Azure DevOps MCP Server

Local Model Context Protocol (MCP) server for Azure DevOps Services. It exposes 68 tools for Azure Boards, Azure Repos, pull request review and lifecycle management, Azure Pipelines, team sprints/backlogs, and delivery reporting.

Read tools are enabled by default. Every mutation requires both a server-side feature flag and an explicit per-call confirmation. Pull request completion and auto-complete never bypass branch policies.

• Read work items, every field, relations, comments, and historical snapshots.
• Run read-only WIQL SELECT queries and resolve the matching work items.
• Create and update work items, including state, assignee, tags, area, sprint, and custom fields.
• Add, edit, and soft-delete work item comments; add parent/child/related/dependency/duplicate links and attachments up to 10 MiB.
• Use an expected revision to prevent stale work item updates.
• Trace a ticket to linked pull requests, commits, builds, branches, and related work items.
• Read the work item's field and relation update history.

• List projects, repositories, clone links, branches, and commits.
• Create a branch at an exact commit.
• Delete a branch only when its current object ID matches the caller's expectation.
• Compare branches with ahead/behind counts and changed items.
• Find stale branches while excluding protected branch names.

• List and retrieve pull requests, including direct Azure DevOps PR URLs.
• Read commits, reviewers/votes, iterations, threads, comments, labels, and linked work items.
• Generate bounded unified diffs locally and validate exact inline-comment targets.
• Create and update PRs; switch draft state; abandon or reactivate a PR.
• Add/remove reviewers and labels; create, reply to, edit, soft-delete, and resolve review comments; cast votes.
• Enable policy-respecting auto-complete or merge at an exact reviewed source SHA.
• Evaluate merge readiness from draft/status, merge state, votes, required reviewers, unresolved threads, policy evaluations, and PR status checks.
• Produce batch review summaries and stale PR reports.

• List pipelines, runs, and builds; inspect run state/result.
• Filter builds by definition, repository, branch, status, and result.
• Queue or preview a run with a branch, variables, template parameters, and skipped stages.
• Re-run a full pipeline using a previous run's resolved resources.
• List build log records and retrieve bounded log text.

Azure DevOps REST does not expose a generic failed-job-only rerun through this implementation; rerun_pipeline queues a full run.

• List team iterations by current, past, or future timeframe.
• Get the work items and team-member capacity for a sprint.
• Calculate item and story-point velocity with configurable point field and completed states.
• Reorder or reparent backlog items.
• Move a work item to a sprint through update_work_item and System.IterationPath.

The complete input reference is in docs/tools.md.

• Node.js 20+
• npm
• An Azure DevOps Services organization
• An Azure DevOps PAT or an Azure CLI session created with az login

Azure DevOps Server/on-premises is not currently supported.

git clone https://github.com/hasanozcan/azure-devops-mcp.git
cd azure-devops-mcp
npm install
Copy-Item .env.example .env

Edit .env:

AZURE_DEVOPS_ORGANIZATION=your-organization
AZURE_DEVOPS_DEFAULT_PROJECT=your-project
AZURE_DEVOPS_AUTH_MODE=pat
AZURE_DEVOPS_PAT=your-token
AZURE_DEVOPS_ENABLE_WRITE_TOOLS=false

Then validate and build:

npm run doctor
npm run build
npm start

The transport is local stdio; stdout is reserved for MCP protocol messages.

For a URL such as:

https://thecellsolutions.visualstudio.com/hpowere/_git/hpower/pullrequests

use:

AZURE_DEVOPS_ORGANIZATION=thecellsolutions
AZURE_DEVOPS_DEFAULT_PROJECT=hpowere

For https://dev.azure.com/<organization>/<project>/..., use the first path segment as the organization and the second as the project.

Recommended PAT permissions depend on the tools you enable:

Use the shortest practical PAT expiration. See docs/auth.md.

Azure CLI mode:

az login

AZURE_DEVOPS_AUTH_MODE=azcli
AZURE_DEVOPS_PAT=

Placeholder secrets such as replace-me are rejected at startup.

The repository includes .codex/config.toml. Build the project, create .env, trust/open the repository in Codex, and restart the MCP server list.

Manual registration:

codex mcp add azure-devops-mcp -- node "<absolute-path-to-project>\dist\server.js"

The project configuration uses default_tools_approval_mode = "writes", adding Codex approval on top of the server's own mutation gates. .vscode/mcp.json is also included.

Every mutation requires:

1. AZURE_DEVOPS_ENABLE_WRITE_TOOLS=true at startup.
2. confirm: true in the individual MCP call.

Additional safeguards:

• work item updates can test expectedRevision;
• branch deletion requires expectedObjectId;
• inline comments validate the current iteration, file side, line range, and changeTrackingId;
• PR completion requires the exact current source commit SHA;
• PR completion and auto-complete always use bypassPolicy: false;
• comment edits and deletes require exact work item or PR/thread/comment IDs, and Azure DevOps still enforces author and permission rules;
• mutation requests are never automatically retried;
• PATs, bearer tokens, and authorization headers never appear in tool or doctor output.

Read work item 544, including comments, relations, and delivery links.
Replace my English PR comment with this Turkish explanation after I confirm.
Delete my duplicate reply from thread 42 after I confirm the comment ID.
Move work item 544 to Project\Sprint 8 after I confirm.
Create a branch feature/544 at this exact commit after I confirm.
Review this Azure DevOps pull request URL and report merge blockers.
Add a required reviewer and enable squash auto-complete after I confirm.
Show failed builds for the hpower repository and retrieve the last run logs.
Run pipeline 12 on feature/544 with deploy=false after I confirm.
Show the current sprint capacity and calculated story-point velocity.
Report branches and active PRs older than 45 days.

npm run typecheck
npm run typecheck:tests
npm test
npm run build
npm run smoke:mcp
npm run doctor
npm pack --dry-run

doctor performs live read-only checks without printing credentials.

This release does not manage wikis, test plans, service connections, variable groups, deployment environments, saved queries, repository creation, or Azure DevOps Server/on-premises. Pipeline rerun is full-run only.

The adapters target Microsoft's Azure DevOps REST API 7.1 documentation for Git, PR thread comments, Work Item Tracking, work item comments, Pipelines, Build, and Work/Sprints.

MIT © 2026 Hasan Özcan. See LICENSE.