EntraID MCP Server

Item: EntraID MCP Server
Rating: 0
Author: M8ven

A FastMCP server for interacting with Microsoft Entra ID via the Microsoft Graph API, enabling management of users, groups, sign-in logs, MFA, applications, devices, conditional access, and more.

→ baoduy/entraid-mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: /etc/entraid/.env

🔐

You'll be asked for 3 credentials: CLIENT_SECRET, AZURE_CLIENT_SECRET, AZURE_CLIENT_CERTIFICATE_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configTENANT_ID— Client secret: set , CLIENT_ID, CLIENT_SECRET.

configAZURE_TENANT_ID— DefaultAzureCredential (e.g. , AZURE_CLIENT_ID,

configCLIENT_ID— Client secret: set TENANT_ID, , CLIENT_SECRET.

configAZURE_CLIENT_ID— DefaultAzureCredential (e.g. AZURE_TENANT_ID, ,

🔐 secretCLIENT_SECRET— Client secret: set TENANT_ID, CLIENT_ID, .

🔐 secretAZURE_CLIENT_SECRET— ) are also honoured.

configCERTIFICATE_PATH— Certificate: set TENANT_ID, CLIENT_ID, , and

configAZURE_CLIENT_CERTIFICATE_PATH

configCERTIFICATE_PWD— optionally .

🔐 secretAZURE_CLIENT_CERTIFICATE_PASSWORD

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/baoduy-entraid-mcp-server-9psvu7)](https://m8ven.ai/mcp/baoduy-entraid-mcp-server-9psvu7)

commit: 274eb48fb7f8625e64498a15dc0a57aa542e45f4

code hash: b78e5be7be8002a8b00c3f8fa62bf52bfe44ba8445b5050a7434c9ad236f90f5

verified: 6/18/2026, 11:07:48 AM

view raw JSON →