Live on Azure MCP Server

Manage Microsoft 365
with plain English.

IntuneIQ is an MCP server that connects Claude to your Microsoft 365 tenant. Query users, devices, groups, and licenses — no portal required.

Get Early Access See how it works
Claude Desktop — IntuneIQ
You › Which users haven't logged in for 30+ days and still have active E3 licenses?

▸ intuneiq:find_users — searching tenant...
▸ intuneiq:get_user_licenses — checking each user...
Found 12 users with E3 licenses, last login >30 days:

sarah.chen@contoso.com — Last login: 47 days ago · E3 active
james.liu@contoso.com — Last login: 61 days ago · E3 active
anna.wolf@contoso.com — Last login: 38 days ago · E3 active
... and 9 more.

You › Remove E3 from james.liu — he left the company.
Built on
How it works

Set up once.
Ask forever.

Three steps from zero to querying your live Microsoft 365 tenant from Claude Desktop.

01
🔑

Register an app in Azure

Create an Azure app registration with the Microsoft Graph permissions you need. Admin consent takes 60 seconds in the portal.

TENANT_ID=your-tenant-id
CLIENT_ID=your-app-id
CLIENT_SECRET=your-secret
02
🔌

Connect IntuneIQ to Claude

Add IntuneIQ as an MCP server in your Claude Desktop config. It connects over HTTP to our live Azure endpoint — no local installation required.

{
  "intuneiq": {
    "url": "https://intuneiq.com/sse"
  }
}
03
💬

Ask Claude anything

IntuneIQ gives Claude 14 tools to query and manage your tenant. Ask in plain English — Claude picks the right tool automatically.

› "Show me all noncompliant
  devices in East region"

› "Assign E5 license to
  sarah@contoso.com"
Tools

14 tools.
Everything you need.

Read-only tools for safe exploration. Write tools with confirmation prompts and full audit logging.

10 Read Tools
🔍
find_users
Search users by name, email, department, or any attribute
👤
get_user_details
Full user profile — title, department, manager, sign-in status
📋
get_user_licenses
All assigned Microsoft 365 licenses for a user
👥
get_user_groups
Group and team memberships for any user
💻
list_user_devices
All Intune-managed devices registered to a user
🛡️
get_device_compliance
Compliance state, policies, and last sync time for a device
⚠️
list_noncompliant_devices
Tenant-wide audit of all devices out of compliance
🏷️
search_groups
Find Entra ID groups by name or description
👫
get_group_members
All members of a group or distribution list
📊
list_tenant_licenses
Org-wide license inventory — consumed vs available
4 Write Tools Pro
➕
add_group_member
Add a user to an Entra ID group or team — confirmation required
➖
remove_group_member
Remove a user from a group — confirmation required
📝
assign_license
Assign a Microsoft 365 license to a user — confirmation required
🔒
retire_device
Retire an Intune-managed device — confirmation required
Example prompts
Show me all users without MFA and with admin roles
→ find_users + get_user_details
Which E5 licenses are unused this month?
→ list_tenant_licenses
Add everyone on the engineering team to the Azure DevOps group
→ get_group_members + add_group_member
Security

Enterprise-grade guardrails.
Every write is audited.

IntuneIQ was built for IT teams that can't afford accidents. Four layers of protection on every call.

4
Security layers on every write
0
Unconfirmed writes ever executed
100%
Calls logged to audit trail
60/min
Max calls per tenant (rate limit)
🔐

Confirmation Pattern

Every write tool shows a preview of the action before executing. Claude must call the tool twice with confirm=true to proceed — no silent mutations.

📋

Audit Logging

Every tool call — read or write — is written to a JSON audit log with timestamp, action, user, tenant, and outcome. PREVIEW actions are logged before confirmation.

✅

Input Validation

All user-supplied values are validated before hitting Microsoft Graph. Invalid UPNs, malformed GUIDs, and empty fields are rejected at the boundary and logged as REJECTED.

⏱️

Rate Limiting

Sliding window rate limiter caps calls at 60 per minute per tenant. Exceeded limits are logged and rejected before any Graph API call is made. Free tier: 100 calls/day.

Pricing

Simple, honest pricing.

Start free. Upgrade when you need write access or more tenants.

Free
$0
/mo
For individuals exploring AI-powered IT management. No credit card required.
  • ✓ 10 read-only tools
  • ✓ 100 calls/day
  • ✓ 1 tenant
  • ✓ Claude Desktop + API access
  • — Write tools
  • — Audit log export
  • — Priority support
Get started free
Most Popular
Pro
$39
/mo
For IT admins who need full read + write access and unlimited queries.
  • ✓ All 14 tools (read + write)
  • ✓ Unlimited calls
  • ✓ 1 tenant
  • ✓ Claude Desktop + API access
  • ✓ Full audit log (JSON + export)
  • ✓ Priority email support
  • — Multi-tenant
Get Pro access
MSP
$199
/mo
For Managed Service Providers managing multiple client tenants.
  • ✓ All 14 tools (read + write)
  • ✓ Unlimited calls
  • ✓ Up to 25 tenants
  • ✓ Tenant switcher in Claude
  • ✓ Audit logs per client
  • ✓ Usage dashboard
  • ✓ Dedicated support
Contact for MSP access
⚡ Early Access

Get early access.

IntuneIQ is live and running on Azure. Payments are coming soon — drop your email and we'll reach out when billing is wired up. Early adopters get 3 months Pro free.

✓ You're on the list — we'll be in touch.
Or email directly: hello@intuneiq.com  ·  View on GitHub