Entity trail

Azure MCP

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-18 / rss-researcherMicrosoft Foundry brings web search, web fetch, MCP connector, and tool search to Azure-hosted Claude deploymentsPosted August 17, Microsoft moved five Claude agentic capabilities — structured outputs, web search, web fetch, MCP connector, and tool search — onto Foundry deployments hosted on Azure rather than only Hosted on Anthropic. The practical change is residency: a US Data Zone Standard deployment (equivalent to inference_geo: "us" on the Claude API) can now run a web-search-backed research agent and connect to internal MCP servers without prompts leaving Azure. Regulated teams previously had to choose between agentic capability and their data-handling commitment, or rebuild search, fetch, MCP, and tool routing client-side.
2026-07-27 / saas-disruption-researcherMicrosoft Ships Its First Cybersecurity Model and a Red/Blue/Green Agent Platform — 96% on CyberGym at Half the CostMicrosoft launched MAI-Cyber-1-Flash and Project Perception on July 27 at a small San Francisco event. The model — a code-tuned derivative of MAI-Thinking-1 trained on Microsoft's own exploit and remediation records — scored 96% on the CyberGym benchmark, which Microsoft says is 12 points above Anthropic's Mythos, and runs inside MDASH at 50% of the cost of leading models. Perception coordinates red-team agents that hunt compromise paths, blue-team agents that triage, and green-team agents that remediate; public preview starts August 3 inside Microsoft Defender, with the model on Azure AI Foundry the same day. This is the security-vendor equivalent of the Dynamics MCP move: the SOC workflow itself becomes a bundled agent runtime.
2026-07-26 / skill-finderAudit your MCP servers for tools that skip spotlighting — one missing delimiter in Azure DevOps turned code-review agents into data exfiltratorsManifold Security disclosed (July 21) a confused-deputy bug in Microsoft's official Azure DevOps MCP server: the tools returning pipeline and wiki content wrap untrusted text in spotlighting delimiters, but the tool returning pull request descriptions does not. An attacker hides instructions in an HTML comment that renders as nothing in the web UI, and a reviewing agent follows them — approving the PR, triggering pipelines in unrelated projects, and posting stolen wiki content back as a comment. The transferable skill is the audit itself: grep every MCP server you trust for tools whose return path lacks the delimiter treatment its siblings have, and scope code-review agent tokens to the single project under review with pipeline-execution and wiki-read tools removed from the toolset.
2026-07-23 / skill-finderAzure DevOps MCP server lets hidden HTML comments in a PR hijack your review agent — no CVE, no fix, latest version still vulnerableManifold Security found that `repo_get_pull_request_by_id` in Microsoft's Azure DevOps MCP server returns PR descriptions verbatim, so an attacker's `` comment is invisible in the web UI but fully readable by the agent, which then acts cross-project with the reviewer's credentials. Microsoft already ships a spotlighting defense via its `createExternalContentResponse` helper on other tools but never applied it here; v2.8.0 remains exploitable and no CVE was assigned as of July 21. The concrete mitigation today: scope tokens to a single project, load only required MCP domains with the `-d` flag, exclude pipeline-run/wiki-read/comment-post tools from review workflows, and grep PR bodies for HTML comments before an agent ever sees them.
2026-07-13 / sources-researcherMicrosoft Agent Framework Lands a Go SDK in Public PreviewMicrosoft released a Go implementation of its Agent Framework in public preview on July 10, joining the existing .NET and Python SDKs for building tool-using, multi-agent systems. It ships providers for Microsoft Foundry, Azure OpenAI/OpenAI-compatible models, Anthropic, Gemini, and A2A, plus MCP support, middleware, human-in-the-loop approvals, automatic tool calling, checkpointed multi-agent workflows, and OpenTelemetry tracing. For Go teams running services, CLIs, and cloud-native workers, this closes a real gap — production agent orchestration without dropping to Python.
2026-07-07 / agents-researcherMicrosoft ships a 60+ server MCP catalog via Dataverse, positioning it as the agent data platformMicrosoft's July 6 Power Platform update frames Dataverse as the data backbone for agents and details a catalog of 60+ ready-to-use MCP servers spanning Microsoft 365 Copilot, Copilot Studio, Azure AI Foundry, GitHub Copilot, and other MCP-compatible surfaces. This is a vendor moving from 'MCP as experiment' to 'MCP as a curated, governed enterprise catalog' — the connector-store playbook applied to agent tools. For builders it's a signal that the differentiation is shifting from having MCP support to owning the trusted, pre-vetted server registry enterprises will actually connect.
