MCP Servers

33 servers, 4 of them shared by every product. Generated from .claude/mcps/.mcp-enterprise.json on 2026-09-11 — do not edit this page by hand; run task mcp:docs instead.

Every server listed here was observed reporting Connected by claude mcp list before it was added. Servers that failed to start were removed rather than documented; the removal log lives in _meta.dropped_servers in the source of truth.

How a server reaches a project

Two delivery paths, one source of truth.

Core servers ship inside the adlc-mcp-core plugin. The plugin is installed once at user scope, so it reaches every project on the machine whether or not that project shares the framework's .claude directory. Core servers never appear in a project's .mcp.json.

Product servers are written into each project's root .mcp.json by the generator, based on the server's target list. Regenerate with task mcp:profile:regenerate; check for drift with task mcp:profile:check.

.claude/mcps/.mcp-enterprise.json   (source of truth)
        |
        |-- --plugin       --> .claude/plugins/adlc-mcp-core/.mcp.json  (every project)
        |-- --all-targets  --> <project>/.mcp.json                      (per product)
        '-- --all          --> .claude/mcps/profiles/<persona>.json     (per session)

Core servers

Available in every project, through the plugin.

Server	Transport	Invocation
atlassian-rovo	HTTP	https://mcp.atlassian.com/v1/mcp
atlassian-tools	uvx	uvx mcp-atlassian==0.23.1
context7	npx	npx -y @upstash/context7-mcp@4.0.7
github	HTTP	https://api.githubcopilot.com/mcp/readonly

Per-server detail (what it does, tools, how to enable, env vars, runbook): see Server reference below.

Servers by product

Product	Path	Product servers
adlc-framework	/Volumes/Working/projects/adlc-framework	2
command-center	/Volumes/Working/projects/command-center	9
cloudops-runbooks	/Volumes/Working/projects/cloudops	8
devops-terraform	/Volumes/Working/projects/devops-terraform	4
finops-focus	/Volumes/Working/projects/finops-focus	4
platform-idp	/Volumes/Working/projects/platform-idp	4
commerce	/Volumes/Working/projects/b2b-commerce	4
b2b-metering	/Volumes/Working/projects/b2b-metering	11
os-ui	/Volumes/Working/projects/os-ui	3
ai-job-search	/Volumes/Working/projects/ai-job-search	6
runbooks	/Volumes/Working/projects/cloudops/runbooks	0

adlc-framework

markitdown, playwright-automation

command-center

awslabs-api, awslabs-billing-cost-management, awslabs-ecs, awslabs-network, azure, microsoft-fabric, microsoft-fabric-rti, playwright-automation, vizro-analytics

cloudops-runbooks

awslabs-api, awslabs-billing-cost-management, awslabs-ecs, awslabs-iac, awslabs-network, azure, terraform, vizro-analytics

devops-terraform

awslabs-api, awslabs-iac, azure, terraform

finops-focus

awslabs-api, awslabs-billing-cost-management, azure, vizro-analytics

platform-idp

awslabs-api, awslabs-ecs, awslabs-iac, terraform

commerce

awslabs-api, awslabs-iac, playwright-automation, terraform

b2b-metering

awslabs-billing-cost-management, awslabs-ecs, awslabs-iac, awslabs-network, azure, grafana, microsoft-fabric, microsoft-fabric-rti, notion, playwright-automation, vizro-analytics

os-ui

azure, playwright-automation, vizro-analytics

ai-job-search

gcal, gmail, markitdown, ms365, notion, playwright-automation

Product servers

Local servers only — written into a project's root .mcp.json by the generator. Claude Platform connectors are listed separately below; they are never written into .mcp.json.

Server	Transport	Products	Personas
aws-mcp	uvx	0	—
awslabs-api	uvx	6	reviewer, portfolio-enterprise, portfolio-startup
awslabs-billing-cost-management	uvx	4	executive, reviewer, portfolio-enterprise, portfolio-startup
awslabs-ecs	uvx	4	reviewer, portfolio-enterprise
awslabs-iac	uvx	5	reviewer, portfolio-enterprise
awslabs-network	uvx	3	reviewer, portfolio-enterprise
azure	npx	6	executive, security-engineer, portfolio-enterprise
azure-resource-manager-bc	uvx	0	—
azure-resource-manager-vc	uvx	0	—
gcal	tools/mcp_mail.sh	1	—
gmail	tools/mcp_mail.sh	1	—
grafana	uvx	1	—
markitdown	uvx	2	—
microsoft-fabric	npx	2	—
microsoft-fabric-rti	uvx	2	—
ms365	tools/mcp_mail.sh	1	—
notion	HTTP	2	—
playwright-automation	npx	6	—
terraform	docker	4	—
vizro-analytics	uvx	5	executive

Per-server detail: see Server reference below.

Claude Platform connectors

Managed in claude.ai via OAuth, per-session — never written into any project's .mcp.json. Listed here so the catalog shows the whole surface, not just what the generator writes to disk.

