Entra Identity Posture MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| ENTRA_CLIENT_ID | Yes | Application (client) ID of your app registration | |
| ENTRA_TENANT_ID | Yes | Your Microsoft Entra tenant ID | |
| ENTRA_CLIENT_SECRET | Yes | Client secret for the app registration |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| audit_app_registrationsA | Scans Entra ID app registrations for expiring secrets, excessive lifespans, risky permissions, and insecure redirect URIs. Returns structured findings (metadata + issues) alongside a human-readable summary. |
| scan_conditional_access_gapsA | Scans Entra Conditional Access policies for admin MFA exclusions and policies stuck in report-only mode. Returns structured findings alongside a human-readable summary. |
| run_posture_scanB | Runs the app registration and Conditional Access scans concurrently and returns one combined, optionally filtered PostureScanResult. Updates the shared entra://posture/latest resource cache with both scan categories. |
| generate_remediation_planA | Generates a Zero-Trust Markdown security report and dry-run CLI remediation commands from findings. |
| revoke_or_disable_app_registrationC | Generates dry-run Azure CLI or PowerShell commands to disable sign-in or revoke credentials. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| security_triage_prompt | Returns predefined Zero-Trust triage prompt template for natural-language agent orchestration. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| get_latest_posture_resource | Provides access to cached JSON results from the most recent identity posture scan. |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/henrymbuguakiarie/entra-identity-posture-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server