LinkedIn MCP Server (Azure Functions)

A remote Model Context Protocol server for LinkedIn, hosted on Azure Functions using the official Azure Functions MCP extension. It exposes personal LinkedIn tools to MCP clients such as GitHub Copilot (VS Code) and Claude Desktop.

Tools

Related MCP server: LinkedIn MCP HTTP Server

Architecture

flowchart LR
    subgraph Client
        C[Copilot / MCP client]
    end
    subgraph "Azure Functions (Flex Consumption)"
        M[mcpTool triggers<br/>get_my_profile · create_post · get_auth_status]
        L[GET /auth/login]
        CB[GET /auth/callback]
        TS[(Table Storage<br/>tokens)]
    end
    C -- "streamable HTTP /runtime/webhooks/mcp" --> M
    L -- 302 --> LI[LinkedIn OAuth]
    LI -- code --> CB
    CB --> TS
    M --> TS
    M --> API[api.linkedin.com]

Why TypeScript? The MCP extension supports several stacks, but TypeScript (app.mcpTool, @azure/functions ≥ 4.9.0 + extension bundle [4.0.0, 5.0.0)) is first-class, requires no worker-specific package, and matches the Node.js ecosystem this project is inspired by. C# isolated (Microsoft.Azure.Functions.Worker.Extensions.Mcp) would be the alternative for .NET teams.

OAuth: LinkedIn's member APIs (userinfo, ugcPosts) do not support client_credentials. A one-time 3-legged authorization-code flow is required: open /auth/login, consent in the browser, and the server stores the access token (60 days) + refresh token (1 year) in Azure Table Storage. The access token is refreshed automatically whenever it has less than 7 days left.

1. Create the LinkedIn app

1. Go to the LinkedIn Developer Portal → Create app.

2. In the app Products tab, request/enable:

   • Sign In with LinkedIn using OpenID Connect (scopes openid, profile)

   • Share on LinkedIn (scope w_member_social)

3. In the Auth tab, add the redirect URL:

   • Local: http://localhost:7071/auth/callback

   • Azure (after deploy): https://<your-function-app>.azurewebsites.net/auth/callback

4. Note the Client ID and Client Secret.

2. Run locally

Prerequisites: Node.js 20+, Azure Functions Core Tools v4.0.7030+, and Azurite (for Table Storage).

npm install
cp local.settings.json.template local.settings.json   # fill in LINKEDIN_CLIENT_ID / LINKEDIN_CLIENT_SECRET
azurite --silent &                                     # or use a real storage account connection string
npm run build
func start

Then open http://localhost:7071/auth/login in a browser and complete the LinkedIn consent once.

Connect a client locally

.vscode/mcp.json (or your client's equivalent):

{
  "servers": {
    "linkedin-local": {
      "type": "http",
      "url": "http://localhost:7071/runtime/webhooks/mcp"
    }
  }
}

3. Deploy to Azure

Prerequisites: Azure Developer CLI (azd).

azd init            # or run inside this folder directly
azd env set LINKEDIN_CLIENT_ID <your-client-id>       # optional — see below
azd env set LINKEDIN_CLIENT_SECRET <your-client-secret> # optional — see below
azd up

The Bicep parameters linkedInClientId / linkedInClientSecret are optional (default ''). If you skip the azd env set commands, deploy first and then set LINKEDIN_CLIENT_ID and LINKEDIN_CLIENT_SECRET manually in the Azure Portal (Function App → Settings → Environment variables). The /auth/login and /auth/callback endpoints return an explicit 500 error listing any missing app settings until they are configured.

This provisions (Bicep, infra/): a resource group, a Storage account (tokens table + host storage), Log Analytics + Application Insights, and a Flex Consumption (FC1) Function App running Node.js 22 — no VNet, no private endpoints, no Entra app.

After deployment:

1. Add https://<your-function-app>.azurewebsites.net/auth/callback as a redirect URL in the LinkedIn app (Auth tab).

2. Open https://<your-function-app>.azurewebsites.net/auth/login and complete the OAuth flow.

3. Retrieve the MCP system key:

   az functionapp keys list --resource-group rg-<env-name> --name <function-app-name> --query systemKeys.mcp_extension --output tsv

4. Configure your MCP client:

   {
     "inputs": [
       { "type": "promptString", "id": "mcp-key", "description": "MCP extension system key", "password": true }
     ],
     "servers": {
       "linkedin": {
         "type": "http",
         "url": "https://<your-function-app>.azurewebsites.net/runtime/webhooks/mcp",
         "headers": { "x-functions-key": "${input:mcp-key}" }
       }
     }
   }

Configuration

Project structure

├── host.json                  # MCP extension config (serverName, instructions) + extension bundle
├── package.json / tsconfig.json
├── azure.yaml                 # azd service definition
├── local.settings.json.template
├── src/
│   ├── index.ts
│   ├── functions/
│   │   ├── mcpTools.ts        # app.mcpTool: get_my_profile, create_post, get_auth_status
│   │   └── auth.ts            # GET /auth/login, GET /auth/callback (OAuth 3-legged)
│   └── lib/
│       ├── tokenStore.ts      # Azure Table Storage tokens + automatic refresh (< 7 days)
│       └── linkedinClient.ts  # /v2/userinfo, /v2/ugcPosts
└── infra/
    ├── main.bicep             # Flex Consumption + Storage + App Insights
    └── main.parameters.json

Credits & license

Inspired by Dishant27/linkedin-mcp-server (LinkedIn API usage patterns). This implementation is written from scratch around the Azure Functions MCP extension and 3-legged OAuth. Licensed under MIT.