entraid-mcp-server
entraid-mcp-server is an MCP server. It needs CLIENT_SECRET to authenticate. Its repository has 41 GitHub stars; we last read it on 2026-10-22.
Serves as an interface for interacting with EntraID via the Microsoft Graph API.
Install
MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. entraid-mcp-server’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.
What it reaches, and what it needs
Reaches
○ not recognised
Credential
CLIENT_SECRET
Maintenance
Stars
41
State
stale
Licence
—
From the repository
MCP server for interacting with EntraID through Microsoft Graph API.
What entraid-mcp-server can do
39 tools documented in its README. An AI client calls these by name.
search_users- Search users by name/email
get_user_by_id- Get user details by ID
get_privileged_users- List all users in privileged directory roles
get_user_roles- Get all directory roles assigned to a user
get_user_groups- Get all groups (including transitive memberships) for a user
get_all_groups- Get all groups (with paging)
get_group_by_id- Get a specific group by its ID
search_groups_by_name- Search for groups by display name
get_group_members- Get members of a group by group ID
create_group- Create a new group
update_group- Update an existing group (fields: displayName, mailNickname, description, visibility)
delete_group- Delete a group by its ID
add_group_member- Add a member (user, group, device, etc.) to a group
remove_group_member- Remove a member from a group
add_group_owner- Add an owner to a group
remove_group_owner- Remove an owner from a group
get_user_sign_ins- Get sign-in logs for a user
get_user_mfa_status- Get MFA status for a user
get_group_mfa_status- Get MFA status for all group members
get_all_managed_devices- Get all managed devices (optionally filter by OS)
get_managed_devices_by_user- Get all managed devices for a specific user
get_conditional_access_policies- Get all conditional access policies
get_conditional_access_policy_by_id- Get a single conditional access policy by its ID
get_user_audit_logs- Get all relevant directory audit logs for a user by user_id within the last N days
reset_user_password_direct- Reset a user's password with a specific password value or generate a secure random password
suggest_permissions_for_task- Suggest Microsoft Graph permissions for a specific task based on common mappings
list_permission_categories_and_tasks- List all available categories and tasks for permission suggestions
get_all_graph_permissions- Get all Microsoft Graph permissions directly from the Microsoft Graph API
search_permissions- Search for Microsoft Graph permissions by keyword
list_applications- List all applications (app registrations) in the tenant, with paging
get_application_by_id- Get a specific application by its object ID (includes app role assignments and delegated permissions)
create_application- Create a new application (see below for app_data fields)
update_application- Update an existing application (fields: displayName, signInAudience, tags, identifierUris, web, api, requiredResourceAccess)
delete_application- Delete an application by its object ID
list_service_principals- List all service principals in the tenant, with paging
get_service_principal_by_id- Get a specific service principal by its object ID (includes app role assignments and delegated permissions)
create_service_principal- Create a new service principal (see below for sp_data fields)
update_service_principal- Update an existing service principal (fields: displayName, accountEnabled, tags, appRoleAssignmentRequired)
delete_service_principal- Delete a service principal by its object ID
Read from the README; names are kept only if the README contains them.
Common questions about entraid-mcp-server
- What does entraid-mcp-server do?
- Serves as an interface for interacting with EntraID via the Microsoft Graph API.
- How do I install entraid-mcp-server?
- Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/hieuttmmo/entraid-mcp-server
- What does entraid-mcp-server connect to, and what does it need?
- The credentials we found in its source are CLIENT_SECRET.
- Is entraid-mcp-server official and is it maintained?
- We found nothing naming it as a vendor’s official server. Its repository has 41 GitHub stars and its state in our directory is stale. Its last commit we recorded was on 2025-05-02.
- What licence does entraid-mcp-server use?
- The repository metadata we read does not state a licence, so check the repository before you rely on it.