Integration

Microsoft Entra ID integration

Microsoft Entra ID (formerly Azure Active Directory) through Microsoft Graph v1.0: create, read, update, disable and delete directory users, manage groups and their membership, inspect directory roles, applications and service principals, revoke sign-in sessions, and read sign-in audit logs. Directory-wide operations need an administrator consent on the connected account.

Connect Microsoft Entra ID How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in Microsoft Entra ID.Built from the 20 Microsoft Entra ID tools below, on the connection you add once.

Common Microsoft Entra ID use cases

auditing global administrators
auditing accounts in the tenant
auditing group sprawl in a tenant
validating a new Entra credential
auditing what a user has access to
auditing who holds an access group
responding to a compromised account
creating an access group per project
auditing which admin roles are in use
provisioning accounts from an HR system

What you can do with Microsoft Entra ID

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

User, 6 operations

create_userCreate userPOSTCreates an Entra ID user with a principal name, display name and initial password.
delete_userDelete userDELETEDeletes an Entra ID user, keeping it restorable for 30 days.
get_meGet meGETRetrieves the Entra ID profile of the connected user.
get_userGet userGETRetrieves one Entra ID user by object id or principal name.
list_usersList usersGETLists Entra ID directory users with OData filter, search and selection.
update_userUpdate userPATCHUpdates an Entra ID user, including disabling the account.

Group, 4 operations

create_groupCreate groupPOSTCreates an Entra ID security or Microsoft 365 group.
delete_groupDelete groupDELETEDeletes an Entra ID group.
get_groupGet groupGETRetrieves one Entra ID group by object id.
list_groupsList groupsGETLists Entra ID groups with OData filter and selection.

Member, 3 operations

add_group_memberAdd group memberPOSTAdds a user or another directory object to an Entra ID group.
list_group_membersList group membersGETLists the direct members of an Entra ID group.
remove_group_memberRemove group memberDELETERemoves a member from an Entra ID group.

Directory role, 2 operations

list_directory_role_membersList directory role membersGETLists who holds a given Entra ID directory role.
list_directory_rolesList directory rolesGETLists the activated Entra ID directory roles.

Application, 1 operation

list_applicationsList applicationsGETLists Entra ID application registrations with their credentials metadata.

Membership, 1 operation

list_user_groupsList user groupsGETLists the groups and directory roles an Entra ID user belongs to.

Service principal, 1 operation

list_service_principalsList service principalsGETLists Entra ID service principals and their enabled state.

Session, 1 operation

revoke_sign_in_sessionsRevoke sign in sessionsPOSTRevokes all active sign-in sessions of an Entra ID user.

Sign in, 1 operation

list_sign_insList sign insGETLists Entra ID sign-in log events with status, location and device.

Use Microsoft Entra ID from Claude Code, Cursor or Codex

Connect Microsoft Entra ID in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Microsoft Entra ID operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Microsoft Entra ID

Create your workspace
Sign up free. Nothing to install.
Connect Microsoft Entra ID once
Add your Microsoft Entra ID connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

Microsoft Entra ID integration FAQ

What can you do with the Microsoft Entra ID integration?

LiveContext exposes 20 operations on Microsoft Entra ID, covering user, group, member and directory role. Common uses include auditing global administrators, auditing accounts in the tenant and auditing group sprawl in a tenant.