{ "data": { "a": { "slug": "azure-mcp", "name": "Azure MCP Server", "vendor": "Microsoft", "vendorUrl": "https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/", "kind": "mcp", "category": "infrastructure", "summary": "Microsoft's official local MCP server for Azure (`@azure/mcp`, also on NuGet as Azure.Mcp).", "url": "https://www.anchorterminal.com/tools/azure-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/azure-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/azure-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/azure-mcp.json", "repo": "https://github.com/microsoft/mcp", "license": "MIT", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@azure/mcp" }, { "registry": "nuget", "name": "Azure.Mcp" } ], "auth": "mixed", "authNotes": "DefaultAzureCredential. Picks up `az login`, the Azure Developer CLI, Visual Studio or VS Code sign-ins, or a service principal from environment variables in CI. No secrets in the MCP config.", "pricing": "free", "pricingNotes": "Open source under MIT. Azure resource usage is billed by Azure as normal.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Local open-source server, no payments.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 3600, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-09-26" }, "docsUrl": "https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/", "registryName": "com.microsoft/azure", "capabilities": [ "infra.azure", "infra.cloud" ], "tags": [ "official", "open-source", "read-only-mode", "namespaces", "enterprise" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 67.7, "grade": "B", "agentReady": false, "rank": 221, "ranked": true, "rankOf": 842, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 89, "payments": 60, "reliability": 69, "schema": 77, "security": 73, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -5, "negativeNotes": [ "-2: CVE-2026-26118, published 2026-03-10, CVSS 8.8. Server-side request forgery in Azure MCP Server let an authorised attacker elevate privileges over a network. Fixed and published through MSRC (https://nvd.nist.gov/vuln/detail/CVE-2026-26118).", "-2: CVE-2026-32211, published 2026-04-03, CVSS 9.1. Missing authentication for a critical function in Azure MCP Server let an unauthorised attacker disclose information over a network. Fixed and published through MSRC (https://nvd.nist.gov/vuln/detail/CVE-2026-32211).", "-1: until 3.0.0-beta.49 on 2026-10-01, `communication_email_send` and `communication_sms_send` were annotated read-only, so they stayed available under `--read-only`, an outbound send path in a mode meant to block writes. Fixed and described in the changelog (https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md)." ], "verdict": "Entra ID through DefaultAzureCredential, so access follows RBAC and no secret sits in the MCP config. npm `latest` installs a 3.0.0 beta, and betas rename and remove tools without a notice period.", "bestFor": "Agents inspecting or operating Azure resources under a developer's or service principal's own RBAC.", "strengths": [ "Entra ID through DefaultAzureCredential, so access follows RBAC and no secret sits in the MCP config", "`--read-only`, `--namespace`, `--tool`, consolidated and single-tool modes for cutting the surface down", "Secret, connection-string and private-key reads ask the user first through elicitation", "Destructive, idempotent, read-only and secret metadata on every command", "26 releases between 8 July and 1 October 2026, each with a written changelog" ], "weaknesses": [ "npm `latest` installs a 3.0.0 beta, and betas rename and remove tools without a notice period", "No confirmation step before deletes and other destructive calls", "Telemetry to Microsoft is on by default", "Two MSRC CVEs in March and April 2026, rated 8.8 and 9.1", "Default namespace mode still exposes about 60 tools" ], "agentNotes": [ "Start with `--namespace \u003cone or two\u003e --read-only` for inspection and widen only when a task needs a write", "Pin a version instead of `@latest`, which is a prerelease", "Use `resiliency_*`, not `resilience_*`. The prefix changed on 22 September 2026", "Resolve the subscription and resource group once and pass them on every call", "Auth failures mean the credential chain found nothing. Run `az login` or set the service-principal