Azure DevOps MCP Server with PAT Authentication
A Model Context Protocol (MCP) server for Azure DevOps that uses Personal Access Token (PAT) authentication instead of Azure CLI. This server provides both CLI and HTTP API interfaces for interacting with Azure DevOps services.
✨ Features
- 🔑 PAT Authentication: Uses Personal Access Tokens instead of Azure CLI
- 🌐 HTTP API: REST API endpoints for web applications
- 📡 MCP Protocol: Full Model Context Protocol support
- 🚀 Deploy Ready: Configured for Render.com deployment
- 🛠️ 75 Tools: Comprehensive Azure DevOps functionality
🏗️ Architecture
This server provides two interfaces:
- CLI Interface (
src/index.ts) - Traditional MCP server via stdin/stdout - Web Interface (
src/server-web.ts) - HTTP REST API for web deployment
🔧 Available Tools (75 Total)
Work Items (19 tools)
wit_get_work_item- Get work item by IDwit_create_work_item- Create new work itemwit_update_work_item- Update work item fieldswit_my_work_items- Get user's assigned work itemswit_add_work_item_comment- Add commentswit_list_backlogs- List team backlogswit_link_work_item_to_pull_request- Link work items to PRs- And 12 more...
Builds (9 tools)
build_get_builds- List buildsbuild_run_build- Trigger new buildbuild_get_log- Get build logsbuild_get_status- Check build status- And 5 more...
Repositories (18 tools)
repo_create_pull_request- Create pull requestsrepo_list_pull_requests_by_repo- List PRsrepo_get_pull_request_by_id- Get PR detailsrepo_list_branches_by_repo- List branchesrepo_search_commits- Search commits- And 13 more...
Search (3 tools)
search_code- Search repositoriessearch_wiki- Search wiki pagessearch_workitem- Search work items
Other Categories
- Work Management (3 tools): Iterations and teams
- Releases (2 tools): Release definitions and deployments
- Wiki (5 tools): Wiki page management
- Test Plans (6 tools): Test management
- Core (3 tools): Projects and teams
- Advanced Security (2 tools): Security alerts
🚀 Quick Start
Option 1: Deploy to Render.com (Recommended)
- Fork this repository
- Deploy to Render:
- Go to render.com
- Create new Web Service
- Connect your forked repository
- Set environment variables (see below)
- Set Environment Variables:
AZURE_DEVOPS_ORG=your-organization-name AZURE_DEVOPS_PAT=your-personal-access-token - Deploy and get your URL:
https://your-service.onrender.com
Option 2: Local Development
# Clone repository
git clone https://github.com/ennuiii/DevOpsMcpPAT.git
cd DevOpsMcpPAT
# Install dependencies
npm install
# Set environment variables
export AZURE_DEVOPS_ORG="your-org"
export AZURE_DEVOPS_PAT="your-pat-token"
# Build and start
npm run build
npm start
# Server will be available at http://localhost:3000
🔑 Environment Variables
Required
| Variable | Description | Example |
|---|---|---|
AZURE_DEVOPS_ORG | Your Azure DevOps organization name | contoso |
AZURE_DEVOPS_PAT | Personal Access Token | your-token-here |
Optional
| Variable | Description | Default |
|---|---|---|
PORT | HTTP server port | 3000 |
NODE_ENV | Node.js environment | production |
🎫 Creating a Personal Access Token
- Go to Azure DevOps:
https://dev.azure.com/{your-organization} - Click User Settings → Personal Access Tokens
- Click "New Token"
- Configure scopes:
- ✅ Work Items: Read & Write
- ✅ Code: Read & Write
- ✅ Build: Read & Execute
- ✅ Release: Read, Write & Execute
- ✅ Project and Team: Read
- ✅ Analytics: Read
- ✅ Test Management: Read & Write
📡 API Endpoints
Health & Info
GET /- API documentationGET /health- Health check
Tools
GET /api/tools- List all available toolsPOST /api/tools/{toolName}- Call specific tool
MCP Protocol
POST /mcp- JSON-RPC 2.0 endpoint
🧪 Example Usage
Get Work Item
curl -X POST https://your-service.onrender.com/api/tools/wit_get_work_item \
-H "Content-Type: application/json" \
-d '{"id": 123, "project": "MyProject"}'
List Projects
curl -X POST https://your-service.onrender.com/api/tools/core_list_projects \
-H "Content-Type: application/json" \
-d '{}'
Search Code
curl -X POST https://your-service.onrender.com/api/tools/search_code \
-H "Content-Type: application/json" \
-d '{"searchText": "function", "project": ["MyProject"]}'
🏗️ Project Structure
├── src/
│ ├── index.ts # CLI MCP server (PAT auth)
│ ├── server-web.ts # HTTP server wrapper
│ ├── tools/ # Tool implementations
│ │ ├── workitems.ts # Work item tools
│ │ ├── builds.ts # Build tools
│ │ ├── repos.ts # Repository tools
│ │ └── ... # Other tool categories
│ ├── prompts.ts # MCP prompts
│ └── utils.ts # Utilities
├── package.json # Dependencies & scripts
├── tsconfig.json # TypeScript config
├── render.yaml # Render deployment config
├── Dockerfile # Container config