Server	Endpoint	Auth	Status
asana	https://mcp.asana.com/v2/mcp	oauth	verified
databricks	(not published)	oauth	needs admin setup
gmail-connector	https://gmailmcp.googleapis.com/mcp/v1	oauth	verified
google-calendar-connector	https://calendarmcp.googleapis.com/mcp/v1	oauth	verified
hubspot	https://mcp.hubspot.com/anthropic	oauth	verified
microsoft-365	https://microsoft365.mcp.claude.com/mcp	oauth	verified
salesforce	https://api.salesforce.com/platform/mcp/v1/platform/headless-360	oauth	needs admin setup
slack	https://mcp.slack.com/mcp	oauth	requires_slack_app_registration
snowflake	(not published)	oauth	needs admin setup

Per-server detail: see Server reference below.

Server reference

One section per server (core, product, and connector) with its own anchor (#<server-name>) for direct linking from the catalog page and the matrix.

asana

Manage projects, tasks, and team workflows in Asana.

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: b2b-metering/README/claude-platform/CONNECTORS_AND_VAULTS.md

atlassian-rovo

Query Atlassian products and documentation with enterprise AI.

• Tools: not measured (not_evaluated: not present in probe evidence)
• Runs in: every project, via the adlc-mcp-core plugin
• Enable: Ships automatically once the adlc-mcp-core plugin is installed at user scope.
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: —

atlassian-tools

Access Jira issues and Confluence pages.

• Tools: 58 — jira_get_user_profile, jira_search_assignable_users, jira_get_issue_watchers, jira_get_issue, jira_search, jira_search_fields, jira_get_field_options, jira_get_project_issues, jira_get_transitions, jira_get_worklog, jira_download_attachments, jira_get_issue_images, jira_get_agile_boards, jira_get_board_issues, jira_get_sprints_from_board, jira_get_sprint_issues, jira_get_link_types, jira_batch_get_changelogs, jira_get_project_issue_types, jira_get_create_fields, jira_get_project_versions, jira_get_project_components, jira_get_all_projects, jira_search_projects, jira_get_project_fields, jira_get_service_desk_for_project, jira_get_service_desk_queues, jira_get_queue_issues, jira_get_request_types, jira_get_request_type_fields, jira_get_issue_proforma_forms, jira_get_proforma_form_details, jira_get_issue_dates, jira_get_issue_sla, jira_get_issue_development_info, jira_get_issues_development_info, jira_get_project_epic_hierarchy, jira_get_cross_project_dependencies, confluence_search, confluence_get_page, confluence_get_page_children, confluence_get_space_page_tree, confluence_get_comments, confluence_get_labels, confluence_get_inline_comments, confluence_search_user, confluence_get_page_history, confluence_get_page_diff, confluence_get_page_views, confluence_get_attachments, confluence_download_attachment, confluence_download_content_attachments, confluence_get_page_images, confluence_list_page_templates, confluence_get_page_template, confluence_get_page_restrictions, confluence_check_content_permissions, confluence_get_space_permissions
• Runs in: every project, via the adlc-mcp-core plugin
• Enable: Ships automatically once the adlc-mcp-core plugin is installed at user scope.
• Env vars: CONFLUENCE_API_TOKEN, CONFLUENCE_URL, CONFLUENCE_USERNAME, JIRA_API_TOKEN, JIRA_URL, JIRA_USERNAME, READ_ONLY_MODE
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

aws-mcp

Query AWS resources and services across your accounts.

• Tools: not measured (not_evaluated: not present in probe evidence)
• Runs in: no product target (slice-only)
• Enable: Not written by --target/--all-targets. Loaded only as part of a preserved slice — see _meta.slices and task mcp:profile:regenerate.
• Env vars: AWS_PROFILE, AWS_REGION
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

awslabs-api

Call AWS APIs and discover relevant AWS commands.

• Tools: 2 — suggest_aws_commands, call_aws
• Runs in: cloudops-runbooks, command-center, commerce, devops-terraform, finops-focus, platform-idp
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL, READ_OPERATIONS_ONLY, REQUIRE_MUTATION_CONSENT
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

awslabs-billing-cost-management

Analyze AWS costs, budgets, savings plans, and optimization opportunities.

• Tools: 45 — aws-pricing, bcm-pricing-calc, budget-actions, budget-notifications, budgets, compute-optimizer, compute-optimizer-automation, cost-anomaly, cost-comparison, cost-explorer, cost-optimization, credits, describe-cost-category-definition, enterprise_support, free-tier-usage, get-billing-group-cost-report, get-billing-preferences, get-billing-view, get-resource-policy, invoice-units, invoicing, list-account-associations, list-billing-group-cost-reports, list-billing-groups, list-billing-views, list-cost-allocation-tag-backfill-history, list-cost-allocation-tags, list-cost-category-definitions, list-custom-line-item-versions, list-custom-line-items, list-pricing-plans, list-pricing-plans-for-rule, list-pricing-rules, list-pricing-rules-for-plan, list-resources-associated-to-custom-line-item, list-source-views-for-billing-view, procurement-preferences, rec-details, ri-performance, session-sql, sp-explorer, sp-performance, sp-purchase-analyzer, sp-recommendation, storage-lens
• Runs in: b2b-metering, cloudops-runbooks, command-center, finops-focus
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

awslabs-ecs

Containerize applications and manage Amazon ECS services and tasks.

