MCP server intelligence profile

azure-query-mcp Server

Enables read-only querying of Azure Log Analytics and Azure Resource Graph through MCP, supporting KQL queries, workspace discovery, and resource inventory exploration with Azure RBAC authentication

Local Onlykapetanios55
Awaiting current scanSource Git · cf63e3a5167bda3f0e683bb1a0a4f8fab6bda444

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

1Distribution channel
5Independently observed tools
0Linked remote endpoints
AvailableVersion intelligence

Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

No verified installation or connection method is available in the retained evidence yet.

Identity

Canonical slugazure-query-mcp-ab840fddDeploymentLocal Only
Canonical packageRepositorykapetanios55/azure-query-mcp
First publishedLatest release
Last security verificationClassification confidence90%
PublicationDraftOfficial distributionNot verified

Distributions

ChannelIdentifierCurrent versionVersionsSource
source_gitkapetanios55/azure-query-mcpcf63e3a5167bda3f0e683bb1a0a4f8fab6bda4441Repository

Current release

PackageVersionPublished / observedInventorySecurity scan
source_gitkapetanios55/azure-query-mcpcf63e3a5167bda3f0e683bb1a0a4f8fab6bda444CurrentAug 25, 20265 toolsSucceeded · 0 resources · 0 promptsEvidence restricted
Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

  • Independent exact-version security scans
  • Continuous release and vulnerability monitoring
  • Risk-change alerts with capability context
  • Historical evidence and API exports
Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

No public current-version evidence is available yet.

Current protocol inventory

2025-06-18Negotiated protocol
azure-data-explorer-mcpServer-reported name
1Capability groups
Aug 25, 2026Observed

Tools 5

ToolCategoryAnnotationsRisk
describe_tableGet the canonical schema and retention metadata for a Log Analytics table.
Input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "workspaceResourceId": {
      "type": "string",
      "description": "Full ARM resource ID of the workspace."
    },
    "tableName": {
      "type": "string",
      "minLength": 1,
      "maxLength": 260,
      "description": "Case-sensitive table name."
    }
  },
  "required": [
    "workspaceResourceId",
    "tableName"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
Read onlyNon-destructiveIdempotentOpen world
list_workspacesList Azure Log Analytics workspaces accessible in a subscription.
Input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "subscriptionId": {
      "type": "string",
      "format": "uuid",
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
      "description": "Azure subscription ID."
    }
  },
  "required": [
    "subscriptionId"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
Read onlyNon-destructiveIdempotentOpen world
query_azure_resourcesUse for Azure resource inventory, configuration, tags, policy, health, and cross-subscription discovery through Azure Resource Graph. Do not use for telemetry, logs, events, or time-series analysis; use query_workspace for those.
Input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "subscriptionIds": {
      "minItems": 1,
      "maxItems": 100,
      "type": "array",
      "items": {
        "type": "string",
        "format": "uuid",
        "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
      },
      "description": "One or more Azure subscription IDs that bound the query scope."
    },
    "query": {
      "type": "string",
      "minLength": 1,
      "maxLength": 5000,
      "description": "Read-only Azure Resource Graph KQL beginning with an ARG table such as Resources."
    },
    "maxResults": {
      "default": 100,
      "description": "Maximum rows returned in this page.",
      "type": "integer",
      "minimum": 1,
      "maximum": 1000
    },
    "skipToken": {
      "description": "Opaque continuation token returned by the preceding identical query.",
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    }
  },
  "required": [
    "subscriptionIds",
    "query"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
Read onlyNon-destructiveIdempotentOpen world
query_workspaceUse for telemetry, logs, events, metrics, and time-series data stored in a Log Analytics workspace. Run bounded, read-only KQL against one workspace. Do not use for Azure resource inventory or configuration; use query_azure_resources for those.
Input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "workspaceId": {
      "type": "string",
      "format": "uuid",
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
      "description": "Log Analytics workspace customer ID."
    },
    "query": {
      "type": "string",
      "minLength": 1,
      "maxLength": 5000,
      "description": "Read-only KQL with a result-limiting operator."
    },
    "timespan": {
      "type": "string",
      "maxLength": 100,
      "pattern": "^P(?!$).+",
      "description": "ISO 8601 duration, such as PT1H."
    }
  },
  "required": [
    "workspaceId",
    "query",
    "timespan"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
Read onlyNon-destructiveIdempotentOpen world
search_tablesList or search tables in a Log Analytics workspace using ARM metadata.
Input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "workspaceResourceId": {
      "type": "string",
      "description": "Full ARM resource ID of the workspace."
    },
    "search": {
      "description": "Optional name or description substring.",
      "type": "string",
      "maxLength": 200
    }
  },
  "required": [
    "workspaceResourceId"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
Read onlyNon-destructiveIdempotentOpen world

Resources 0

  • None observed.

Resource templates 0

  • None observed.

Prompts 0

  • None observed.

Remote endpoints

EndpointTransportAuthenticationHealthObserved
No verified remote endpoint is linked.

azure-query-mcp Server questions

How do I install azure-query-mcp Server?

No verified package installation command is available in the retained catalog evidence.

What tools does azure-query-mcp Server provide?

azure-query-mcp Server exposed 5 tools during independent protocol observation, including describe_table, list_workspaces, query_azure_resources, query_workspace, search_tables.

Is azure-query-mcp Server secure?

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

Company and product intelligence

These internal links are derived from strong identity fields such as the implementation name, package, repository, vendor, and listing name—not generic description prose.

Associated company landscape

Microsoft & Azure intelligence →

Association is based on retained identity fields; it does not by itself prove first-party publication.

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

Official vs Community MCP Servers

Let’s talk about MCP security.

Share your details and our security team will contact you.