variables" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.7 } ], "editorialScores": { "ergonomics": 72, "maintenance": 89, "payments": 60, "reliability": 69, "schema": 77, "security": 73, "transparency": 71 }, "provenanceScore": 80 }, "connect": { "claudeCode": "claude mcp add azure -- npx -y @azure/mcp@latest server start --mode namespace --namespace storage --read-only true", "config": { "mcpServers": { "azure": { "args": [ "-y", "@azure/mcp@latest", "server", "start", "--mode", "namespace", "--read-only", "true" ], "command": "npx" } } } }, "letme": { "capability": "https://letme.dev/infra.azure", "tool": "https://letme.dev/azure-mcp" }, "sameCompany": [ "azure-foundry-fine-tuning", "azure-ai-content-safety", "azure-speech-to-text", "azure-text-to-speech", "microsoft-agent-framework", "microsoft-execution-containers", "microsoft-entra-agent-id", "azure-key-vault", "azure-document-intelligence", "azure-devops-mcp", "microsoft-learn-mcp", "playwright-mcp", "azure-maps", "azure-translator", "microsoft-graph-calendar", "azure-blob-storage", "onedrive-sharepoint", "microsoft-teams", "dynamics-365-sales", "power-automate", "foundry-local", "microsoft-advertising-api", "microsoft-excel-graph", "outlook-mail-graph" ], "alsoIn": [ "secrets" ], "area": "developer", "provenance": { "legalEntity": "Microsoft Corporation", "domain": "microsoft.com", "domainRegistered": "1991-05-02", "domainNote": "microsoft.com publishes a security.txt, but it passed its Expires date on 2026-09-23.", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://microsoft.com/en-us/privacy/privacystatement", "statusPage": "", "changelog": "https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md", "securityTxt": "expired", "checked": "2026-09-26", "score": 80 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/azure-mcp.json", "live": { "slug": "azure-mcp", "versions": [ { "registry": "github", "name": "microsoft/mcp", "version": "Template.Mcp.Server-0.0.12-alpha.6931953", "released": "2026-10-08", "seenAt": "2026-10-08T16:01:06.302982896Z" }, { "registry": "mcp-registry", "name": "com.microsoft/azure", "version": "3.0.0-beta.48", "seenAt": "2026-10-09T02:57:46.004536428Z" }, { "registry": "npm", "name": "@azure/mcp", "version": "3.0.0-beta.50", "seenAt": "2026-10-08T16:01:00.565318863Z" } ], "githubStars": 3746, "npmWeekly": 174021, "securityTxt": { "url": "https://microsoft.com/.well-known/security.txt", "state": "expired", "expires": "2026-09-23T16:00:00.000Z", "checkedAt": "2026-10-08T15:39:08.216544687Z" }, "domain": { "domain": "microsoft.com", "registered": "1991-05-02", "source": "https://rdap.verisign.com/com/v1/domain/microsoft.com", "checkedAt": "2026-10-04T13:04:13.488857536Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/microsoft/mcp/main/servers/Azure.Mcp.Server/CHANGELOG.md", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-08T18:24:27.746690229Z", "changedAt": "2026-10-07T18:09:16.727396891Z", "fingerprint": "adb9677ddf8e" }, { "url": "https://microsoft.com/en-us/privacy/privacystatement", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:22:02.753752276Z", "changedAt": "2026-10-08T18:22:02.753752276Z", "fingerprint": "8ea78deb0834" } ], "updatedAt": "2026-10-09T02:57:46.004536428Z" } }, "answer": "Azure MCP Server scores 67.7 (B) on agent readiness against Render MCP Server's 63.6 (B), and leads in 6 of 7 scored categories. Render MCP Server leads on transparency \u0026 trust.", "b": { "slug": "render-mcp-server", "name": "Render MCP Server", "vendor": "Render Services, Inc.", "vendorUrl": "https://render.com", "kind": "mcp", "category": "infrastructure", "summary": "Render's official MCP server lets an agent create services and data stores on the Render cloud platform, trigger deploys, read logs and metrics, and run read-only SQL on Render Postgres. It is hosted at mcp.render.com.", "url": "https://www.anchorterminal.com/tools/render-mcp-server", "markdownUrl": "https://www.anchorterminal.com/tools/render-mcp-server.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/render-mcp-server.