nelladath/intune-mcp-server
Developer toolsこのページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る
MCP Server for Microsoft Intune management via Microsoft Graph API
概要
A comprehensive Model Context Protocol (MCP) server for managing Microsoft Intune and Entra ID (Azure AD) through the Microsoft Graph API. This server enables AI assistants to perform device management, user administration, security configuration, and more -- across . - Test Graph API connectivity and get tenant info - Intune overview with device counts and compliance summary - List, search, and manage devices with filters - Compliance monitoring and non-compliant device reporting - Remote actions (sync, restart, lock, wipe, retire, rename) - Bulk device sync - Hardware inventory, installed apps, and network info - Stale device detection - Autopilot device and profile management - Device configuration profiles and compliance policies - List, search, and inspect mobile apps - Assign apps to groups (required, available, uninstall) - Remove all app assignments - Full user CRUD operations - User onboarding with manager, licenses, and group assignment - User offboarding (block sign-in,...
README
以下は原文 README の抜粋です。原文を見る。
Microsoft Intune & Entra ID MCP Server
A comprehensive Model Context Protocol (MCP) server for managing Microsoft Intune and Entra ID (Azure AD) through the Microsoft Graph API. This server enables AI assistants to perform device management, user administration, security configuration, and more – 134 tools across 16 categories.
Features
Core
- Test Graph API connectivity and get tenant info
- Intune overview with device counts and compliance summary
Intune Device Management
- List, search, and manage devices with filters
- Compliance monitoring and non-compliant device reporting
- Remote actions (sync, restart, lock, wipe, retire, rename)
- Bulk device sync
- Hardware inventory, installed apps, and network info
- Stale device detection
- Autopilot device and profile management
- Device configuration profiles and compliance policies
App Management
- List, search, and inspect mobile apps
- Assign apps to groups (required, available, uninstall)
- Remove all app assignments
Entra ID (Azure AD) User Management
- Full user CRUD operations
- User onboarding with manager, licenses, and group assignment
- User offboarding (block sign-in, revoke sessions, remove groups/apps/licenses)
- Password management and reset
- License assignment and management
- Manager assignment and direct reports
- Bulk operations (create users, assign licenses, add to groups)
- Sign-in activity tracking
- Deleted user recovery
Entra ID Device Management
- List, search, and inspect Entra ID devices
- Delete devices from Entra ID, Intune, or both
- Enable/disable Entra devices
Group Management
- Security groups (static and dynamic)
- Microsoft 365 groups
- Member and owner management
- Dynamic membership rules
- Search and delete groups
Conditional Access
- Policy listing and inspection
- Enable/disable policies
- Named locations management
Authentication & Identity Protection
- MFA status monitoring
- Authentication methods management
- Sign-in logs with filtering
- Risky user detection and dismissal
- Risk detections and alerts
- Directory audit logs
App Registrations & Enterprise Apps
- List and search app registrations
- Credential expiry monitoring
- Enterprise app management (enable/disable)
- App permission inspection
- Delete app registrations
Windows 365 Cloud PC
- List and manage Cloud PCs
- Provisioning policies
- Restart, reprovision actions
- Gallery images
- Cloud PC overview
Tenant Administration
- Organization and domain information
- Service health monitoring and issue tracking
- Directory roles and membership
- Global admin listing
- License/subscription management
- Security defaults status
- Role assignment
Scripts & Remediations
- PowerShell script management and deployment status
- Proactive remediation scripts and status summaries
Security & Compliance
- Security baselines and deployed profiles
- App protection policies (MAM)
インストール
This server does not publish a one-line install command.
Open the repository installation guide MCP 初心者？mcpskill.org のガイドから始めましょう →設定
{
"mcpServers": {
"intune": {
"command": "C:\\MCP\\venv\\Scripts\\python.exe",
"args": ["C:\\MCP\\intune_mcp_server\\server.py"],
"env": {
"TENANT_ID": "your-tenant-id",
"CLIENT_ID": "your-client-id",
"CLIENT_SECRET": "your-client-secret"
}
}
}
}