• Tools: 9 — aws_knowledge_aws___read_documentation, aws_knowledge_aws___search_documentation, build_and_push_image_to_ecr, containerize_app, delete_app, ecs_resource_management, ecs_troubleshooting_tool, validate_ecs_express_mode_prerequisites, wait_for_service_ready
• Runs in: b2b-metering, cloudops-runbooks, command-center, platform-idp
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: ALLOW_SENSITIVE_DATA, ALLOW_WRITE, AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

awslabs-iac

Validate, troubleshoot and research CloudFormation and CDK infrastructure as code (no create/update/delete tools).

• Tools: 9 — validate_cloudformation_template, check_cloudformation_template_compliance, troubleshoot_cloudformation_deployment, get_cloudformation_pre_deploy_validation_instructions, search_cdk_documentation, search_cloudformation_documentation, search_cdk_samples_and_constructs, cdk_best_practices, read_iac_documentation_page
• Runs in: b2b-metering, cloudops-runbooks, commerce, devops-terraform, platform-idp
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

awslabs-network

Analyze VPC routing, transit gateway paths, and network flow logs.

• Tools: 27 — detect_cwan_inspection, detect_tgw_inspection, find_ip_address, get_all_cwan_routes, get_all_tgw_routes, get_cwan, get_cwan_attachment, get_cwan_logs, get_cwan_peering, get_cwan_routes, get_eni_details, get_firewall_flow_logs, get_firewall_rules, get_path_trace_methodology, get_tgw, get_tgw_flow_logs, get_tgw_routes, get_vpc_flow_logs, get_vpc_network, list_core_networks, list_cwan_peerings, list_firewalls, list_tgw_peerings, list_transit_gateways, list_vpcs, list_vpn_connections, simulate_cwan_route_change
• Runs in: b2b-metering, cloudops-runbooks, command-center
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: AWS_PROFILE, AWS_REGION, FASTMCP_LOG_LEVEL
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

azure

Query Azure services, resources, and best practices across subscriptions.

• Tools: 60 — documentation, azd, foundry, get_azure_bestpractices, aks, appconfig, applens, appservice, role, datadog, managedlustre, azureterraformbestpractices, deploy, deviceregistry, eventgrid, acr, advisor, bicepschema, cosmos, cloudarchitect, communication, compute, confidentialledger, containerapps, eventhubs, fileshares, foundryextensions, functionapp, functions, grafana, keyvault, kusto, loadtesting, marketplace, quota, monitor, applicationinsights, mysql, policy, postgres, pricing, redis, resourcehealth, search, speech, servicebus, servicefabric, signalr, sql, storage, storagesync, virtualdesktop, wellarchitectedframework, workbooks, group_list, group_resource_list, subscription_list, extension_azqr, extension_cli_generate, extension_cli_install
• Runs in: b2b-metering, cloudops-runbooks, command-center, devops-terraform, finops-focus, os-ui
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: AZURE_MCP_COLLECT_TELEMETRY, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

azure-resource-manager-bc

Access Azure resources in a separate customer subscription (read-only).