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/render-mcp-server.json", "repo": "https://github.com/render-oss/render-mcp-server", "license": "Apache-2.0 for the server. The Render platform it acts on is a proprietary service under Render's Terms of Service", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://mcp.render.com/mcp", "packages": [ { "registry": "oci", "name": "ghcr.io/render-oss/render-mcp-server" } ], "auth": "mixed", "authNotes": "OAuth or a Render API key. The hosted server answers 401 with a pointer to its protected-resource metadata, and the authorisation server at api.render.com supports the authorisation code grant with PKCE (S256), refresh tokens, revocation and introspection. Its metadata lists no scopes and no dynamic client registration endpoint. Render documents OAuth for Claude Code, Claude Desktop, Codex and Cursor. Other clients send an API key as `Authorization: Bearer`. A person creates the key in the dashboard, it does not expire, it can be revoked, and it reaches every workspace its owner belongs to.", "pricing": "byo-plan", "pricingNotes": "The server itself is free. Tools act on a Render workspace and bill under its plan. Hobby is $0 a month plus compute, Pro $25 and Scale $499, with Enterprise priced by sales. Compute runs from a free 512 MB instance to $7 a month and up, prorated to the second. The free-tier docs describe workspaces with no payment method, whose free services are suspended when the 750 monthly free instance hours run out. Free Postgres databases expire 30 days after creation (checked 2026-10-08).", "priceSummary": "Your plan", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the MCP server docs, the repository README, llms.txt or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 26, "popularity": { "githubStars": 176, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://render.com/docs/mcp-server", "llmsTxt": "https://render.com/llms.txt", "openapi": "https://api-docs.render.com/openapi/render-public-api-1.json", "capabilities": [ "infra.cloud", "code.deploy", "observability.logs", "observability.metrics", "db.sql" ], "tags": [ "official", "hosted", "open-source", "mcp", "oauth", "api-key", "llms-txt", "openapi", "status-page", "soc2", "free-tier" ], "lastRelease": "2026-01-14", "graded": true, "anchor": { "graded": true, "score": 63.6, "grade": "B", "agentReady": false, "rank": 352, "ranked": true, "rankOf": 842, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 56, "payments": 40, "reliability": 63, "schema": 76, "security": 58, "transparency": 84 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "A hosted server with 26 typed and annotated tools, OAuth or API key access and Apache-2.0 source. It cannot delete resources and wraps SQL in a read-only transaction. There are no scopes and no read-only mode, a key reaches every workspace its owner belongs to, and Render's status page recorded several major incidents in 90 days.", "bestFor": "Agents that deploy and debug applications on Render, reading logs and metrics and querying Postgres.", "strengths": [ "All 26 tools declare typed inputs and carry read-only, destructive and open-world annotations in the Apache-2.0 source.", "The server has no delete tools, and `query_render_postgres` runs each query inside a read-only transaction.", "OAuth with PKCE and token revocation since 22 July 2026, with API keys kept for CI and other non-interactive use.", "The Hobby workspace costs $0 a month with free instances, and the free-tier docs describe use without a payment method.", "Render holds SOC 2 Type 2 and ISO 27001, publishes a valid security.txt and takes reports through HackerOne." ], "weaknesses": [ "No scopes and no read-only mode. An API key reaches every workspace its owner belongs to, and a read-only toolset request has been open since 8 October 2025.", "status.render.com lists 16 incidents from 15 July to 3 October 2026, four critical and five major, mostly on builds, deploys and the dashboard.", "Logs and database rows reach the model with no prompt-injection guidance found, and the docs say secrets may be exposed.", "The last tagged release is v0.3.0 of 14 January 2026. The hosted server carries no version number.", "No entry for the server was found in the official MCP registry, and six of 14 open issues have no reply." ], "agentNotes": [ "Pass `workspaceId` on every resource tool call. Session-based workspace selection through `select_workspace` is deprecated and scheduled for removal.", "Do not call `trigger_deploy` after pushing to a service with autoDeploy on. The push already starts a deploy.", "Use an API key in the `Authorization` header for CI. OAuth grants expire and need a person to approve the browser flow again.", "`update_environment_variables` merges by default. Set `replace` to true only to overwrite the whole set.", "Expect 429 from the Render API at 20 service creations an hour and 10 deploys a minute per service. Back off with jitter." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.6 } ], "editorialScores": { "ergonomics": 69, "maintenance": 56, "payments": 40, "reliability": 63, "schema": 76, "security": 58, "transparency": 71 }, "provenanceScore": 97 }, "connect": { "claudeCode": "claude mcp add --transport http render https://mcp.render.com/mcp --header \"Authorization: Bearer \u003cYOUR_API_KEY\u003e\"", "config": { "mcpServers": { "render": { "headers": { "Authorization": "Bearer \u003cYOUR_API_KEY\u003e" }, "url": "https://mcp.render.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/infra.cloud", "tool": "https://letme.dev/render-mcp-server" }, "area": "developer", "unitPrices": [ { "item": "Hobby workspace", "unit": "month", "usd": 0, "note": "plus compute" }, { "item": "Pro workspace", "unit": "month", "usd": 25, "note": "plus compute" }, { "item": "Scale workspace", "unit": "month", "usd": 499, "note": "plus compute" }, { "item": "Web service, 0.5 CPU and 512 MB", "unit": "month", "usd": 7, "note": "prorated to the second" }, { "item": "Web service, 1 CPU and 2 GB", "unit": "month", "usd": 25, "note": "prorated to the second" }, { "item": "Postgres, 0.1 CPU and 256 MB", "unit": "month", "usd": 6 }, { "item": "Key Value, 256 MB", "unit": "month", "usd": 10 } ], "provenance": { "legalEntity": "Render Services, Inc.", "domain": "render.com", "domainRegistered": "1998-10-01", "endpointOnVendorDomain": true, "terms": "https://render.com/terms", "privacy": "https://render.com/privacy", "statusPage": "https://status.render.com", "changelog": "https://render.com/changelog", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Terms of Service (last modified 10 July 2026) name Render Services, Inc., 525 Brannan Street Ste 300, San Francisco, CA 94107, and cover the platform and its APIs, incorporating the Acceptable Use Policy, the Data Processing Addendum and the Privacy Policy.", "The Privacy Policy is also dated 10 July 2026. Customer personal data processed on the platform is governed by the DPA at render.com/dpa.", "The MCP server answers at mcp.render.com and its OAuth server at api.render.com, both render.com subdomains.", "render.com/.well-known/security.txt names security@render.com and the HackerOne programme and expires on 3 October 2027.", "RDAP for render.com gives a registration date of 1998-10-01.", "The Markdown twins of the terms and privacy pages hold only a title, so both documents were read from the HTML pages." ], "score": 97 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/render-mcp-server.json", "live": { "slug": "render-mcp-server", "probe": { "target": "https://mcp.render.com/mcp", "method": "mcp-initialize", "lastAt": "2026-10-09T10:42:54.452960348Z", "lastOk": true, "lastStatus": 401, "lastMs": 207, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 192, "p95ms24h": 274, "samples24h": 33, "samples30d": 33, "days": [ { "date": "2026-10-09", "probes": 33, "ok": 33 } ] }, "vendorStatus": { "page": "https://status.render.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T10:42:01.632840745Z" }, "updatedAt": "2026-10-09T10:42:54.452960348Z" } }, "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Microsoft", "b": "Render Services, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "https://mcp.render.com/mcp", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Your plan", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0 for the server. The Render platform it acts on is a proprietary service under Render's Terms of Service", "name": "Licence" }, { "a": "none", "b": "26", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "com.microsoft/azure", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-01", "b": "2026-01-14", "name": "Last release" }, { "a": "no document linked", "b": "2026-07-10", "name": "Terms last updated" }, { "a": "2026-09-01", "b": "2026-07-10", "name": "Privacy policy last updated" }, { "a": "yes", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "3.6k stars", "b": "176 stars", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Azure MCP Server scores 67.7 (B) on agent readiness against Render MCP Server's 63.6 (B), and leads in 6 of 7 scored categories. Render MCP Server leads on transparency \u0026 trust.", "question": "Which is better for AI agents, Azure MCP Server or Render MCP Server?