m365-evidence-mcp

# m365-evidence-mcp An MCP server that turns the Microsoft Graph reads an IT auditor keeps repeating into tools any MCP-capable AI client can call. Point it at a tenant with a read-only token and ask for the evidence in plain language instead of clicking through four admin portals. The four tools cover ITGC classics: security posture, MFA coverage, dormant accounts and privileged access. The model fetches, the auditor concludes. ## Tools | Tool | What it does | |---|---| | `secure_score()` | Current Secure Score plus the five weakest controls | | `mfa_coverage()` | How many users are MFA registered, and who is not | | `stale_accounts(days)` | Enabled accounts with no sign-in in the last N days | | `privileged_roles()` | Activated directory roles and who holds them | ## Setup ```bash python3 -m venv .venv .venv/bin/pip install mcp ``` Get a Graph token. The Azure CLI is the quickest way: ```bash export GRAPH_TOKEN=$(az account get-access-token --resource https://graph.microsoft.com --query accessToken -o tsv) ``` The Access token tab in Graph Explorer works too. Scopes: SecurityEvents.Read.All for the score, Reports.Read.All for MFA coverage, User.Read.All plus AuditLog.Read.All for stale accounts, Directory.Read.All for roles. All of them are read scopes and most need admin consent. Wire it into Claude Code: ```bash claude mcp add m365evidence -- /path/to/m365-evidence-mcp/.venv/bin/python /path/to/m365-evidence-mcp/m365_evidence_mcp.py ``` ## Demo What it looks like from Claude Code: ``` > pull the access review evidence for the quarter ⏺ m365evidence · privileged_roles() Global Administrator (2): - [email protected] - [email protected] Helpdesk Administrator (1): - [email protected] ⏺ Two global admins and one of them is the break glass account. Helpdesk Administrator has a single holder. MFA coverage next? ``` The accounts above are demo data. The format is exactly what the server returns. ## Design notes …