Skip to content
Azure Active Directory logo

Azure Active Directory MCP server

Manage users, groups, and licenses in Microsoft Entra ID (Azure AD) via Microsoft Graph.

Azure Active Directory is not a separate install. One Activepieces MCP server exposes it alongside 760+ other apps, behind a single URL.

Tools
17
Works with
Any MCP client
Auth
OAuth 2.0
License
MIT, open source
Updated
August 2026

About the Azure Active Directory MCP server

Connect Azure Active Directory once in Activepieces and every action it ships becomes a tool your assistant can call, behind the same server URL as the rest of your apps. Your agent reaches Azure Active Directory and 760+ other apps over a single connection, on our cloud or a self-hosted install.

Tools

Azure Active Directory tools your AI can run

Once connected, your assistant can call any of these Azure Active Directory actions by asking in plain language.

  • Add Member to Group

    Adds a user or group as a member of an Azure AD group.

    2 fields

  • Add or Remove User License

    Assigns or removes licenses for a user. Use addLicenses to add (include disabledPlans to disable specific service plans) and removeLicenses to remove by SkuId.

    3 fields

  • Create Group

    Creates a new group in Azure Active Directory.

    5 fields

  • Create User

    Creates a new user in Microsoft Entra ID.

    12 fields

  • Delete Group

    Deletes an Azure AD group by ID.

    1 field

  • Delete User

    Deletes a user from Azure Active Directory.

    1 field

  • Get Enabled Users

    Retrieves a single page of enabled users (accountEnabled eq true).

    1 field

  • Get Group by ID

    Retrieves an Azure AD group by its object ID.

    1 field

  • Get Group Custom Attributes

    Gets extension and custom attributes for an Azure AD group. Returns schema extensions and open extensions.

    1 field

  • Get User by ID

    Retrieves an Azure AD user by object ID or user principal name.

    1 field

  • List Enabled Users

    Lists all enabled users in the directory, following nextLink for pagination.

    1 field

  • List Group Members

    Lists members of an Azure AD group.

    2 fields

  • List Users

    Lists users in the directory. Supports optional filter and top (page size).

    2 fields

  • Reset Custom Attributes

    Clears extension/custom attributes on a user or group. Provide the resource type and ID, and the extension property names to clear.

    3 fields

  • Revoke Sign-in Session

    Revokes all refresh tokens for the user, forcing them to sign in again.

    1 field

  • Update User

    Updates an Azure AD user. Only provide fields you want to change.

    8 fields

  • Custom API Call

    Make a custom API call to a specific endpoint

    10 fields

Triggers

Azure Active Directory events your agent can watch

These start a run the moment something happens in Azure Active Directory, so work gets picked up on its own.

  • New Deleted User

    Triggers when a user is deleted from Microsoft Entra ID.

  • New Group

    Triggers when a new group is created in Microsoft Entra ID.

  • New User

    Triggers when a new user is created in Microsoft Entra ID.

Azure Active Directory MCP, answered.

No. That is the point of it. One Activepieces server exposes Azure Active Directory alongside every other piece you connect, so your client keeps a single connection.

Yes. Activepieces is open source and free to start, and the MCP server is included on every plan, from the free cloud tier to any self-hosted deployment.

Connect Azure Active Directory in Activepieces, enable the server under Settings → MCP Server, then paste your server URL into your client config. It authenticates over OAuth on first use.

It can call 17 tools, including Add Member to Group, Add or Remove User License, Create Group, and chain them with steps in other apps inside the same run.

Connections use OAuth2 with limited scopes and are stored under 256-bit encryption, with no API to read them back, so an agent gets scoped access rather than your keys.