abac-validation-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| validate_abac_changesB | Validate ABAC code changes using Q&A analysis. Accepts Q&A format where Copilot has already analyzed git diff and answered 8 predefined ABAC questions. Validates the answers against M365ABAC requirements and performs cross-component impact analysis. |
| analyze_cross_component_impactB | Analyze cross-component impact of code changes on RMS and MIP. This is a detailed analysis tool that runs Claude CLI against RMS and MIP codebases to identify dependencies, breaking changes, and integration issues. |
| get_current_changesA | Get current uncommitted changes from the M365ABAC repository using git diff. Useful for validating work-in-progress code. |
| generate_validation_questionsB | Generate pre-defined validation questions based on code changes. Returns a list of relevant questions that should be answered for ABAC compliance and cross-component compatibility. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 4 tools
The tools are mostly distinct: validate_abac_changes covers full validation, analyze_cross_component_impact focuses specifically on cross-component work, get_current_changes retrieves diffs, and generate_validation_questions produces questions. The main overlap is between validate_abac_changes and analyze_cross_component_impact, since validation already includes cross-component impact analysis, which could cause an agent to pick the wrong one.
Tools generally follow verb_object pattern: validate_abac_changes, analyze_cross_component_impact, get_current_changes, generate_validation_questions. All use snake_case with consistent verb-first naming, though the objects vary in form (abac_changes vs cross_component_impact vs current_changes vs validation_questions) making them slightly less uniform.
Four tools is a well-scoped set for a validation workflow. Each tool represents a distinct stage: get diffs, generate questions, analyze cross-component impact, and validate. This is an appropriate size that feels lean but sufficient for the stated purpose of ABAC change validation.
The workflow covers retrieving changes, generating questions, analyzing cross-component impact, and validating against requirements. However, there's no dedicated tool for applying validation recommendations or generating a final report/summary, and the coupling between generate_validation_questions and validate_abac_changes (which accepts answers to 8 predefined questions) may leave a gap if questions change. The core loop is covered but reporting and remediation are absent.