Quick Start

1 Add to your AI agent

CLI agents — one command, done:

# Claude Code (Anthropic)
claude mcp add --transport stdio --scope user azure-sql -- npx -y mcp-azure-sql

# Codex CLI (OpenAI)
codex mcp add azure-sql -- npx -y mcp-azure-sql

# Gemini CLI (Google)
gemini mcp add -s user azure-sql npx -y mcp-azure-sql

IDE agents — add this JSON block to your agent's config file:

{
  "azure-sql": {
    "command": "npx",
    "args": ["-y", "mcp-azure-sql"],
    "env": {
      "AZURE_SQL_CONFIG_FILE": "~/.config/azure-sql-mcp/connections.json"
    }
  }
}

Agent	File	Key
	VS Code `settings.json`	`"mcp" > "servers"`
	`~/.cursor/mcp.json`	`"mcpServers"`
	`~/.codeium/windsurf/mcp_config.json`	`"mcpServers"`
	Cline Settings UI or `cline_mcp_settings.json`	`"mcpServers"`
	`~/.continue/config.yaml`	`mcpServers:` (YAML)
	`claude_desktop_config.json`	`"mcpServers"`

2 Configure your databases

Create ~/.config/azure-sql-mcp/connections.json:

{
  "defaults": { "auth": "azuread" },
  "connections": [
    {
      "name": "dev",
      "server": "myserver.database.windows.net",
      "database": "myapp-dev",
      "environment": "dev"
    },
    {
      "name": "prod",
      "server": "myserver.database.windows.net",
      "database": "myapp-prod",
      "environment": "prod",
      "prod": true
    }
  ]
}

See example-config.json for SQL auth, connection strings, and all options.

3 Sign in to Azure

az login

✓ Done

Restart your AI agent. You now have 34 database tools.

Tools

Safety

Your AI agent cannot accidentally destroy production.

	`query`	`execute` on dev	`execute` on prod
SELECT	✓	—	—
INSERT / UPDATE / DELETE	✗	`confirm=true`	`confirm=true`
DROP / TRUNCATE / ALTER	✗	`confirm=true`	Blocked
EXEC / {call}	✗	`confirm=true`	`confirm=true`

Production = any connection with "prod": true or "environment": "prod".

Authentication

Mode	When to use
`azuread` (default)	Azure SQL via `az login`, managed identity, or service principal
`sql`	Legacy SQL Server — add `"user"` and `"password"` to connection
`connstr`	Custom — add `"connection_string"` with full connection string

Why Go?

	Go	TypeScript / Python
Startup	~5ms	500ms+
Binary	Single 16MB file	Runtime + packages
Memory	~15MB	80MB+
Install	Download → run	`npm install` + Node.js
Azure AD	Native driver	`@azure/identity` shim
Concurrency	Goroutines	Event loop / GIL

Config file

{
  "defaults": { "auth": "azuread", "app_name": "my-app" },
  "connections": [{
    "name": "unique-name",
    "server": "server.database.windows.net",
    "database": "dbname",
    "auth": "azuread",
    "environment": "dev",
    "description": "Human-readable note",
    "prod": false
  }]
}

Environment tags: dev sqa qa beta delta test preprod prod

Environment variables

# Legacy (no config file needed)
export AZURE_SQL_CONNECTIONS="dev=server.database.windows.net/mydb;qa=qaserver.database.windows.net/qadb"

# Override production list
export AZURE_SQL_PROD_CONNECTIONS="my-prod-db,my-staging-db"

AI Agent  ──stdio/JSON-RPC──>  mcp-azure-sql  ──Azure AD──>  Azure SQL
                                    │
                                    ├── 34 tools with MCP annotations
                                    ├── Tiered safety (read/write/dangerous)
                                    ├── Connection pool (30s ping skip)
                                    ├── Audit logging
                                    └── Error sanitization

Built with mcp-go + go-mssqldb. MCP protocol 2024-11-05. Tool annotations (ReadOnlyHint, DestructiveHint, IdempotentHint, OpenWorldHint) on all 34 tools. Logging capability enabled.

go build -o mcp-azure-sql .
go vet ./...
./mcp-azure-sql --version

Release: git tag v1.3.0 && git push origin v1.3.0 → GitHub Actions builds 6 platform binaries via GoReleaser → npm auto-publishes.

MCP Azure SQL

README