entra-mcp (approval-gated)
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/sagarmodha9-dotcom/entra-mcp |
|---|---|
| Category | AD/Entra |
| Systems touched | Microsoft Entra ID, Intune (Graph) |
| Access (as described) | configurable |
| License / price | No license file / free |
| GitHub stars | 0 |
| Read tools | 7 read tools on fixed Graph endpoints (users, groups, devices, sign-in logs) |
| Write / delete / exec tools | 7 identity writes + 2 device actions, only after a human approves at the keyboard; no wipe/retire/delete |
| Read-only mode | Yes: reads use a separate *.Read.All app; writes need delegated token + human approval |
| Safety notes | Nice design (endpoint allowlist, two credentials, audit log) but unproven. Lab tenant only until it matures; no license means reuse rights are unclear. |
| Verified | yes (README review 2026-10-24) |
| Notes | Brand new (Oct 2026), 0 stars, one author. Help-desk focus. Added 2026-10-24. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.