Microsoft & Azure intelligence →
Association is based on retained identity fields; it does not by itself prove first-party publication.
Enables read-only querying of Azure Log Analytics and Azure Resource Graph through MCP, supporting KQL queries, workspace discovery, and resource inventory exploration with Azure RBAC authentication
Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.
Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.
No verified installation or connection method is available in the retained evidence yet.
| Canonical slug | azure-query-mcp-ab840fdd | Deployment | Local Only |
|---|---|---|---|
| Canonical package | — | Repository | kapetanios55/azure-query-mcp |
| First published | — | Latest release | — |
| Last security verification | — | Classification confidence | 90% |
| Publication | Draft | Official distribution | Not verified |
| Channel | Identifier | Current version | Versions | Source |
|---|---|---|---|---|
| source_git | kapetanios55/azure-query-mcp | cf63e3a5167bda3f0e683bb1a0a4f8fab6bda444 | 1 | Repository |
| Package | Version | Published / observed | Inventory | Security scan |
|---|---|---|---|---|
| source_gitkapetanios55/azure-query-mcp | cf63e3a5167bda3f0e683bb1a0a4f8fab6bda444Current | Aug 25, 2026 | 5 toolsSucceeded · 0 resources · 0 prompts | Evidence restricted |
Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.
No public current-version evidence is available yet.
| Tool | Category | Annotations | Risk |
|---|---|---|---|
describe_tableGet the canonical schema and retention metadata for a Log Analytics table.Input schema{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"workspaceResourceId": {
"type": "string",
"description": "Full ARM resource ID of the workspace."
},
"tableName": {
"type": "string",
"minLength": 1,
"maxLength": 260,
"description": "Case-sensitive table name."
}
},
"required": [
"workspaceResourceId",
"tableName"
]
}Annotations{
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": true
} | — | Read onlyNon-destructiveIdempotentOpen world | — |
list_workspacesList Azure Log Analytics workspaces accessible in a subscription.Input schema{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"subscriptionId": {
"type": "string",
"format": "uuid",
"pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
"description": "Azure subscription ID."
}
},
"required": [
"subscriptionId"
]
}Annotations{
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": true
} | — | Read onlyNon-destructiveIdempotentOpen world | — |
query_azure_resourcesUse for Azure resource inventory, configuration, tags, policy, health, and cross-subscription discovery through Azure Resource Graph. Do not use for telemetry, logs, events, or time-series analysis; use query_workspace for those.Input schema{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"subscriptionIds": {
"minItems": 1,
"maxItems": 100,
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
},
"description": "One or more Azure subscription IDs that bound the query scope."
},
"query": {
"type": "string",
"minLength": 1,
"maxLength": 5000,
"description": "Read-only Azure Resource Graph KQL beginning with an ARG table such as Resources."
},
"maxResults": {
"default": 100,
"description": "Maximum rows returned in this page.",
"type": "integer",
"minimum": 1,
"maximum": 1000
},
"skipToken": {
"description": "Opaque continuation token returned by the preceding identical query.",
"type": "string",
"minLength": 1,
"maxLength": 4096
}
},
"required": [
"subscriptionIds",
"query"
]
}Annotations{
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": true
} | — | Read onlyNon-destructiveIdempotentOpen world | — |
query_workspaceUse for telemetry, logs, events, metrics, and time-series data stored in a Log Analytics workspace. Run bounded, read-only KQL against one workspace. Do not use for Azure resource inventory or configuration; use query_azure_resources for those.Input schema{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"workspaceId": {
"type": "string",
"format": "uuid",
"pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
"description": "Log Analytics workspace customer ID."
},
"query": {
"type": "string",
"minLength": 1,
"maxLength": 5000,
"description": "Read-only KQL with a result-limiting operator."
},
"timespan": {
"type": "string",
"maxLength": 100,
"pattern": "^P(?!$).+",
"description": "ISO 8601 duration, such as PT1H."
}
},
"required": [
"workspaceId",
"query",
"timespan"
]
}Annotations{
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": true
} | — | Read onlyNon-destructiveIdempotentOpen world | — |
search_tablesList or search tables in a Log Analytics workspace using ARM metadata.Input schema{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"workspaceResourceId": {
"type": "string",
"description": "Full ARM resource ID of the workspace."
},
"search": {
"description": "Optional name or description substring.",
"type": "string",
"maxLength": 200
}
},
"required": [
"workspaceResourceId"
]
}Annotations{
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": true
} | — | Read onlyNon-destructiveIdempotentOpen world | — |
| Endpoint | Transport | Authentication | Health | Observed |
|---|---|---|---|---|
| No verified remote endpoint is linked. | ||||
No verified package installation command is available in the retained catalog evidence.
azure-query-mcp Server exposed 5 tools during independent protocol observation, including describe_table, list_workspaces, query_azure_resources, query_workspace, search_tables.
The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.
These internal links are derived from strong identity fields such as the implementation name, package, repository, vendor, and listing name—not generic description prose.
Association is based on retained identity fields; it does not by itself prove first-party publication.
Curated product and capability guides containing this catalog record.