• Tools: 174 — microsoft_docs_search, microsoft_code_sample_search, microsoft_docs_fetch, foundry_evaluation_comparison_get, foundry_evaluation_get, foundry_session_get, foundry_evaluation_suite_generation_job_get, foundry_session_file_list, foundry_toolbox_version_get, foundry_agent_get, foundry_agent_container_status_get, foundry_toolbox_get, foundry_evaluation_suite_get, foundry_continuous_eval_get, foundry_session_list, foundry_evaluation_dataset_get, foundry_session_logstream, foundry_evaluator_catalog_get, foundry_session_file_stat, foundry_evaluation_dataset_versions_get, foundry_evaluator_generation_job_get, foundry_agent_definition_schema_get, foundry_data_generation_job_get, foundry_evaluation_dataset_sas_url_get, foundry_session_file_download, acr_registry_list, acr_registry_repository_list, advisor_recommendation_list, aks_cluster_get, aks_nodepool_get, appconfig_account_list, appconfig_kv_get, applens_resource_diagnose, applicationinsights_recommendation_list, appservice_webapp_deployment_get, appservice_webapp_diagnostic_diagnose, appservice_webapp_diagnostic_list, appservice_webapp_get, appservice_webapp_settings_get-appsettings, azureterraformbestpractices_get, bicepschema_get, cloudarchitect_design, communication_email_send, communication_sms_send, compute_disk_get, compute_vm_get, compute_vmss_get, confidentialledger_entries_get, containerapps_list, cosmos_database_container_item_query, cosmos_list, datadog_monitoredresources_list, deploy_app_logs_get, deploy_architecture_diagram_generate, deploy_iac_rules_get, deploy_pipeline_guidance_get, deploy_plan_get, deviceregistry_namespace_list, eventgrid_subscription_list, eventgrid_topic_list, eventhubs_eventhub_consumergroup_get, eventhubs_eventhub_get, eventhubs_namespace_get, extension_azqr, extension_cli_generate, extension_cli_install, fileshares_fileshare_check-name-availability, fileshares_fileshare_get, fileshares_fileshare_peconnection_get, fileshares_fileshare_snapshot_get, fileshares_limits, fileshares_rec, fileshares_usage, foundryextensions_knowledge_index_list, foundryextensions_knowledge_index_schema, foundryextensions_openai_chat-completions-create, foundryextensions_openai_create-completion, foundryextensions_openai_embeddings-create, foundryextensions_openai_models-list, foundryextensions_resource_get, functionapp_get, functions_language_list, functions_project_get, functions_template_get, get_azure_bestpractices_ai_app, get_azure_bestpractices_get, grafana_list, group_list, group_resource_list, keyvault_admin_settings_get, keyvault_certificate_get, keyvault_key_get, keyvault_secret_get, kusto_cluster_get, kusto_cluster_list, kusto_database_list, kusto_query, kusto_sample, kusto_table_list, kusto_table_schema, loadtesting_test_get, loadtesting_testresource_list, loadtesting_testrun_get, managedlustre_fs_blob_autoexport_get, managedlustre_fs_blob_autoimport_get, managedlustre_fs_blob_import_get, managedlustre_fs_list, managedlustre_fs_sku_get, managedlustre_fs_subnetsize_ask, managedlustre_fs_subnetsize_validate, marketplace_product_get, marketplace_product_list, monitor_activitylog_list, monitor_healthmodels_entity_get, monitor_instrumentation_get-learning-resource, monitor_metrics_definitions, monitor_metrics_query, monitor_resource_log_query, monitor_table_list, monitor_table_type_list, monitor_webtests_get, monitor_workspace_list, monitor_workspace_log_query, mysql_database_query, mysql_list, mysql_server_config_get, mysql_server_param_get, mysql_table_schema_get, policy_assignment_list, postgres_database_query, postgres_list, postgres_server_config_get, postgres_server_param_get, postgres_table_schema_get, pricing_get, quota_region_availability_list, quota_usage_check, redis_list, resourcehealth_availability-status_get, resourcehealth_health-events_list, role_assignment_list, search_index_get, search_index_query, search_knowledge_base_get, search_knowledge_base_retrieve, search_knowledge_source_get, search_service_list, servicebus_queue_details, servicebus_topic_details, servicebus_topic_subscription_details, servicefabric_managedcluster_node_get, signalr_runtime_get, speech_stt_recognize, sql_db_get, sql_elastic-pool_list, sql_server_entra-admin_list, sql_server_firewall-rule_list, sql_server_get, storage_account_get, storage_blob_container_get, storage_blob_get, storage_table_list, storagesync_cloudendpoint_get, storagesync_registeredserver_get, storagesync_serverendpoint_get, storagesync_service_get, storagesync_syncgroup_get, subscription_list, virtualdesktop_hostpool_host_list, virtualdesktop_hostpool_host_user-list, virtualdesktop_hostpool_list, wellarchitectedframework_serviceguide_get, workbooks_list, workbooks_show
• Runs in: no product target (slice-only)
• Enable: Not written by --target/--all-targets. Loaded only as part of a preserved slice — see _meta.slices and task mcp:profile:regenerate.
• Env vars: AZURE_CONFIG_DIR, AZURE_MCP_COLLECT_TELEMETRY, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

azure-resource-manager-vc

Access Azure resources in a separate customer subscription (read-only).

