# azure

> azure is an officially published MCP server from Microsoft. Anomity scores its risk at 45 out of 100 (medium). It matches 1 dangerous capability combination.

- **Canonical URL:** https://catalog.anomity.ai/mcp/azure
- **Kind:** MCP server
- **Publisher:** Microsoft
- **Trust level:** official
- **Risk score:** 45/100 (medium)
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/mcp/azure

## Why it scored 45

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |
| 2 high-risk capabilities: credentials:access, shell:execute | +20 | critical |  |
| Data exfiltration risk (high) | +15 | high | Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine. |

Clamped result: **45/100**, band **medium**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |
| `credentials:access` | Credentials access | Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment. |
| `shell:execute` | Shell execution | Can run arbitrary shell commands. Combined with network access this becomes effectively a remote shell. |

## Dangerous combinations matched

### Data exfiltration risk (high)

Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.

Capabilities: `shell:execute`, `network:outbound`

## Related MCP servers

- [kubernetes](https://catalog.anomity.ai/mcp/kubernetes) — risk 75 (high)
- [dbt](https://catalog.anomity.ai/mcp/dbt) — risk 60 (high)
- [bitwarden](https://catalog.anomity.ai/mcp/bitwarden) — risk 45 (medium)
- [cloudflare](https://catalog.anomity.ai/mcp/cloudflare) — risk 45 (medium)
- [google-cloud-mcp](https://catalog.anomity.ai/mcp/google-cloud-mcp) — risk 45 (medium)
- [desktop-commander](https://catalog.anomity.ai/mcp/desktop-commander) — risk 100 (critical)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json