azure-mcp-cost-and-capacity — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited azure-mcp-cost-and-capacity (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill covers the cost, capacity, and inventory side of the azure-mcp connector: the pricing, quota, subscription, and group namespaces. All four are read-only — they answer "what would this cost", "do we have headroom", and "what exists", never "provision this".
Tool names follow the Azure MCP Server's namespace convention (azmcp / azure_mcp prefixes, grouped under pricing, quota, subscription, group). Invoke them by capability.
subscription — subscription inventoryLists the Azure subscriptions the connected service principal can see, with their IDs, display names, and state (Enabled, Disabled, Warned). This is almost always the first call in any workflow — nearly every other namespace needs a subscription ID for scope.
group — resource-group inventoryLists and inspects resource groups within a subscription: name, location, tags, and provisioning state. Use it to map the shape of an environment, find resources by tag, or pick the right scope for a pricing or quota question.
pricing — Azure retail pricingLooks up Azure retail prices from the public Azure Retail Prices API — meter rates by service, SKU, region, and currency. This gives list pricing, not the customer's negotiated or EA/CSP pricing, and not actual billed consumption. Treat its output as an estimate baseline.
quota — quota & usage limitsReports subscription quotas and current usage for a resource provider and region — e.g. vCPU quota for a VM family, public IP count, network interface count. Each entry shows the limit, current usage, and therefore the remaining headroom.
Before someone scales a deployment or stands up new resources, confirm there is headroom:
Microsoft.Compute vCPUs in eastus).limit - usage. If headroom is insufficient, report the exact shortfall and the region — a quota increase is a separate, write/support action outside this connector.Catching this before deployment avoids a half-failed rollout when Azure rejects the request at limit.
When asked "what would X cost":
For what a customer actually spent, that is consumption/billing data — the pricing namespace does not provide it. Cost-saving opportunities on existing spend come from Azure Advisor's Cost recommendations (see the observability skill).
For an environment audit or onboarding discovery:
Disabled or Warned.Run quota across the key providers (Microsoft.Compute, Microsoft.Network, Microsoft.Storage) for the regions a customer uses, and produce a headroom table. Quotas above ~80% usage are worth a proactive quota-increase request before they block growth.
pricing returns public retail rates only. It is an estimation baseline, never the customer's billed amount.subscription only shows subscriptions where the service principal holds a role assignment. A "missing" subscription usually means a missing Reader assignment, not a deleted subscription.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.