• Tools: 174 — microsoft_docs_search, microsoft_code_sample_search, microsoft_docs_fetch, foundry_evaluation_comparison_get, foundry_evaluation_get, foundry_session_get, foundry_evaluation_suite_generation_job_get, foundry_session_file_list, foundry_toolbox_version_get, foundry_agent_get, foundry_agent_container_status_get, foundry_toolbox_get, foundry_evaluation_suite_get, foundry_continuous_eval_get, foundry_session_list, foundry_evaluation_dataset_get, foundry_session_logstream, foundry_evaluator_catalog_get, foundry_session_file_stat, foundry_evaluation_dataset_versions_get, foundry_evaluator_generation_job_get, foundry_agent_definition_schema_get, foundry_data_generation_job_get, foundry_evaluation_dataset_sas_url_get, foundry_session_file_download, acr_registry_list, acr_registry_repository_list, advisor_recommendation_list, aks_cluster_get, aks_nodepool_get, appconfig_account_list, appconfig_kv_get, applens_resource_diagnose, applicationinsights_recommendation_list, appservice_webapp_deployment_get, appservice_webapp_diagnostic_diagnose, appservice_webapp_diagnostic_list, appservice_webapp_get, appservice_webapp_settings_get-appsettings, azureterraformbestpractices_get, bicepschema_get, cloudarchitect_design, communication_email_send, communication_sms_send, compute_disk_get, compute_vm_get, compute_vmss_get, confidentialledger_entries_get, containerapps_list, cosmos_database_container_item_query, cosmos_list, datadog_monitoredresources_list, deploy_app_logs_get, deploy_architecture_diagram_generate, deploy_iac_rules_get, deploy_pipeline_guidance_get, deploy_plan_get, deviceregistry_namespace_list, eventgrid_subscription_list, eventgrid_topic_list, eventhubs_eventhub_consumergroup_get, eventhubs_eventhub_get, eventhubs_namespace_get, extension_azqr, extension_cli_generate, extension_cli_install, fileshares_fileshare_check-name-availability, fileshares_fileshare_get, fileshares_fileshare_peconnection_get, fileshares_fileshare_snapshot_get, fileshares_limits, fileshares_rec, fileshares_usage, foundryextensions_knowledge_index_list, foundryextensions_knowledge_index_schema, foundryextensions_openai_chat-completions-create, foundryextensions_openai_create-completion, foundryextensions_openai_embeddings-create, foundryextensions_openai_models-list, foundryextensions_resource_get, functionapp_get, functions_language_list, functions_project_get, functions_template_get, get_azure_bestpractices_ai_app, get_azure_bestpractices_get, grafana_list, group_list, group_resource_list, keyvault_admin_settings_get, keyvault_certificate_get, keyvault_key_get, keyvault_secret_get, kusto_cluster_get, kusto_cluster_list, kusto_database_list, kusto_query, kusto_sample, kusto_table_list, kusto_table_schema, loadtesting_test_get, loadtesting_testresource_list, loadtesting_testrun_get, managedlustre_fs_blob_autoexport_get, managedlustre_fs_blob_autoimport_get, managedlustre_fs_blob_import_get, managedlustre_fs_list, managedlustre_fs_sku_get, managedlustre_fs_subnetsize_ask, managedlustre_fs_subnetsize_validate, marketplace_product_get, marketplace_product_list, monitor_activitylog_list, monitor_healthmodels_entity_get, monitor_instrumentation_get-learning-resource, monitor_metrics_definitions, monitor_metrics_query, monitor_resource_log_query, monitor_table_list, monitor_table_type_list, monitor_webtests_get, monitor_workspace_list, monitor_workspace_log_query, mysql_database_query, mysql_list, mysql_server_config_get, mysql_server_param_get, mysql_table_schema_get, policy_assignment_list, postgres_database_query, postgres_list, postgres_server_config_get, postgres_server_param_get, postgres_table_schema_get, pricing_get, quota_region_availability_list, quota_usage_check, redis_list, resourcehealth_availability-status_get, resourcehealth_health-events_list, role_assignment_list, search_index_get, search_index_query, search_knowledge_base_get, search_knowledge_base_retrieve, search_knowledge_source_get, search_service_list, servicebus_queue_details, servicebus_topic_details, servicebus_topic_subscription_details, servicefabric_managedcluster_node_get, signalr_runtime_get, speech_stt_recognize, sql_db_get, sql_elastic-pool_list, sql_server_entra-admin_list, sql_server_firewall-rule_list, sql_server_get, storage_account_get, storage_blob_container_get, storage_blob_get, storage_table_list, storagesync_cloudendpoint_get, storagesync_registeredserver_get, storagesync_serverendpoint_get, storagesync_service_get, storagesync_syncgroup_get, subscription_list, virtualdesktop_hostpool_host_list, virtualdesktop_hostpool_host_user-list, virtualdesktop_hostpool_list, wellarchitectedframework_serviceguide_get, workbooks_list, workbooks_show
• Runs in: no product target (slice-only)
• Enable: Not written by --target/--all-targets. Loaded only as part of a preserved slice — see _meta.slices and task mcp:profile:regenerate.
• Env vars: AZURE_CONFIG_DIR, AZURE_MCP_COLLECT_TELEMETRY, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

context7

Query product documentation and knowledge bases.

• Tools: 2 — resolve-library-id, query-docs
• Runs in: every project, via the adlc-mcp-core plugin
• Enable: Ships automatically once the adlc-mcp-core plugin is installed at user scope.
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: —

databricks

Connect to Databricks workspaces and data assets.

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: —

gcal

Read and manage Google Calendar events and schedules.

• Tools: not measured (not_evaluated: not present in probe evidence)
• Runs in: ai-job-search
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: b2b-metering/README/ai-job-search-integrations.md

github

Query repositories, issues, and pull requests on GitHub.

• Tools: not measured (not_evaluated: not present in probe evidence)
• Runs in: every project, via the adlc-mcp-core plugin
• Enable: Ships automatically once the adlc-mcp-core plugin is installed at user scope.
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: —

gmail

Read and send emails from Gmail accounts.

• Tools: not measured (not_evaluated: not present in probe evidence)
• Runs in: ai-job-search
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: b2b-metering/README/ai-job-search-integrations.md

gmail-connector

Access Gmail via the Claude Platform connector (read-only).

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: —

google-calendar-connector

Access Google Calendar via the Claude Platform connector (read-only).

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: —

grafana

Query metrics and logs, manage alerts, and explore dashboards in Grafana.

• Tools: 57 — alerting_manage_routing, alerting_manage_rules, alerting_manage_silences, analyze_loki_labels, check_datasources_health, generate_deeplink, get_alert_group, get_annotation_tags, get_annotations, get_assertions, get_current_oncall_users, get_dashboard_by_uid, get_dashboard_panel_queries, get_dashboard_property, get_dashboard_summary, get_datasource, get_doc, get_incident, get_oncall_shift, get_panel_image, get_plugin, get_sift_analysis, get_sift_investigation, get_snapshot, grafana_api_request, list_alert_groups, list_datasources, list_incident_custom_fields, list_incidents, list_loki_label_names, list_loki_label_values, list_oncall_schedules, list_oncall_teams, list_oncall_users, list_prometheus_label_names, list_prometheus_label_values, list_prometheus_metric_metadata, list_prometheus_metric_names, list_provisioning_repositories, list_pyroscope_label_names, list_pyroscope_label_values, list_pyroscope_profile_types, list_sift_investigations, list_snapshots, query_loki_logs, query_loki_patterns, query_loki_stats, query_prometheus, query_prometheus_histogram, query_pyroscope, search_dashboards, search_docs, search_folders, search_plugin_information, suggest_loki_alloy_label_config, user_info, validate_provisioning_file
• Runs in: b2b-metering
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: GRAFANA_API_KEY, GRAFANA_URL
• Auth: env credential
• Verify: claude mcp list
• Runbook: b2b-metering/README/mcp-readonly/MCP_SETUP_REFERENCE.md

hubspot

Access HubSpot CRM contacts, deals, and customer data.