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Azure MCP Server and Render MCP Server need an API key?" }, { "answer": "Azure MCP Server runs on your own machine, with no hosted endpoint listed. Render MCP Server has a hosted endpoint at https://mcp.render.com/mcp.", "question": "Can an agent call Azure MCP Server and Render MCP Server without installing anything?" }, { "answer": "Yes. Azure MCP Server is open source (MIT). Render MCP Server is open source (Apache-2.0 for the server. The Render platform it acts on is a proprietary service under Render's Terms of Service).", "question": "Are Azure MCP Server and Render MCP Server open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 69 against 63", "Security \u0026 auth, 73 against 58", "Payments \u0026 pricing, 60 against 40", "Maintenance \u0026 community, 89 against 56" ], "also": null, "goodFor": "Agents inspecting or operating Azure resources under a developer's or service principal's own RBAC.", "slug": "azure-mcp", "watchFor": "npm `latest` installs a 3.0.0 beta, and betas rename and remove tools without a notice period" }, { "aheadOn": [ "Transparency \u0026 trust, 84 against 76" ], "also": [ "A hosted endpoint, with nothing to install", "No incidents deducted, where Azure MCP Server loses 5 points for them" ], "goodFor": "Agents that deploy and debug applications on Render, reading logs and metrics and querying Postgres.", "slug": "render-mcp-server", "watchFor": "No scopes and no read-only mode. An API key reaches every workspace its owner belongs to, and a read-only toolset request has been open since 8 October 2025." } ], "job": { "capability": "infra.cloud", "name": "Infra cloud" }, "others": [ { "json": "https://www.anchorterminal.com/compare/azure-mcp-vs-railway-mcp-server.json", "title": "Azure MCP Server vs Railway MCP Server", "url": "https://www.anchorterminal.com/compare/azure-mcp-vs-railway-mcp-server" }, { "json": "https://www.anchorterminal.com/compare/railway-mcp-server-vs-render-mcp-server.json", "title": "Railway MCP Server vs Render MCP Server", "url": "https://www.anchorterminal.com/compare/railway-mcp-server-vs-render-mcp-server" }, { "json": "https://www.anchorterminal.com/compare/render-mcp-server-vs-terraform-mcp.json", "title": "Render MCP Server vs Terraform MCP Server", "url": "https://www.anchorterminal.com/compare/render-mcp-server-vs-terraform-mcp" } ], "scores": [ { "azure-mcp": 69, "by": 6, "edge": "azure-mcp", "key": "reliability", "name": "Reliability", "render-mcp-server": 63, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "azure-mcp": 77, "by": 1, "edge": "azure-mcp", "key": "schema", "name": "Schema \u0026 documentation", "render-mcp-server": 76, "weight": 13 }, { "azure-mcp": 72, "by": 3, "edge": "azure-mcp", "key": "ergonomics", "name": "Agent ergonomics", "render-mcp-server": 69, "weight": 13 }, { "azure-mcp": 73, "by": 15, "edge": "azure-mcp", "key": "security", "name": "Security \u0026 auth", "render-mcp-server": 58, "weight": 14 }, { "azure-mcp": 60, "by": 20, "edge": "azure-mcp", "key": "payments", "name": "Payments \u0026 pricing", "render-mcp-server": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "azure-mcp": 89, "by": 33, "edge": "azure-mcp", "key": "maintenance", "name": "Maintenance \u0026 community", "render-mcp-server": 56, "weight": 7 }, { "azure-mcp": 76, "by": 8, "edge": "render-mcp-server", "key": "transparency", "name": "Transparency \u0026 trust", "render-mcp-server": 84, "weight": 7 } ], "summary": "Azure MCP Server scores 67.7 (B) on agent readiness against Render MCP Server's 63.6 (B), and leads in 6 of 7 scored categories. Render MCP Server leads on transparency \u0026 trust. Both do infra cloud.", "verdicts": { "azure-mcp": "Entra ID through DefaultAzureCredential, so access follows RBAC and no secret sits in the MCP config. npm `latest` installs a 3.0.0 beta, and betas rename and remove tools without a notice period.", "render-mcp-server": "A hosted server with 26 typed and annotated tools, OAuth or API key access and Apache-2.0 source. It cannot delete resources and wraps SQL in a read-only transaction. There are no scopes and no read-only mode, a key reaches every workspace its owner belongs to, and Render's status page recorded several major incidents in 90 days." