Back to Browse

Cloudpanel MCP Server

Developer ToolsModerate5.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

Azure subscriptions, resource groups, resources and VMs via ARM REST as MCP tools.

About

Azure subscriptions, resource groups, resources and VMs via ARM REST as MCP tools.

Security Report

5.6
Moderate5.6Moderate Risk

cloudpanel is a straightforward Azure Resource Manager REST client that authenticates with a bearer token from the AZURE_ACCESS_TOKEN environment variable, validates tool arguments with zod, and URL-encodes path segments. Its main concerns are destructive tools (delete_resource_group, create_resource_group) that are not marked as destructive, and the AZURE_ARM_BASE_URL override, which could send the bearer token to an arbitrary host if an attacker controls the environment. Network and env var access match the stated Azure purpose. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

AZURE_ACCESS_TOKENRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-cloudpanel": {
      "env": {
        "AZURE_ACCESS_TOKEN": "your-azure-access-token-here"
      },
      "args": [
        "-y",
        "@reneturcios/cloudpanel"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

cloudpanel

Azure subscriptions, resource groups and resources as MCP tools, talking to the Azure Resource Manager REST API. cloudpanel is a clean-room rebuild of the core surface of the Azure MCP server, under a new name: fresh code, no copied branding. The original azure-mcp carries hundreds of service-specific commands; this rebuild covers the generic ARM surface only.

Tools (core subset, 10)

list_subscriptions, get_subscription, list_resource_groups, get_resource_group, create_resource_group, delete_resource_group, list_resources, get_resource, list_virtual_machines, list_locations.

Not in this subset: every service-specific command family (storage, Cosmos DB, Key Vault, AKS, SQL, Monitor and the rest), deployments and template operations, and role assignments.

Setup

Provide any valid Azure AD bearer token with access to the target subscriptions:

export AZURE_ACCESS_TOKEN=eyJ...

Optionally override the ARM base with AZURE_ARM_BASE_URL (default https://management.azure.com). Every request carries api-version=2021-04-01 unless a tool's endpoint family pins its own. Without the token, every tool call fails with an error naming AZURE_ACCESS_TOKEN. Unlike the original, there is no Azure CLI or hosted login flow: this is a plain token REST client.

CLI

npx @reneturcios/cloudpanel list_subscriptions '{}'
npx @reneturcios/cloudpanel list_resource_groups '{"subscription_id":"..."}'
npx @reneturcios/cloudpanel mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "cloudpanel": {
      "command": "npx",
      "args": ["-y", "@reneturcios/cloudpanel", "mcp"],
      "env": { "AZURE_ACCESS_TOKEN": "eyJ..." }
    }
  }
}

Docker

docker run -i -e AZURE_ACCESS_TOKEN ghcr.io/cloudcorprecords/cloudpanel

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!