Schema | Entra Identity Posture MCP

Entra Identity Posture MCP

Describes the environment variables required to run the server.

Name	Required	Description
`ENTRA_CLIENT_ID`	Yes	Application (client) ID of your app registration
`ENTRA_TENANT_ID`	Yes	Your Microsoft Entra tenant ID
`ENTRA_CLIENT_SECRET`	Yes	Client secret for the app registration

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Features and capabilities supported by this server

Protocol revision2025-11-25

Capability	Details
`tools`	{ "listChanged": false }
`prompts`	{ "listChanged": false }
`resources`	{ "subscribe": false, "listChanged": false }
`experimental`	{}

Functions exposed to the LLM to take actions

Name	Description
audit_app_registrationsA	Scans Entra ID app registrations for expiring secrets, excessive lifespans, risky permissions, and insecure redirect URIs. Returns structured findings (metadata + issues) alongside a human-readable summary.
scan_conditional_access_gapsA	Scans Entra Conditional Access policies for admin MFA exclusions and policies stuck in report-only mode. Returns structured findings alongside a human-readable summary.
run_posture_scanB	Runs the app registration and Conditional Access scans concurrently and returns one combined, optionally filtered PostureScanResult. Updates the shared entra://posture/latest resource cache with both scan categories.
generate_remediation_planA	Generates a Zero-Trust Markdown security report and dry-run CLI remediation commands from findings.
revoke_or_disable_app_registrationC	Generates dry-run Azure CLI or PowerShell commands to disable sign-in or revoke credentials.

Interactive templates invoked by user choice

Name	Description
`security_triage_prompt`	Returns predefined Zero-Trust triage prompt template for natural-language agent orchestration.

Contextual data attached and managed by the client

Name	Description
`get_latest_posture_resource`	Provides access to cached JSON results from the most recent identity posture scan.

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/henrymbuguakiarie/entra-identity-posture-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server