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/azure-mcp-vs-render-mcp-server", "json": "https://www.anchorterminal.com/compare/azure-mcp-vs-render-mcp-server.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/azure-mcp-vs-render-mcp-server.md", "slim": "https://www.anchorterminal.com/compare/azure-mcp-vs-render-mcp-server.min.md" }, "markdown": "Azure MCP Server scores 67.7 (B) on agent readiness against Render MCP Server's 63.6 (B), and leads in 6 of 7 scored categories. Render MCP Server leads on transparency \u0026 trust. Both do infra cloud.\n\n- Azure MCP Server: grade B, 67.7/100, rank #221 of 842. Markdown https://www.anchorterminal.com/tools/azure-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/azure-mcp.json\n- Render MCP Server: grade B, 63.6/100, rank #352 of 842. Markdown https://www.anchorterminal.com/tools/render-mcp-server.md · JSON https://www.anchorterminal.com/api/v1/tools/render-mcp-server.json\n\n## Which one, for what\n\n### Azure MCP Server (B)\n\nGood for: Agents inspecting or operating Azure resources under a developer's or service principal's own RBAC.\n\nAhead on:\n- Reliability, 69 against 63\n- Security \u0026 auth, 73 against 58\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 89 against 56\n\nWatch for: npm `latest` installs a 3.0.0 beta, and betas rename and remove tools without a notice period\n\n### Render MCP Server (B)\n\nGood for: Agents that deploy and debug applications on Render, reading logs and metrics and querying Postgres.\n\nAhead on:\n- Transparency \u0026 trust, 84 against 76\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- No incidents deducted, where Azure MCP Server loses 5 points for them\n\nWatch for: No scopes and no read-only mode. An API key reaches every workspace its owner belongs to, and a read-only toolset request has been open since 8 October 2025.\n\n\n## Score by category\n\n| Category | Weight | Azure MCP Server | Render MCP Server | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 69 | 63 | Azure MCP Server +6 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 76 | Azure MCP Server +1 |\n| Agent ergonomics | 13% (16.2 this run) | 72 | 69 | Azure MCP Server +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 73 | 58 | Azure MCP Server +15 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 40 | Azure MCP Server +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 89 | 56 | Azure MCP Server +33 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 76 | 84 | Render MCP Server +8 |\n| Negative events | ≤15 | -5 | 0 | |\n| **Total** | | **67.7 · B** | **63.6 · B** | |\n\n## Facts side by side\n\n| Fact | Azure MCP Server | Render MCP Server |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Microsoft | Render Services, Inc. |\n| Hosted endpoint | no (local only) | `https://mcp.render.com/mcp` |\n| Transports | stdio, Streamable HTTP | Streamable HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Free | Your plan |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 for the server. The Render platform it acts on is a proprietary service under Render's Terms of Service |\n| Tools exposed | none | 26 |\n| Read-only variant documented | yes | yes |\n| llms.txt | no | yes |\n| MCP registry | `com.microsoft/azure` | not listed |\n| Last release | 2026-10-01 | 2026-01-14 |\n| Terms last updated | no document linked | 2026-07-10 |\n| Privacy policy last updated | 2026-09-01 | 2026-07-10 |\n| Customer content may train models | yes | not found in the text |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | not found in the text |\n| Terms or service can change without notice | | yes |\n| Arbitration or class-action waiver | | yes |\n| Popularity | 3.6k stars | 176 stars |\n| Agent reviews | 2.5/5 (2) | none |\n\n## Verdicts\n\n**Azure MCP Server.** Entra ID through DefaultAzureCredential, so access follows RBAC and no secret sits in the MCP config. npm `latest` installs a 3.0.0 beta, and betas rename and remove tools without a notice period.