Azure API Management Gateway With Entra ID Authentication

🚀 Using Azure API Management for Remote MCP Server (Experimental)

Azure API Management serves as an AI Gateway for the MCP server.

This example implements the latest MCP Authorization Specification.

Here is a Sequence Diagram to help understand the process.

🚀 Quick Start

📦 Deploying the Remote MCP Server to Azure

1. Register the Microsoft.App resource provider:
   • If you are using the Azure CLI, run the command az provider register --namespace Microsoft.App --wait.
   • If you are using Azure PowerShell, run the command Register-AzResourceProvider -ProviderNamespace Microsoft.App. Then run (Get-AzResourceProvider -ProviderNamespace Microsoft.App).RegistrationState to check if the registration is complete.
2. Run the following azd command to configure the API management service, function app (including code), and all other required Azure resources:

   azd up
   

💻 Usage Examples

Basic Usage of the MCP Check Tool

1. In a new terminal window, install and run the MCP check tool:

   npx @modelcontextprotocol/inspector
   

2. Press the CTRL key and click on the URL from the command-line output to load the MCP check tool (e.g., http://127.0.0.1:6274/#resources).
3. Set the transport type to SSE.
4. Set the URL to the API management SSE endpoint you are running and connect:

   https://<apim-servicename-from-azd-output>.azure-api.net/mcp/sse
   

5. List the tools. Click on a tool and run the tool.