entraid-mcp-server by hieuttmmo for Entra ID: score
D 35 Provisional Not reviewed Not tested
entraid-mcp-server by hieuttmmo is a community MCP server for Entra ID with 26 read, 8 write and 6 destructive tools. It does not have a read-only mode and its access requirements are unknown; its provisional OpsMCP grade is D (35%), last checked 16 Oct 2026.
MCP server for interacting with EntraID through Microsoft Graph API.
Tool capability partly scored. Access not scored. 2 of 4 factors scored.
Can it change or delete things?
Yes. The extracted tools include at least one destructive tool, so it can change or delete things.
| Tool | Class |
|---|---|
add_group_member Add a member to a group.
from the name (add) | Write |
add_group_owner Add an owner to a group.
from the name (add) | Write |
create_application Create a new application (app registration).
from the name (create) | Write |
create_group Create a new group in Microsoft Graph.
from the name (create) | Write |
create_service_principal Create a new service principal.
from the name (create) | Write |
delete_application Delete an application (app registration) by its object ID.
from the name (delete) | Destructive |
delete_group Delete a group from Microsoft Graph.
from the name (delete) | Destructive |
delete_service_principal Delete a service principal by its object ID.
from the name (delete) | Destructive |
get_all_graph_permissions Get all Microsoft Graph permissions directly from the Microsoft Graph API.
from the name (get) | Read |
get_all_groups Get all groups (up to the specified limit, with paging).
from the name (get) | Read |
get_all_managed_devices Get all managed devices (optionally filter by OS).
from the name (get) | Read |
get_application_by_id Get a specific application by its object ID.
from the name (get) | Read |
get_conditional_access_policies Get all conditional access policies.
from the name (get) | Read |
get_conditional_access_policy_by_id Get a single conditional access policy by its ID with comprehensive details.
from the name (get) | Read |
get_group_by_id Get a specific group by its ID.
from the name (get) | Read |
get_group_members Get members of a group by group ID (up to the specified limit, with paging).
from the name (get) | Read |
get_group_mfa_status Get MFA status for all members of a group.
from the name (get) | Read |
get_managed_devices_by_user Get all managed devices for a specific userId.
from the name (get) | Read |
get_privileged_users Get all users who are members of privileged directory roles.
from the name (get) | Read |
get_service_principal_by_id Get a specific service principal by its object ID.
from the name (get) | Read |
get_user_audit_logs Get all relevant directory audit logs for a user by user_id within the last N days (default 30).
from the name (get) | Read |
get_user_by_id Get a specific user by their ID.
from the name (get) | Read |
get_user_groups Get all groups (including transitive memberships) for a user by user ID.
from the name (get) | Read |
get_user_mfa_status Get MFA status and methods for a specific user.
from the name (get) | Read |
get_user_password_method Get a specific password authentication method for a user.
from the name (get) | Read |
get_user_roles Get all directory roles assigned to a user by user ID.
from the name (get) | Read |
get_user_sign_ins Get sign-in logs for a specific user within the last N days.
from the name (get) | Read |
list_applications List all applications (app registrations) in the tenant, with paging.
from the name (list) | Read |
list_permission_categories_and_tasks List all available categories and tasks for permission suggestions.
from the name (list) | Read |
list_service_principals List all service principals in the tenant, with paging.
from the name (list) | Read |
list_user_password_methods List a user's password authentication methods.
from the name (list) | Read |
remove_group_member Remove a member from a group.
from the name (remove) | Destructive |
remove_group_owner Remove an owner from a group.
from the name (remove) | Destructive |
reset_user_password_direct Reset a user's password with a specific password value.
from the name (reset) | Destructive |
search_groups_by_name Search for groups by display name (case-insensitive, partial match, with paging).
from the name (search) | Read |
search_permissions Search for Microsoft Graph permissions by keyword.
from the name (search) | Read |
search_users Search for users by name or email.
from the name (search) | Read |
suggest_permissions_for_task Suggest Microsoft Graph permissions for a specific task based on common mappings.
from the name | Unknown |
update_application Update an existing application (app registration).
from the name (update) | Write |
update_group Update an existing group in Microsoft Graph.
from the name (update) | Write |
update_service_principal Update an existing service principal.
from the name (update) | Write |
Score
35 of 100 points (35%). A factor that was not scored counts as 0 of its full weight.
| Factor | Points | Full weight | Status |
|---|---|---|---|
| Tool capability | 26 | 35 | Partly scored |
| Access | unknown | 25 | Not scored |
| Maintenance | 2 | 20 | Scored |
| Publisher | 7 | 20 | Scored |
Tool capability
26 read, 8 write, 6 destructive, 1 unknown.
Access
| Part | Value | Points | Where this came from |
|---|---|---|---|
| Scope | unknown | unknown | unknown |
| Where it runs | unknown | unknown | unknown |
| Credentials | unknown | unknown | unknown |
Maintenance
| Part | Value | Points |
|---|---|---|
| Last commit | 532 days | 0 of 8 |
| Releases | no releases | 0 of 6 |
| Issues | 0 closed / 1 issues (0.00) | 2 of 6 |
Publisher
| Part | Value | Points | Where this came from |
|---|---|---|---|
| Who publishes it | Individual | 3 of 8 | GitHub owner type is User (hieuttmmo). |
| Registry listing | Not listed | 2 of 5 | No latest registry entry from search='entraid-mcp-server' had repository github.com/hieuttmmo/entraid-mcp-server. |
| License | No key required | 0 of 4 | GitHub reports no license. |
| Stars | 41 | 1 of 2 | 41 GitHub stars. |
| Repository age | 539 days | 1 of 1 | Repository created 2025-04-25T11:00:19Z. |
What this score does not cover
This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.
Access needed
Environment variables: unknown. The registry entry does not list any.
Maintenance
- Archived
- no
- Last commit
- 2 May 2025 · 1e0de42
- Latest release
- no releases
- Issues
- 1 open · 0 closed
- Stars
- 41
- License
- none published
- Repository created
- 25 Apr 2025
npm and PyPI
- npm
- No npm package in the registry entry.
- PyPI
- No PyPI package in the registry entry.
- Maintainers
- unknown
Install
Install command: unknown. No package command was in the registry entry, and no install block was found in the README.
Other Entra ID servers
Badge
Sources for this listing
github:entraid mcp in:name,description