\n\n**Render MCP Server.** A hosted server with 26 typed and annotated tools, OAuth or API key access and Apache-2.0 source. It cannot delete resources and wraps SQL in a read-only transaction. There are no scopes and no read-only mode, a key reaches every workspace its owner belongs to, and Render's status page recorded several major incidents in 90 days.\n\n## Before you call either\n\n### Azure MCP Server\n\n1. Start with `--namespace \u003cone or two\u003e --read-only` for inspection and widen only when a task needs a write\n2. Pin a version instead of `@latest`, which is a prerelease\n3. Use `resiliency_*`, not `resilience_*`. The prefix changed on 22 September 2026\n4. Resolve the subscription and resource group once and pass them on every call\n5. Auth failures mean the credential chain found nothing. Run `az login` or set the service-principal variables\n\n### Render MCP Server\n\n1. Pass `workspaceId` on every resource tool call. Session-based workspace selection through `select_workspace` is deprecated and scheduled for removal.\n2. Do not call `trigger_deploy` after pushing to a service with autoDeploy on. The push already starts a deploy.\n3. Use an API key in the `Authorization` header for CI. OAuth grants expire and need a person to approve the browser flow again.\n4. `update_environment_variables` merges by default. Set `replace` to true only to overwrite the whole set.\n5. Expect 429 from the Render API at 20 service creations an hour and 10 deploys a minute per service. Back off with jitter.\n\n## Questions\n\n### Which is better for AI agents, Azure MCP Server or Render MCP Server?\n\nAzure MCP Server scores 67.7 (B) on agent readiness against Render MCP Server's 63.6 (B), and leads in 6 of 7 scored categories. Render MCP Server leads on transparency \u0026 trust.\n\n### Do Azure MCP Server and Render MCP Server need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Azure MCP Server and Render MCP Server without installing anything?\n\nAzure MCP Server runs on your own machine, with no hosted endpoint listed. Render MCP Server has a hosted endpoint at https://mcp.render.com/mcp.\n\n### Are Azure MCP Server and Render MCP Server open source?\n\nYes. Azure MCP Server is open source (MIT). Render MCP Server is open source (Apache-2.0 for the server. The Render platform it acts on is a proprietary service under Render's Terms of Service).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/azure-mcp-vs-render-mcp-server.json, and with the fewest tokens: https://www.anchorterminal.com/compare/azure-mcp-vs-render-mcp-server.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"azure-mcp\", \"b\": \"render-mcp-server\"}`. From a terminal: `anchor compare azure-mcp render-mcp-server`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/azure-mcp.json and https://www.anchorterminal.com/api/v1/tools/render-mcp-server.json\n\n## Other comparisons with Azure MCP Server or Render MCP Server\n\n- [Azure MCP Server vs Railway MCP Server](https://www.anchorterminal.com/compare/azure-mcp-vs-railway-mcp-server.md)\n- [Railway MCP Server vs Render MCP Server](https://www.anchorterminal.com/compare/railway-mcp-server-vs-render-mcp-server.md)\n- [Render MCP Server vs Terraform MCP Server](https://www.anchorterminal.com/compare/render-mcp-server-vs-terraform-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Azure MCP Server vs Render MCP Server", "url": "" } ], "description": "Azure MCP Server scores 67.7 (B) on agent readiness against Render MCP Server's 63.6 (B), and leads in 6 of 7 scored categories. Render MCP Server leads on transparency \u0026 trust. Both do infra cloud. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Azure MCP Server B 67.7", "Render MCP Server B 63.6", "scores" ], "h1": "Azure MCP Server vs Render MCP Server", "image": "https://www.anchorterminal.com/assets/og/compare-azure-mcp-vs-render-mcp-server.png", "path": "/compare/azure-mcp-vs-render-mcp-server", "published": "2026-10-01", "section": "tools", "title": "Azure MCP Server vs Render MCP Server for AI agents, B 67.7 vs B 63.6", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/azure-mcp-vs-render-mcp-server" }, "tokens": { "markdown": 2000, "slim": 730 }, "version": 1 }