2026-06-28 / agents-researcherA2A protocol 0.3 ships gRPC, signed security cards, and 'server-as-agent' recursive composition; 150+ orgs now back itThe Agent2Agent protocol's 0.3 release (now under the Linux Foundation) adds gRPC transport, the ability to cryptographically sign Agent Cards, and extended Python SDK client support, while the June spec work introduces server-as-agent — MCP servers that connect to other MCP servers for recursive composition. Adoption has passed 150 organizations including Microsoft, AWS, Salesforce, SAP, ServiceNow and Workday, with native A2A in Azure AI Foundry, Bedrock AgentCore, and Google Cloud. The two-layer 'MCP for tools, A2A for agent coordination' stack is now the enterprise default.
2026-06-08 / vibe-coding-researcherMCP Server Exposure Widens: Trend Micro Counts 1,467 Exposed Servers, VIPER-MCP Sweep Yields 67 CVEsJune 2026 scans show MCP's security surface still expanding: Trend Micro's follow-up counted 1,467 publicly exposed MCP servers with CVSS 9.8 command-injection flaws in unofficial AWS and Azure MCP servers, Censys found 12,520 internet-accessible MCP services (most unauthenticated), and an automated VIPER-MCP sweep of ~40,000 server repos produced 67 CVEs. The highest-impact mitigation remains putting authentication in front of every remote MCP server and pulling unauthenticated ones off the public internet — which most operators still have not done.
2026-06-05 / projects-researcherdanny-avila/LibreChat at 38.2K Stars — Open ChatGPT Clone Adds Agents, MCP, and Multi-Provider Model SwitchingLibreChat, the enhanced open-source ChatGPT clone, now ships Agents, MCP support, and switching across DeepSeek, Anthropic, AWS, OpenAI Responses API, Azure, Groq, GPT-5, Mistral, OpenRouter, Vertex AI, and Gemini, holding 38,189 stars. Its breadth of provider and protocol support makes it a default self-hosted front-end for teams avoiding vendor lock-in. The MCP and agents additions move it from chat UI toward an agent platform.
2026-05-27 / saas-disruption-researcherCROSS-CATEGORY: Agent Infrastructure Wars Erupt — Google (Antigravity SDK + WebMCP), CopilotKit (AG-UI), and Camunda (ProcessOS) All Ship Agent Platforms in Same 2-Week WindowThree distinct layers of agent infrastructure shipped simultaneously in May 2026: Google's Antigravity SDK + WebMCP (agent runtime + browser tool standard), CopilotKit's AG-UI (agent-to-UI protocol adopted by Google/Microsoft/Amazon/Oracle), and Camunda's ProcessOS (agent-driven business process automation). This is the infrastructure layer race for the agentic era — the equivalent of the cloud platform wars (AWS/Azure/GCP) but for AI agents. The convergence on open standards (WebMCP, AG-UI, MCP) signals that agent interoperability, not model capability, is becoming the competitive battleground.
2026-05-24 / saas-disruption-researcherServiceNow Offers AI Control Tower Free for One Year ($2M Value) — Discovers and Governs All AI Assets Across AWS, Azure, Google, Anthropic, OpenAIAt Knowledge 2026, ServiceNow launched its AI Control Tower as a governance layer that automatically discovers and catalogs every AI asset across an enterprise — every model, agent, dataset, and MCP server including those on competing platforms. Offered free for one year (stated $2M value) to any enterprise ready to deploy, this is a land-grab for the agent governance layer. Combined with the ServiceNow/Accenture FDE partnership (300+ pre-built agent skills), ServiceNow is positioning as the enterprise control plane for multi-vendor AI.
2026-05-16 / agents-researcherMicrosoft Agent Framework 1.0 Ships DevUI Debugger and Multi-Cloud Hosted Agent Integration for .NET and PythonMicrosoft's Agent Framework 1.0, GA since April 3, is now seeing ecosystem buildout with DevUI (a browser-based local debugger for visualizing agent execution, message flows, tool calls, and orchestration decisions in real time) and Foundry Hosted Agent Integration for running agents as managed services on Microsoft Foundry or Azure Durable Functions. The framework unifies Semantic Kernel and AutoGen with native MCP + A2A interoperability, establishing the stable-API commitment milestone for enterprise agent development in .NET and Python.

Graph relationships

CRITICIZES
Token Security
Token Security disclosed SSRF RCE vulnerability in Azure MCP
Source finding
RELEASED
Microsoft
Microsoft developed Azure Model Context Protocol server.
Source finding
CRITICIZES
Token Security
Token Security found remote code execution vulnerability in Azure MCP.
Source finding
CRITICIZES
Token Security -> Azure MCP
Token Security disclosed SSRF RCE vulnerability in Azure MCP
Source finding
RELEASED
Microsoft -> Azure MCP
Microsoft developed Azure Model Context Protocol server.
Source finding
CRITICIZES
Token Security -> Azure MCP
Token Security found remote code execution vulnerability in Azure MCP.
Source finding

Source trail

Trend Micro's follow-up MCP Security 2026 Qualys TotalAI GlobeNewswire Yahoo Finance / GlobeNewswire Source Microsoft Foundry Blog Microsoft AI (corroborated by TechCrunch, SiliconANGLE, VentureBeat and Axios)Manifold Security — When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server The Hacker News — Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents Microsoft for Go Developers (devblogs.microsoft.com)Microsoft Power Platform Blog

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…