Az Devops Cli Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Az Devops Cli Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Azure DevOps MCP tools for Claude Code and Codex CLI — boards, work items, repos, and PRs.
# 1. Install
pip install az-devops-cli-mcp
# 2. Login (once per machine)
az login
az devops configure --defaults organization=https://dev.azure.com/YOUR_ORG
# 3. Register with Claude Code
claude mcp add az-devops-cli-mcp -- python -m az_devops_cli_mcp.server
# 4. Register with Codex CLI
codex mcp add az-devops-cli-mcp -- python -m az_devops_cli_mcp.serverRestart Claude Code or Codex CLI. All 13 tools are ready.
The server runs as a stdio process — spawned on demand by the client, no ports or background services needed.
Claude Code / Codex CLI
| spawns on demand
v
python -m az_devops_cli_mcp.server (stdin/stdout)
|
v
az CLI (your az login session)| Tool | What it does |
|---|---|
create_work_item | Create Task, Bug, User Story, Epic |
get_work_item | Get item by ID |
update_work_item | Update state, assignment, title |
set_iteration | Assign to sprint (required for Sprint board) |
query_work_items | WIQL query for bulk lookups |
link_work_items | Link items (Child, Parent, Related) |
get_work_item_relations | Verify hierarchy after linking |
add_comment | Add discussion comment / agent log |
| Tool | What it does |
|---|---|
list_prs | List PRs by status |
get_pr | Get PR details |
create_pr | Open a new PR |
link_pr_to_work_item | Trace PR to work item |
list_branches | List repo branches |
from autogen import ConversableAgent
from az_devops_cli_mcp import ALL_TOOLS, WORK_ITEM_TOOLS, REPO_TOOLS
agent = ConversableAgent(
name="devops_agent",
tools=ALL_TOOLS,
system_message="You manage Azure DevOps for LytStore..."
)| Method | How |
|---|---|
az devops configure | Preferred — org set globally for your machine |
AZURE_DEVOPS_ORG env var | Per-session override |
.env file | AZURE_DEVOPS_ORG=https://dev.azure.com/YOUR_ORG |
Destructive commands (delete, remove, destroy) are blocked at the core layer. The agent returns an error and requires explicit user confirmation.
If claude mcp add / codex mcp add aren't available, add this to your config file manually.
Claude Code — ~/.claude/claude_desktop_config.json:
{
"mcpServers": {
"az-devops-cli-mcp": {
"type": "stdio",
"command": "python",
"args": ["-m", "az_devops_cli_mcp.server"]
}
}
}Codex CLI — ~/.codex/config.json: same block.
git clone https://github.com/PraiseSinkamba/az-devops-cli-mcp
cd az-devops-cli-mcp
pip install -e ".[dev]"
pytest tests/~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.