Description

This Azure-based MCP server implementation secures remote MCP servers using API Management as an AI Gateway. It implements the latest MCP Authorization specification with a complete OAuth2 flow, allowing clients to authenticate securely through Microsoft Entra ID. The architecture uses Azure Functions for the backend, with Python tools for snippet management, while API Management handles client registration, authorization, and token exchange. The implementation includes infrastructure as code (Bicep templates) for easy deployment with Azure Developer CLI (azd), making it particularly useful for organizations that need to provide secure, enterprise-grade access to MCP tools while leveraging existing Azure identity services.

Installation

git clone https://github.com/azure-samples/remote-mcp-apim-functions-python

Claude Desktop Configuration

Add this configuration to your Claude Desktop config file to enable this MCP server:

Config file location: ~/Library/Application Support/Claude/claude_desktop_config.json

Config file location: %APPDATA%\Claude\claude_desktop_config.json

Config file location: ~/.config/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "azure-api-management-gateway-with-entra-id-authentication": {
      "command": "node",
      "args": [
        "path/to/server.js"
      ]
    }
  }
}