Microsoft Intune & Entra ID MCP Server
A comprehensive MCP server that manages Microsoft Intune and Entra ID via the Microsoft Graph API. It exposes 134 tools across 16 categories, enabling AI assistants to perform device and user management, security configuration, policy enforcement, and rich reporting. Features include remote actions (sync, restart, lock, wipe, retire), device inventory, Autopilot management, conditional access, app and group management, and bulk operations.
Security Analysis
17 files scanned on Jul 14, 2026
The codebase largely adheres to standard secure practices for a Microsoft Graph Intune management tool. No obfuscated code, no remote script execution, and no credential theft or data exfiltration detected in the shown components. Minor security considerations: secret management via environment variables and potential error-detail leakage on Graph API errors. Recommended mitigations include using a secrets vault or managed identity, strict RBAC on app registration, rotating credentials, and implementing sanitized error reporting.
You might also like
AutopilotProfileFunctions
AutopilotProfileFunctions is a PowerShell toolkit for Microsoft Intune that automates the creation and management of Windows Autopilot deployment profiles via the Graph API. It enables bulk profile generation (including language, deployment mode, join type, and device type), assigns profiles to regional dynamic groups, and supports CSV-based mass provisioning with customizable device naming templates. The result is scalable, repeatable Autopilot setup across global populations with minimal manual effort.
Amir Joseph SayesIntune Adaptive Engine
The Intune Adaptive Engine is a PowerShell automation tool that keeps Entra ID group membership in sync with live Intune device inventory through YAML-driven rules. It queries Graph API for Intune devices and detectedApps, evaluates per-rule conditions, and performs the minimal add/remove actions to keep groups in sync—no agents, no P1/P2 licensing, and no custom code; WhatIf/dry-run, per-rule dry runs, auto group creation, platform filtering, and CI/CD-ready rule sets are supported.
Niklas BruhnIntuneAppAssigner
IntuneAppAssigner is a PowerShell tool that enables bulk assignment of mobile apps in Microsoft Intune. It provides an interactive interface to select apps, choose assignment mode (replace, add, or review), set installation intent (Required, Available, Uninstall), and pick target groups (All users, All devices, or Entra ID groups). It also supports assignment filters and, for Android/iOS, App Config profiles (COPE/BYOD). Public Preview status is noted.
Nick BentonAutopilot Management
Autopilot Management is a Windows-based Intune utility that simplifies Autopilot device administration. It supports searching by serial number or device name, bulk updates to Group Tags, bulk or single deletions, and uploading hardware hashes. It can load and verify devices from CSV, backup data, and query with an optional cache for large environments. Authentication uses Azure Graph tools (MFA supported) for secure admin access.
Espen Jaegtvik