%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%23061b40;%20}%20.st1%20{%20fill:%20%23306af1;%20}%20.st2%20{%20fill:%20%235ce5cf;%20}%20%3c/style%3e%3c/defs%3e%3cg%3e%3cpath%20class='st0'%20d='M55,10.5h9v3h-9v9h12V7.5h-12v3ZM64,19.5h-6v-3h6v3Z'/%3e%3cpolygon%20class='st0'%20points='69%2016.5%2078%2016.5%2078%2019.5%2069%2019.5%2069%2022.5%2081%2022.5%2081%2013.5%2072%2013.5%2072%2010.5%2081%2010.5%2081%207.5%2069%207.5%2069%2016.5'/%3e%3cpolygon%20class='st0'%20points='95%2010.5%2095%207.5%2083%207.5%2083%2022.5%2095%2022.5%2095%2019.5%2086%2019.5%2086%2016.5%2095%2016.5%2095%2013.5%2086%2013.5%2086%2010.5%2095%2010.5'/%3e%3cpath%20class='st0'%20d='M40,1.5v21h11.6l1.4-1.4v-7.6h0c0,0-1.4-1.5-1.4-1.5l1.4-1.4V2.9l-1.4-1.4h-11.6ZM50,19.5h-7v-6h7v6ZM50,10.5h-7v-6h7v6Z'/%3e%3c/g%3e%3cpath%20class='st1'%20d='M23.1,24L14.7,4.8l-4.9,11.2h3.8l-1.8,4H3.3L12.1,0H2C.9,0,0,.9,0,2v20c0,1.1.9,2,2,2h21.1Z'/%3e%3cpath%20class='st2'%20d='M34,0h-16.8l10.6,24h6.2c1.1,0,2-.9,2-2V2C36,.9,35.1,0,34,0ZM32.5,20h-4V4h4v16Z'/%3e%3c/svg%3e)
Remote Auth MCP Apim Py
This project demonstrates how to deploy an MCP server protected by Entra ID on Azure, obtain Microsoft Graph tokens in a passwordless manner through the on-behalf-of flow, and implement it using API management and Azure functions.
rating : 2 points
downloads : 5.6K
What is an Authenticated MCP Server?
This is a secure MCP server solution deployed on Azure, protected by Entra ID for authentication. It implements a keyless authorization mode where the client first obtains the MCP server token and then exchanges it for a Microsoft Graph access token through the on-behalf-of flow.How to use this MCP service?
Users connect to the server endpoint through the Model Context Protocol Inspector tool. After completing Entra ID authentication, they can perform preset tool operations, such as querying Graph user information.Applicable scenarios
Suitable for enterprise application scenarios that require secure access to Microsoft Graph, especially SaaS application integrations that require keyless management and fine-grained permission control.Main features
Entra ID integrated authentication
Protect MCP endpoint access through enterprise-level authentication
On-Behalf-Of flow
Securely implement the conversion from the server token to the Graph access token
Keyless architecture
A secure design that does not handle sensitive credentials throughout the process
Graph tool integration
Preset standardized MCP tools for obtaining user details
Advantages
Enterprise-level security authentication guarantee
Automated infrastructure deployment (through Bicep)
A complete keyless implementation solution
Support for mainstream OAuth 2.0 authorization flows
Limitations
Currently, only the Model Context Protocol Inspector supports the complete authorization flow
Requires a specific version of the Inspector tool (0.9.0)
Deployment will incur Azure usage fees
How to use
Prepare the development environment
Install the Azure Developer CLI and the Node.js runtime environment
%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%230080ff;%20}%20%3c/style%3e%3c/defs%3e%3cpath%20class='st0'%20d='M16.2,11.1c.4.5.4,1.2,0,1.8l-4.7,7.1h-3.8l5.3-8L7.6,4h3.8l4.7,7.1Z'/%3e%3c/svg%3e)
Deploy the infrastructure
Execute the azd up command to automatically deploy all Azure resources
Get the service endpoint
Copy the MCP endpoint URL provided by API Management from the deployment output
Connect to the MCP service
Use the MCP Inspector tool to connect to the endpoint and complete authentication
Usage examples
Get Graph user information
Query the basic profile of the currently logged-in user after authentication
Frequently Asked Questions
Why must a specific version of the MCP Inspector be used?
What Azure resources will be generated during deployment?
How to avoid unexpected costs?
Related resources
Azure Developer CLI documentation
Official installation and usage guide
MCP Inspector tool
A client tool for testing MCP services
On-Behalf-Of flow description
Microsoft's official authorization flow documentation
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
14.8K
4.5 points
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
24.8K
5 points
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
15.6K
4.3 points
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
43.6K
4.3 points
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
20.3K
5 points
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
45.7K
4.5 points
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
15.0K
4.5 points
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
29.4K
4.8 points