mcp-activedirectory
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| AD_HOST | No | Domain controller hostname or IP address | |
| AD_PORT | No | LDAP port (636 for LDAPS) | 389 |
| AD_BASE_DN | No | Base DN for all searches, e.g. DC=corp,DC=example,DC=com | |
| AD_BIND_DN | No | Bind DN, e.g. CN=svc-mcp,OU=Service Accounts,DC=corp,DC=example,DC=com | |
| AD_USE_SSL | No | Use LDAPS (true/false) | false |
| AZURE_CLIENT_ID | No | App registration (client) ID | |
| AZURE_TENANT_ID | No | Azure AD tenant ID (GUID) | |
| AD_BIND_PASSWORD | No | Bind account password | |
| AZURE_CLIENT_SECRET | No | App registration client secret | |
| AD_ALLOW_SELF_SIGNED | No | Accept self-signed TLS certificates | true |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_usersB | List Active Directory or Azure AD users with optional filters. Supports filtering by name, email, or department. |
| get_userA | Get full details of a specific user. For on-prem AD use sAMAccountName; for Azure AD use UPN or object ID. |
| get_user_groupsA | List all groups a user is a member of (direct and via memberOf attribute). |
| search_usersB | Advanced user search by any field: name, email, department, job title, or phone number. |
| list_groupsC | List Active Directory or Azure AD groups with optional name filter. |
| get_groupA | Get full details of a specific group including member count. For on-prem AD use CN or sAMAccountName; for Azure AD use display name or object ID. |
| get_group_membersA | List all members of a group with user details. Supports recursive expansion of nested groups for on-prem AD. |
| search_groupsC | Search groups by name or description. |
| list_computersB | List computer accounts in Active Directory with OS, last logon, and OU information. |
| get_computerA | Get full details of a specific computer account by name. |
| search_computersA | Search computer accounts by name, operating system, or organizational unit path. |
| list_ousB | List organizational units (OUs) in Active Directory with their full path and details. |
| get_ouA | Get details of a specific organizational unit including child object counts. |
| search_ousC | Search organizational units by name or description. |
| list_devicesB | List devices registered or joined in Azure AD / Entra ID with OS and compliance status. |
| get_deviceA | Get full details of a specific Entra ID device by its object ID. |
| list_service_principalsA | List app registrations and service principals (enterprise applications) in Azure AD / Entra ID. |
| get_user_sign_in_activityA | Get last sign-in information for a user in Azure AD / Entra ID. Requires AuditLog.Read.All permission. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 18 tools
Each tool targets a distinct resource type or operation (e.g., get vs list vs search, computer vs device, group vs group members). There is no ambiguity between tools.
All tool names follow the verb_noun pattern consistently (e.g., get_computer, list_users, search_groups). No mixing of naming conventions.
18 tools cover both on-prem AD and Azure AD resources (users, groups, computers, devices, OUs, service principals) without being excessive. The scope is appropriate for a directory server.
The tool set is entirely read-only; there are no create, update, or delete operations. For an Active Directory server, this is a significant gap that prevents full lifecycle management.