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: b2b-metering/README/claude-platform/CONNECTORS_AND_VAULTS.md

markitdown

Convert documents and web content to Markdown format.

• Tools: 1 — convert_to_markdown
• Runs in: adlc-framework, ai-job-search
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: —

microsoft-365

Access Microsoft 365 mail, calendar, and documents via connector.

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: b2b-metering/README/claude-platform/CONNECTORS_AND_VAULTS.md

microsoft-fabric

Create and manage data pipelines, data lake shortcuts, and catalogs in Microsoft Fabric.

• Tools: 48 — core_create-item, core_search-catalog, datafactory_create-dataflow, datafactory_create-pipeline, datafactory_execute-query, datafactory_get-pipeline, datafactory_list-dataflows, datafactory_list-pipelines, datafactory_run-pipeline, docs_api-examples, docs_best-practices, docs_item-api-spec, docs_item-definitions, docs_list-item-types, docs_platform-api-spec, onelake_create-directory, onelake_create-or-update-data-access-role, onelake_create-shortcut-adls-gen2, onelake_create-shortcut-amazon-s3, onelake_create-shortcut-azure-blob, onelake_create-shortcut-dataverse, onelake_create-shortcut-gcs, onelake_create-shortcut-onedrive-sharepoint, onelake_create-shortcut-onelake, onelake_create-shortcut-s3-compatible, onelake_delete-data-access-role, onelake_delete-directory, onelake_delete-file, onelake_delete-shortcut, onelake_download-file, onelake_get-data-access-role, onelake_get-settings, onelake_get-shortcut, onelake_get-table, onelake_get-table-config, onelake_get-table-namespace, onelake_list-data-access-roles, onelake_list-files, onelake_list-items, onelake_list-items-dfs, onelake_list-shortcuts, onelake_list-table-namespaces, onelake_list-tables, onelake_list-workspaces, onelake_modify-diagnostics, onelake_modify-immutability-policy, onelake_reset-shortcut-cache, onelake_upload-file
• Runs in: b2b-metering, command-center
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

microsoft-fabric-rti

Build event streams, query Kusto databases, and manage real-time data in Microsoft Fabric.

• Tools: 39 — activator_create_trigger, activator_list_artifacts, eventstream_add_custom_endpoint_destination, eventstream_add_custom_endpoint_source, eventstream_add_derived_stream, eventstream_add_eventhouse_destination, eventstream_add_sample_data_source, eventstream_clear_definition, eventstream_create, eventstream_create_from_definition, eventstream_delete, eventstream_get, eventstream_get_current_definition, eventstream_get_definition, eventstream_list, eventstream_list_available_components, eventstream_start_definition, eventstream_update, eventstream_validate_definition, kusto_command, kusto_deeplink_from_query, kusto_describe_database, kusto_describe_database_entity, kusto_diagnostics, kusto_graph_query, kusto_ingest_inline_into_table, kusto_known_services, kusto_list_entities, kusto_query, kusto_sample_entity, kusto_show_command, kusto_show_queryplan, map_create, map_delete, map_get, map_get_definition, map_list, map_update, map_update_definition
• Runs in: b2b-metering, command-center
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: AZURE_TENANT_ID
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

ms365

Query Microsoft 365 services including mail, calendar, and documents.

• Tools: 80 — login, logout, verify-login, list-accounts, select-account, remove-account, get-drive-item, list-folder-files, get-drive-delta, list-drive-item-permissions, list-drive-item-thumbnails, list-drive-item-versions, list-excel-tables, get-excel-table, list-excel-table-rows, list-excel-worksheets, get-excel-range, get-excel-range-format, get-excel-used-range, get-drive-root-item, search-onedrive-files, get-current-user, list-my-calendar-permissions, list-calendars, get-specific-calendar-view, list-specific-calendar-events, get-specific-calendar-event, list-calendar-event-instances, get-calendar-view, list-calendar-view-delta, list-contact-folders, list-contact-folder-child-folders, list-contact-folder-contacts, list-outlook-contacts, get-outlook-contact, list-drives, list-calendar-events, get-calendar-event, list-calendar-events-delta, get-mail-tips, list-focused-inbox-overrides, get-mailbox-settings, list-mail-folders, list-mail-child-folders, list-mail-rules, list-mail-folder-messages, list-mail-folder-messages-delta, list-mail-messages, get-mail-message, get-mail-message-mime, list-mail-attachments, list-onenote-notebooks, list-onenote-notebook-sections, list-onenote-pages, get-onenote-page-content, list-onenote-section-groups, list-all-onenote-sections, list-onenote-section-pages, list-outlook-categories, list-supported-languages, list-supported-time-zones, list-planner-tasks, list-todo-task-lists, list-todo-tasks, get-todo-task, list-todo-linked-resources, get-planner-bucket, get-planner-plan, list-plan-buckets, list-plan-tasks, get-planner-task, get-planner-task-details, list-subscriptions, get-subscription, get-my-profile, list-planner-task-messages, parse-teams-url, download-bytes, download-bytes-to-file, get-download-url
• Runs in: ai-job-search
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: b2b-metering/README/ai-job-search-integrations.md

notion

Query and edit Notion pages and databases.