└── README.md # This file
🔄 Differences from Original
| Feature | Original Azure DevOps MCP | This PAT Version |
|---|---|---|
| Authentication | Azure CLI / DefaultAzureCredential | Personal Access Token |
| Dependencies | Requires @azure/identity | No Azure Identity SDK |
| Setup | Requires az login | Just needs PAT token |
| Multi-tenant | Yes (via --tenant flag) | No (PAT is org-specific) |
| Web Interface | No | Yes (HTTP API) |
| Deployment | Local only | Render.com ready |
🛠️ Development
Build
npm run build
Development Mode
npm run dev
Testing
# Test CLI version
export AZURE_DEVOPS_PAT="your-token"
echo '{}' | node dist/index.js your-org
# Test web version
npm start
curl http://localhost:3000/health
📚 Complete Tool Reference
Click to expand all 75 tools
Work Items (19 tools)
wit_list_backlogs- List team backlogswit_list_backlog_work_items- List backlog work itemswit_my_work_items- Get user's work itemswit_get_work_items_batch_by_ids- Batch get work itemswit_get_work_item- Get single work itemwit_list_work_item_comments- List work item commentswit_add_work_item_comment- Add work item commentwit_add_child_work_items- Create child work itemswit_link_work_item_to_pull_request- Link to PRwit_get_work_items_for_iteration- Get iteration work itemswit_update_work_item- Update work itemwit_get_work_item_type- Get work item typewit_create_work_item- Create work itemwit_get_query- Get query definitionwit_get_query_results_by_id- Execute querywit_update_work_items_batch- Batch updatewit_work_items_link- Link work itemswit_work_item_unlink- Unlink work itemswit_add_artifact_link- Link artifacts
Builds (9 tools)
build_get_definitions- List build definitionsbuild_get_definition_revisions- Get definition historybuild_get_builds- List buildsbuild_get_log- Get build logsbuild_get_log_by_id- Get specific logbuild_get_changes- Get build changesbuild_run_build- Trigger buildbuild_get_status- Get build statusbuild_update_build_stage- Update build stage
Repositories (18 tools)
repo_create_pull_request- Create PRrepo_update_pull_request- Update PRrepo_update_pull_request_reviewers- Manage reviewersrepo_list_repos_by_project- List repositoriesrepo_list_pull_requests_by_repo- List PRs by reporepo_list_pull_requests_by_project- List PRs by projectrepo_list_pull_request_threads- List PR threadsrepo_list_pull_request_thread_comments- List thread commentsrepo_list_branches_by_repo- List branchesrepo_list_my_branches_by_repo- List my branchesrepo_get_repo_by_name_or_id- Get repositoryrepo_get_branch_by_name- Get branchrepo_get_pull_request_by_id- Get PRrepo_reply_to_comment- Reply to PR commentrepo_create_pull_request_thread- Create PR threadrepo_resolve_comment- Resolve PR commentrepo_search_commits- Search commitsrepo_list_pull_requests_by_commits- Find PRs by commits
Search (3 tools)
search_code- Search code repositoriessearch_wiki- Search wiki pagessearch_workitem- Search work items
Work Management (3 tools)
work_list_team_iterations- List team iterationswork_create_iterations- Create iterationswork_assign_iterations- Assign iterations to team
Releases (2 tools)
release_get_definitions- List release definitionsrelease_get_releases- List releases
Wiki (5 tools)
wiki_list_wikis- List wikiswiki_get_wiki- Get wiki detailswiki_list_pages- List wiki pageswiki_get_page_content- Get page contentwiki_create_or_update_page- Create/update page
Test Plans (6 tools)
testplan_list_test_plans- List test planstestplan_create_test_plan- Create test plantestplan_add_test_cases_to_suite- Add test casestestplan_create_test_case- Create test casetestplan_list_test_cases- List test casestestplan_show_test_results_from_build_id- Get test results
Core (3 tools)
core_list_project_teams- List project teamscore_list_projects- List projectscore_get_identity_ids- Get identity IDs
Advanced Security (2 tools)
advsec_get_alerts- Get security alertsadvsec_get_alert_details- Get alert details
🐛 Troubleshooting
Common Issues
Authentication Failed
- Verify PAT token is valid and not expired
- Check token has required scopes
- Ensure organization name is correct
Service Won't Start
- Check environment variables are set
- Verify Node.js version >= 20.0.0
- Check logs for specific error messages
Tool Execution Fails
- Ensure PAT has permissions for the specific operation
- Check project/repository names are correct
- Verify work item IDs exist
📄 License
MIT License - see LICENSE file for details.
🤝 Contributing
- Fork the repository
- Create a feature branch
- Make your changes
- Add tests if applicable
- Submit a pull request
🔗 Links
⭐ Star History
If this project helped you, please consider giving it a star! ⭐