Entra Planner MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| ENV | No | Runtime environment: production or development. | production |
| LOG_LEVEL | No | Log level. DEBUG is refused in production. Tokens and task content are never logged. | WARNING |
| ALLOWED_TOOLS | No | Comma-separated list of tools to expose; default is the four read-only tools. | |
| OBO_CREDENTIAL | No | On-Behalf-Of credential mode: managed_identity or local_dev_secret. local_dev_secret is refused when ENV=production. | managed_identity |
| ALLOWED_ORIGINS | No | Accepted browser Origin values as a comma-separated list; default is https://claude.ai,https://claude.com. Requests without Origin are accepted. | |
| ENTRA_TENANT_ID | Yes | Tenant GUID. Tokens from any other tenant are rejected. | |
| PUBLIC_BASE_URL | Yes | Canonical public URL of the MCP endpoint, e.g. https://<app>.<env>.<region>.azurecontainerapps.io/mcp (no trailing slash). | |
| ENABLE_USER_LOOKUP | No | Set to true to allow assignees by email; requires Graph User.ReadBasic.All. Default allows IDs only. | |
| RATE_LIMIT_PER_MIN | No | Per-user tool calls per minute. | 60 |
| ENTRA_API_CLIENT_ID | Yes | API app registration (client) ID; the expected token audience. | |
| ENTRA_REQUIRED_SCOPE | No | Delegated scope name. | Planner.Use |
| ENTRA_ALLOWED_AUDIENCES | No | Extra accepted audiences as a comma-separated list; default is the API client ID only. | |
| LOCAL_DEV_CLIENT_SECRET | No | Only used with OBO_CREDENTIAL=local_dev_secret. | |
| ENTRA_ALLOWED_CLIENT_IDS | No | If set, only tokens issued to these client apps (azp) are accepted, as a comma-separated list. Recommended. | |
| MANAGED_IDENTITY_CLIENT_ID | No | Client ID of a user-assigned managed identity; omit for system-assigned identity. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues