intune-mcp (read-only)
access level: read-only✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/sdkamer/intune-mcp |
|---|---|
| Category | AD/Entra |
| Systems touched | Microsoft Intune via Microsoft Graph: devices, compliance/config policies, apps, RBAC, enrollment |
| Access (as described) | read-only |
| License / price | Apache-2.0 / free |
| GitHub stars | 0 |
| Read tools | whoami + devices group on by default (list_devices, get_device, search_devices, count_devices, device_summary); opt-in groups: configuration, apps, rbac, enrollment (41 tools total); 3 tenant-wide inventory tools behind INTUNE_ENABLE_TENANT_INVENTORY |
| Write / delete / exec tools | None |
| Read-only mode | Yes: read-only by construction; config.py holds a closed allowlist of *.Read.All Graph scopes (no ReadWrite, no .default), one scope per tool call |
| Safety notes | Delegated per-user sign-in, so Intune RBAC and scope tags still apply. Token cache uses the OS keychain and refuses to run without encryption. Output uses field allowlists and labels untrusted text as data. Early: only one live platform check per its VERIFICATION doc. |
| Verified | yes (source review 2026-10-31) |
| Notes | Brand new (created 29 Oct 2026), v0.1, one author, 0 stars. Not affiliated with Microsoft. Runs locally over stdio and signs in as you (delegated). Added 2026-10-31. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.