• Tools: not measured (not_evaluated: not present in probe evidence)
• Runs in: ai-job-search, b2b-metering
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: —

playwright-automation

Automate browser interactions: navigate, fill forms, take screenshots.

• Tools: 24 — browser_close, browser_resize, browser_console_messages, browser_handle_dialog, browser_evaluate, browser_file_upload, browser_drop, browser_find, browser_fill_form, browser_press_key, browser_type, browser_navigate, browser_navigate_back, browser_network_requests, browser_network_request, browser_run_code_unsafe, browser_take_screenshot, browser_snapshot, browser_click, browser_drag, browser_hover, browser_select_option, browser_tabs, browser_wait_for
• Runs in: adlc-framework, ai-job-search, b2b-metering, command-center, commerce, os-ui
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: —

salesforce

Query Salesforce CRM records: accounts, opportunities, and cases.

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: b2b-metering/README/claude-platform/CONNECTORS_AND_VAULTS.md

slack

Query Slack messages, channels, and files via connector.

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: b2b-metering/README/claude-platform/CONNECTORS_AND_VAULTS.md

snowflake

Execute queries and manage data in Snowflake data warehouse.

• Tools: Managed by claude.ai; not measured by task mcp:tools (no local process to probe).
• Runs in: any project, once signed in — never written to .mcp.json
• Enable: claude.ai → Settings → Connectors → sign in with OAuth.
• Env vars: none
• Auth: oauth
• Verify: claude mcp list
• Runbook: —

terraform

Browse Terraform Registry for modules, providers, and best practices.

• Tools: 9 — get_latest_module_version, get_latest_provider_version, get_module_details, get_policy_details, get_provider_capabilities, get_provider_details, search_modules, search_policies, search_providers
• Runs in: cloudops-runbooks, commerce, devops-terraform, platform-idp
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: ENABLE_TF_OPERATIONS, TFE_ADDRESS, TFE_TOKEN
• Auth: env credential
• Verify: claude mcp list
• Runbook: —

vizro-analytics

Build and validate interactive analytics dashboards.

• Tools: 6 — get_model_json_schema, get_sample_data_info, get_vizro_chart_or_dashboard_plan, load_and_analyze_data, validate_chart_code, validate_dashboard_config
• Runs in: b2b-metering, cloudops-runbooks, command-center, finops-focus, os-ui
• Enable: Written into each target's .mcp.json by task mcp:profile:regenerate (or, for a b2b-metering tenant, task tenant:launch TENANT=<id>).
• Env vars: none
• Auth: none
• Verify: claude mcp list
• Runbook: —

Tenants

Customer-tenant server subsets, configured per _meta.tenants and written by task mcp:profile:regenerate as <target>/.mcp.<tenant>.json.

tenant-bc

b2b-metering tenant bc — segment: enterprise.

task tenant:launch TENANT=bc

Config file: b2b-metering/.mcp.bc.json (regenerate: task mcp:profile:regenerate).

tenant-os

b2b-metering tenant os — segment: startup.

task tenant:launch TENANT=os

Config file: b2b-metering/.mcp.os.json (regenerate: task mcp:profile:regenerate).

tenant-vc

Azure-only tenant — segment: n/a.

task tenant:launch TENANT=vc

Config file: b2b-metering/.mcp.vc.json (regenerate: task mcp:profile:regenerate).

tenant-os

os-ui tenant os — segment: startup.

task tenant:launch TENANT=os

Config file: os-ui/.mcp.os.json (regenerate: task mcp:profile:regenerate).

Persona profiles

A persona narrows the server set for a single session. Selection happens at startup, not mid-session:

claude --mcp-config .claude/mcps/profiles/reviewer.json --strict-mcp-config

Persona	Servers	When to use
delivery	2	Sprint planning, story push/pull, Confluence publishing, ITSM change/PIR/CR workflows — any /adlc, jira/, confluence/, or itsm/* command.
executive	4	QBR preparation, executive cost briefing, board-level observability summary — context7 + grafana + vizro-analytics + brave-search + azure-cost-management
minimal	1	Default; any session where you do not need AWS, Azure, GitHub, or Atlassian tools
portfolio-enterprise	9	Enterprise landing-zone pilot sessions — reviewer-tier AWS audit (9 servers: context7 + 8 awslabs-*) + Azure cost/security posture (4 servers: azure-cost-management, azure-defender, azure-entra, azure-policy) + microsoft-teams + atlassian-tools. NAMED ABSENCES, not oversights: Sentinel and Dynamics 365 are BLOCKED:no-verified-upstream-package — zero SSOT entry exists, one prose mention catalog-wide (docs/microsoft-365-decision-log.md:82), and creating an entry without a verified package would be fabrication. GitHub is excluded despite appearing in earlier drafts of this portfolio: standing SSOT exclusion pending the ghcr.io migration + REG-001 waiver (see github._orphan_reason) — not reversed by this delivery. azure-advisor, azure-resource-manager, azure-resource-manager-remote, and azure-devops are excluded: each carries its own _orphan_reason requiring a dedicated security-compliance-engineer sign-off (the microsoft-365/slack precedent) before joining ANY fence, portfolio or otherwise — out of scope for this delivery, add once sign-off lands.
portfolio-startup	5	Startup pilot sessions — single AWS-account API + billing visibility (awslabs-api, awslabs-billing-cost-management), context7 docs, atlassian-tools delivery, slack collaboration (chat:write message-send only, tagged 2026-08-01 per security-compliance-engineer sign-off APPROVE_WITH_MODIFICATIONS). THIS PERSONA IS WRITE-CAPABLE: atlassian-tools writes JIRA/Confluence records; slack writes messages (and, per its own user-token credential, can edit/delete them) in per-channel-invited channels only — see slack._description for the seven binding conditions M1-M7. slack._status remains requires_slack_app_registration until a Slack app is registered and admin-approved; a liveness run reporting BLOCKED:requires_slack_app_registration for slack is the correct and expected row, not a defect (AC-2B-8) — do not weaken it to CONNECTED. NAMED ABSENCES, not oversights: GitHub is excluded despite appearing in the original spec for this portfolio — standing SSOT exclusion pending the ghcr.io migration + REG-001 waiver (github._orphan_reason unchanged by this delivery).
reviewer	6	Cloud architecture review, security audit, code review with AWS context — context7 + all awslabs-* read (8 servers)
security-engineer	2	Azure security posture review. IAM/CloudTrail incident investigation unavailable until re-entry — see _meta.dropped_servers.

