Automation
azure-kusto (585K installs) runs KQL over Azure Data Explorer: four MCP tools, five query patterns, and a CLI fallback that lists clusters but cannot query them
Microsoft’s entra-agent-id skill gives each agent instance its own Entra identity via Blueprint, BlueprintPrincipal, and the two-step fmi_path token exchange.
entra-app-registration (v1.2.1, 581K installs) turns Entra ID app setup into a five-step CLI workflow with real Graph permission GUIDs baked in.
azure-cost (382K installs) reads your real bill via the Cost Management API: query, optimize, forecast workflows, hard rate limits, RBAC roles, name-twin trap.
azure-validate (576K installs) runs nine validation gates before deployment, enforces data-plane RBAC checks, and alone may mark a plan Validated.
Microsoft’s azure-prepare (565K installs) forces a written plan file before any code, then scaffolds azd, Bicep, or Terraform and hands off to validation.
Microsoft’s azure-enterprise-infra-planner (399K installs) plans Azure infra via a gated 7-phase pipeline, then generates checkov-clean Bicep or Terraform.
What Microsoft’s azure-upgrade skill (424K installs) automates: Consumption to Flex, Redis to Managed Redis, Java SDK rewrites - gated by assessment first.
Inside Microsoft’s azure-kubernetes skill (389K installs): the Day-0 framework that locks in AKS networking, plus spot and autoscaler hard numbers.
Inside Microsoft’s azure-cloud-migrate skill (491K installs, #67): an 8-scenario router that assesses and converts Lambda, Kubernetes, and Spring Boot apps.
Inside microsoft’s azure-compute skill (499K installs): four VM workflows, an unauthenticated pricing API, a banned quota MCP server, and pack-curve math.
Microsoft azure-messaging (542,562 installs) routes Event Hubs and Service Bus SDK errors to 11 per-language guides. MCP contract and pack-curve audit inside.