trackmcp
Back to directory
dockndevai

mcp-azure-devops

View on GitHub

MCP server for Azure DevOps — boards, repos, pipelines, projects — with governance controls (access modes, project scoping, protected projects, delete gating, typed confirmation).

1 stars TypeScriptOthers Updated Aug 31, 2026
azure-devopsdevopsgovernancellmmcpmodel-context-protocol

Documentation

mcp-azure-devops

CI
License: MIT
npm

A Model Context Protocol server for Azure DevOps. It lets an MCP-capable client (Claude Desktop, Claude Code, Cursor, Codex, …) work across boards, repos, pipelines, and projects — with a governance layer that keeps an AI agent inside safe boundaries.

What this offers

  • Projects & teams — list projects/teams/members, inspect process templates.
  • Boards / work items — WIQL queries, get work items, create/update work items, list iterations (sprints).
  • Repos / pull requests — list repositories and branches, list/get PRs, open PRs.
  • Pipelines / builds — list pipelines and recent builds, get a build, queue a run.
  • Admin / process — list process templates, create a project, delete a project (guarded).
  • Governance built in — access modes, project allowlists, protected projects, delete gating, typed confirmation for high-impact ops, dry-run, and JSON audit logging.

Governance & security model

ConcernFlagDefaultEffect
What can the server do?`AZDO_MODE``read-only``read-only` → reads; `read-write` → work items, PRs, pipeline runs; `admin` → create/delete project. Tools above the mode are never registered.
Which projects are in scope?`AZDO_PROJECT_ALLOWLIST`*(all)*Operations on other projects are refused.
Which projects are read-only forever?`AZDO_PROTECTED_PROJECTS`*(none)*Readable, never mutable.
Can it delete?`AZDO_ALLOW_DELETE``false``delete_project` needs this and admin mode.
Typed confirmation`AZDO_REQUIRE_CONFIRMATION``true`High-impact ops require `confirm` to equal the target name — not just a boolean.
Preview`AZDO_DRY_RUN``false`Write/admin tools validate + log intent, then return.
Audit trail`AZDO_AUDIT_LOG``true`JSON line to stderr per guarded operation.

Tools

Read (`read-only`+): `list_projects`, `get_project`, `list_teams`, `list_team_members`, `list_processes`, `query_work_items`, `get_work_item`, `list_iterations`, `list_repositories`, `list_branches`, `list_pull_requests`, `get_pull_request`, `list_pipelines`, `list_builds`, `get_build`

Write (`read-write`+): `create_work_item`, `update_work_item`, `create_pull_request`, `run_pipeline`

Admin (`admin`): `create_project`, `delete_project` (needs `AZDO_ALLOW_DELETE` + typed `confirm`)

Quickstart — add to your agent

Published on npm as `@dockndevai/mcp-azure-devops`. Runs via `npx`; needs an org and a PAT. See docs/CLIENTS.md for every client and `.env.example` for all variables.

Claude Code

bash
claude mcp add azure-devops -e AZDO_ORG_URL="https://dev.azure.com/your-org" -e AZDO_PAT="your-pat" -e AZDO_MODE="read-only" -- npx -y @dockndevai/mcp-azure-devops

Claude Desktop · Cursor · Windsurf

json
{
  "mcpServers": {
    "azure-devops": {
      "command": "npx",
      "args": ["-y", "@dockndevai/mcp-azure-devops"],
      "env": {
        "AZDO_ORG_URL": "https://dev.azure.com/your-org",
        "AZDO_PAT": "your-pat",
        "AZDO_MODE": "read-only"
      }
    }
  }
}

Example prompts

  • *"List active pull requests in the Payments project's api repo"*
  • *"Query work items assigned to me that are still Active"*
  • *"Show the last 10 builds in the Web project and which failed"*
  • *"Create a Bug in Payments titled 'Checkout 500 on retry'"* (needs read-write)

Run from source (development)

bash
npm install
npm run build
node dist/index.js   # with the environment variables set

Develop

bash
npm run dev
npm test          # governance policy: modes, allowlists, delete gating, confirmation
npm run typecheck

Publishing

Ships a `server.json` for the official MCP registry and an `mcpName` for npm ownership validation. See **PUBLISHING.md**.

License

MIT

Frequently asked questions

What is mcp-azure-devops?

mcp-azure-devops is MCP server for Azure DevOps — boards, repos, pipelines, projects — with governance controls (access modes, project scoping, protected projects, delete gating, typed confirmation).

How do I install mcp-azure-devops?

Open the GitHub repository and follow its README. Most MCP servers are added to your client's MCP config, then called by your agent.

Is mcp-azure-devops open source?

Yes — it is hosted on GitHub at https://github.com/dockndevai/mcp-azure-devops and has 1 stars.

Related MCP tools

Run your own MCP server? See who uses it and what to fix.

Measure it with TrackMCP