Playbook: prompts by persona

Start the session with the persona, then paste a prompt. Every prompt below names only servers that persona actually loads; this page is generated, so a server that leaves the source of truth takes its prompts with it.

executive

claude --mcp-config .claude/mcps/profiles/executive.json --strict-mcp-config

Scenario	Servers	Prompt
Monthly cloud spend	azure	Summarise this month's Azure spend by subscription with the prior-month delta.
Board cost narrative	azure, vizro-analytics	Chart the last six months of Azure spend by service and describe the trend in plain language.
Dashboard draft	vizro-analytics	Build a one-page dashboard showing spend, trend and the top five cost drivers.

minimal

claude --mcp-config .claude/mcps/profiles/minimal.json --strict-mcp-config

Scenario	Servers	Prompt
Library lookup	context7	Show the current configuration reference for the library I am about to change.

reviewer

claude --mcp-config .claude/mcps/profiles/reviewer.json --strict-mcp-config

Scenario	Servers	Prompt
Catalog inventory	awslabs-api	List every EC2 instance across the landing zone by account, region and state.
Network topology	awslabs-network	Show VPCs, subnets, route tables and Transit Gateway attachments across all accounts.
Spend by service	awslabs-billing-cost-management	Break down the last 30 days of spend by service and by account, highest first.
Template check	awslabs-iac	Validate this CloudFormation template and list any compliance findings before it is deployed.
Container footprint	awslabs-ecs	List ECS clusters and services with their task counts and desired-vs-running gap.

security-engineer

claude --mcp-config .claude/mcps/profiles/security-engineer.json --strict-mcp-config

Scenario	Servers	Prompt
Azure posture	azure	List Azure resources missing a required owner or environment tag, by subscription.
Reference control	context7	Summarise the APRA CPS 234 access-control obligations relevant to cloud IAM.

Environment variables

Configuration carries no secrets: every credential is a ${VAR} reference resolved from the shell. These are the variables the servers expect.

Variable	Used by
ALLOW_SENSITIVE_DATA	awslabs-ecs
ALLOW_WRITE	awslabs-ecs
ATLASSIAN_BASIC_AUTH	atlassian-rovo
AWS_PROFILE	aws-mcp, awslabs-api, awslabs-billing-cost-management, awslabs-ecs and 2 more
AWS_REGION	aws-mcp, awslabs-api, awslabs-billing-cost-management, awslabs-ecs and 2 more
AZURE_CONFIG_DIR	azure-resource-manager-bc, azure-resource-manager-vc
AZURE_MCP_COLLECT_TELEMETRY	azure, azure-resource-manager-bc, azure-resource-manager-vc
AZURE_SUBSCRIPTION_ID	azure, azure-resource-manager-bc, azure-resource-manager-vc, microsoft-fabric
AZURE_TENANT_ID	azure, azure-resource-manager-bc, azure-resource-manager-vc, microsoft-fabric and 1 more
CONFLUENCE_API_TOKEN	atlassian-tools
CONFLUENCE_URL	atlassian-tools
CONFLUENCE_USERNAME	atlassian-tools
ENABLE_TF_OPERATIONS	terraform
FASTMCP_LOG_LEVEL	awslabs-api, awslabs-billing-cost-management, awslabs-ecs, awslabs-iac and 1 more
GITHUB_PERSONAL_ACCESS_TOKEN	github
GRAFANA_API_KEY	grafana
GRAFANA_URL	grafana
JIRA_API_TOKEN	atlassian-tools
JIRA_URL	atlassian-tools
JIRA_USERNAME	atlassian-tools
READ_ONLY_MODE	atlassian-tools
READ_OPERATIONS_ONLY	awslabs-api
REQUIRE_MUTATION_CONSENT	awslabs-api
TFE_ADDRESS	terraform
TFE_TOKEN	terraform

Verifying

task mcp:profile:check     # every generated file still matches the source of truth
task mcp:verify            # every server in every product actually connects