisa-m365/src/index.ts:171-174 (schema)

  Input schema definition for the tool (empty object, no input parameters).

  inputSchema: {
    type: 'object',
    properties: {},
  },