query-resourcesLABSCO SUMMARY
One query tool, and it is the one that answers inventory questions.
Resource Graph is how you ask "what do we actually have running" across subscriptions, and this exposes it directly rather than wrapping a dozen narrow resource APIs. Because it leans on DefaultAzureCredential, the agent inherits your permissions exactly — no separate service principal to create unless you want one.
What it is
An MCP server that runs Azure Resource Graph queries against your subscriptions and returns the results to the model. It authenticates through DefaultAzureCredential, so it reuses whatever Azure identity your machine already has.
What you get
query-resources— run a Resource Graph query and get resources back; the default query returns resource ID, name, type and location- Custom queries are passed through, so anything Resource Graph accepts works
- A subscription can be pinned in configuration or overridden per call
Requirements
Node.js and an Azure subscription. Clone the repo, npm install, npm run build, then point Cursor or VS Code at the built build/index.js with SUBSCRIPTION_ID in the env block. Sign in with az login for local use; DefaultAzureCredential also accepts managed identity, VS Code credentials, or AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID, AZURE_CLIENT_ID and AZURE_CLIENT_SECRET as environment variables. Package version 1.0.0.
Setup effort
Build from source — git clone https://github.com/hardik-id/azure-resource-graph-mcp-server
USE CASES
01
Taking stock of what is deployed
Ask for every resource in the subscription with its type and region, and let the model group the answer.
02
Answering a targeted infrastructure question
Pass a custom Resource Graph query — resources in one region, of one type, or missing a tag — and read the rows back in the chat.
1 tool
Listed in project docs. Your client may show a different list.
BEFORE YOU INSTALL
What to know first
Tools you get
1 tool named in the project's documentation.
Requires
- Node.js
- An Azure subscription
- Azure CLI (az) signed in, or other Azure credentials
Where it runs
The documented client runs the server on your machine.
INSTALLATION
Connect your client
You clone and build this one yourself.
Server setup
TERMINAL
git clone https://github.com/hardik-id/azure-resource-graph-mcp-server
cd azure-resource-graph-mcp-server
npm install
npm run build
az loginMCP Clients
Any MCP client
ANY MCP CLIENT · JSON
{
"mcpServers": {
"azure-resource-graph-mcp-server": {
"command": "node",
"args": [
"C:\\<YOUR_WORKSPACE>\\azure-resource-graph-mcp-server\\build\\index.js"
],
"env": {
"SUBSCRIPTION_ID": "<YOUR_SUBSCRIPTION_ID>"
}
}
}
}
