MCP Server Policy

AZURE DEVOPS MCP POLICY

Enforce policies on every tool call to the Azure DevOps MCP Server. 84 tools listed, categorised, and ready for rules.

@azure-devops/mcp 54 read 30 write 84 tools total
azure-devops devops ci-cd work-items

GET STARTED

Download this policy scaffold and add your rules. Intercept enforces them on every tool call before it reaches Azure DevOps.

terminal

# Download policy scaffold

curl -o azure-devops.yaml https://raw.githubusercontent.com/policylayer/intercept/main/policies/azure-devops.yaml

# Run with Intercept

intercept --policy azure-devops.yaml -- npx -y @@azure-devops/mcp

Server documentation: https://github.com/microsoft/azure-devops-mcp

READ TOOLS

54

WRITE TOOLS

25

DESTRUCTIVE TOOLS

1

EXECUTE TOOLS

1

OTHER TOOLS

3

POLICY YAML

This scaffold lists every tool with empty rules. Add conditions — rate limits, argument validation, deny rules — then deploy with Intercept.

azure-devops.yaml
version: "1"
description: "Policy for @azure-devops/mcp"
default: "allow"
tools:
    mcp_ado_advsec_get_alerts:
        rules: []
    mcp_ado_advsec_get_alert_details:
        rules: []
    mcp_ado_core_list_projects:
        rules: []
    mcp_ado_core_list_project_teams:
        rules: []
    mcp_ado_core_get_identity_ids:
        rules: []
    mcp_ado_pipelines_get_builds:
        rules: []
    mcp_ado_pipelines_get_build_status:
        rules: []
    mcp_ado_pipelines_get_build_log:
        rules: []
    mcp_ado_pipelines_get_build_log_by_id:
        rules: []
    mcp_ado_pipelines_get_build_changes:
        rules: []
    mcp_ado_pipelines_get_build_definitions:
        rules: []
    mcp_ado_pipelines_get_build_definition_revisions:
        rules: []
    mcp_ado_pipelines_get_run:
        rules: []
    mcp_ado_pipelines_list_runs:
        rules: []
    mcp_ado_pipelines_list_artifacts:
        rules: []
    mcp_ado_pipelines_download_artifact:
        rules: []
    mcp_ado_repo_list_repos_by_project:
        rules: []
    mcp_ado_repo_get_repo_by_name_or_id:
        rules: []
    mcp_ado_repo_list_branches_by_repo:
        rules: []
    mcp_ado_repo_list_my_branches_by_repo:
        rules: []
    mcp_ado_repo_get_branch_by_name:
        rules: []
    mcp_ado_repo_search_commits:
        rules: []
    mcp_ado_repo_list_pull_requests_by_repo_or_project:
        rules: []
    mcp_ado_repo_list_pull_requests_by_commits:
        rules: []
    mcp_ado_repo_get_pull_request_by_id:
        rules: []
    mcp_ado_repo_list_pull_request_threads:
        rules: []
    mcp_ado_repo_list_pull_request_thread_comments:
        rules: []
    mcp_ado_repo_list_directory:
        rules: []
    mcp_ado_search_code:
        rules: []
    mcp_ado_search_wiki:
        rules: []
    mcp_ado_search_workitem:
        rules: []
    mcp_ado_testplan_list_test_plans:
        rules: []
    mcp_ado_testplan_list_test_suites:
        rules: []
    mcp_ado_testplan_list_test_cases:
        rules: []
    mcp_ado_testplan_show_test_results_from_build_id:
        rules: []
    mcp_ado_wiki_list_wikis:
        rules: []
    mcp_ado_wiki_get_wiki:
        rules: []
    mcp_ado_wiki_list_pages:
        rules: []
    mcp_ado_wiki_get_page:
        rules: []
    mcp_ado_wiki_get_page_content:
        rules: []
    mcp_ado_wit_get_work_item:
        rules: []
    mcp_ado_wit_get_work_items_batch_by_ids:
        rules: []
    mcp_ado_wit_list_work_item_comments:
        rules: []
    mcp_ado_wit_list_work_item_revisions:
        rules: []
    mcp_ado_wit_get_work_item_type:
        rules: []
    mcp_ado_wit_get_work_items_for_iteration:
        rules: []
    mcp_ado_wit_list_backlogs:
        rules: []
    mcp_ado_wit_list_backlog_work_items:
        rules: []
    mcp_ado_wit_get_query:
        rules: []
    mcp_ado_wit_get_query_results_by_id:
        rules: []
    mcp_ado_work_list_iterations:
        rules: []
    mcp_ado_work_list_team_iterations:
        rules: []
    mcp_ado_work_get_iteration_capacities:
        rules: []
    mcp_ado_work_get_team_capacity:
        rules: []
    mcp_ado_pipelines_create_pipeline:
        rules: []
    mcp_ado_pipelines_update_build_stage:
        rules: []
    mcp_ado_repo_create_branch:
        rules: []
    mcp_ado_repo_create_pull_request:
        rules: []
    mcp_ado_repo_update_pull_request:
        rules: []
    mcp_ado_repo_update_pull_request_reviewers:
        rules: []
    mcp_ado_repo_vote_pull_request:
        rules: []
    mcp_ado_repo_create_pull_request_thread:
        rules: []
    mcp_ado_repo_update_pull_request_thread:
        rules: []
    mcp_ado_repo_reply_to_comment:
        rules: []
    mcp_ado_testplan_create_test_plan:
        rules: []
    mcp_ado_testplan_create_test_suite:
        rules: []
    mcp_ado_testplan_add_test_cases_to_suite:
        rules: []
    mcp_ado_testplan_create_test_case:
        rules: []
    mcp_ado_testplan_update_test_case_steps:
        rules: []
    mcp_ado_wiki_create_or_update_page:
        rules: []
    mcp_ado_wit_create_work_item:
        rules: []
    mcp_ado_wit_update_work_item:
        rules: []
    mcp_ado_wit_update_work_items_batch:
        rules: []
    mcp_ado_wit_add_child_work_items:
        rules: []
    mcp_ado_wit_add_artifact_link:
        rules: []
    mcp_ado_wit_add_work_item_comment:
        rules: []
    mcp_ado_work_create_iterations:
        rules: []
    mcp_ado_work_assign_iterations:
        rules: []
    mcp_ado_work_update_team_capacity:
        rules: []
    mcp_ado_wit_work_item_unlink:
        rules: []
    mcp_ado_pipelines_run_pipeline:
        rules: []
    mcp_ado_wit_work_items_link:
        rules: []
    mcp_ado_wit_link_work_item_to_pull_request:
        rules: []
    mcp_ado_wit_my_work_items:
        rules: []

RELATED POLICIES

FREQUENTLY ASKED QUESTIONS

What tools does the Azure DevOps MCP server expose?

The Azure DevOps MCP Server exposes 84 tools across 5 categories: Read, Write, Destructive, Execute, Other. Each tool can be individually controlled with Intercept policies.

How do I enforce policies on Azure DevOps?

Download the policy scaffold, add rules (rate limits, argument validation, deny rules), then run Intercept as a proxy in front of the Azure DevOps MCP server. Every tool call is evaluated against your YAML policy before execution.

Is the Azure DevOps policy free to use?

Yes. All Intercept policies are open source under the Apache 2.0 licence. Download, modify, and deploy without restrictions.

ENFORCE POLICIES ON AZURE DEVOPS

Open source. One binary. Zero dependencies.