Is the Azure Active Directory MCP server free?

Yes. Activepieces is open source and free to start, and the MCP server is included on every plan, from the free cloud tier to any self-hosted deployment.

How do I connect Azure Active Directory to Claude or Cursor?

Connect Azure Active Directory in Activepieces, enable the server under Settings → MCP Server, then paste your server URL into your client config. It authenticates over OAuth on first use.

What can my agent do in Azure Active Directory?

It can call 17 tools, including Add Member to Group, Add or Remove User License, Create Group, and chain them with steps in other apps inside the same run.

Is it safe to let an agent call Azure Active Directory?

Connections use OAuth2 with limited scopes and are stored under 256-bit encryption, with no API to read them back, so an agent gets scoped access rather than your keys.

Azure Active Directory MCP server

Manage users, groups, and licenses in Microsoft Entra ID (Azure AD) via Microsoft Graph.

Azure Active Directory is not a separate install. One Activepieces MCP server exposes it alongside 770+ other apps, behind a single URL.

Start building See the Azure Active Directory integration

Tools: 17
Works with: Any MCP client
Auth: OAuth 2.0
License: MIT, open source
Updated: October 2026

About the Azure Active Directory MCP server

Connect Azure Active Directory once in Activepieces and every action it ships becomes a tool your assistant can call, behind the same server URL as the rest of your apps. Your agent reaches Azure Active Directory and 770+ other apps over a single connection, on our cloud or a self-hosted install.

Tools

Azure Active Directory tools your AI can run

Once connected, your assistant can call any of these Azure Active Directory actions by asking in plain language.

Add Member to Group
Adds a user or group as a member of an Azure AD group.
2 fields
Add or Remove User License
Assigns or removes licenses for a user. Use addLicenses to add (include disabledPlans to disable specific service plans) and removeLicenses to remove by SkuId.
3 fields
Create Group
Creates a new group in Azure Active Directory.
5 fields
Create User
Creates a new user in Microsoft Entra ID.
12 fields
Delete Group
Deletes an Azure AD group by ID.
1 field
Delete User
Deletes a user from Azure Active Directory.
1 field
Get Enabled Users
Retrieves a single page of enabled users (accountEnabled eq true).
1 field
Get Group by ID
Retrieves an Azure AD group by its object ID.
1 field
Get Group Custom Attributes
Gets extension and custom attributes for an Azure AD group. Returns schema extensions and open extensions.
1 field
Get User by ID
Retrieves an Azure AD user by object ID or user principal name.
1 field
List Enabled Users
Lists all enabled users in the directory, following nextLink for pagination.
1 field
List Group Members
Lists members of an Azure AD group.
2 fields
List Users
Lists users in the directory. Supports optional filter and top (page size).
2 fields
Reset Custom Attributes
Clears extension/custom attributes on a user or group. Provide the resource type and ID, and the extension property names to clear.
3 fields
Revoke Sign-in Session
Revokes all refresh tokens for the user, forcing them to sign in again.
1 field
Update User
Updates an Azure AD user. Only provide fields you want to change.
8 fields
Custom API Call
Make a custom API call to a specific endpoint
10 fields

Triggers

Azure Active Directory events your agent can watch

These start a run the moment something happens in Azure Active Directory, so work gets picked up on its own.

New Deleted User
Triggers when a user is deleted from Microsoft Entra ID.
New Group
Triggers when a new group is created in Microsoft Entra ID.
New User
Triggers when a new user is created in Microsoft Entra ID.

Give your assistant Azure Active Directory

Connect Azure Active Directory once and every tool above is callable from Claude, Cursor or any MCP client, behind the same server URL as 770+ other apps. Free to start.

Get your server URL Talk to sales

Azure Active Directory MCP, answered.

No. That is the point of it. One Activepieces server exposes Azure Active Directory alongside every other piece you connect, so your client keeps a single connection.