All skills
microsoft avatar

/azure-app-onboard

@b8a1c66
by microsoftmicrosoft/skills3.1k stars
351

End-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq).

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-app-onboard

This session only. Nothing lands on disk.

preparereferencesmcp-tools.md

≈1.4k tokens on demand. Your agent reads this file only when SKILL.md points to it.

Prepare Phase — MCP Tools

Phase-exclusive tool parameters for the prepare phase. For shared tools (subscription_list, group_list, get_azure_bestpractices, extension_cli_install), see mcp-tool-reference.md.

Troubleshooting: If a tool call fails with unknown parameter or missing command errors, consult the official docs: https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/


mcp_azure_mcp_pricing (hierarchical)

Sub-command Required Params Optional Params Read-Only
pricing_get (none) service (service name, e.g. "Azure App Service"), sku (armSkuName value), region (ARM region name), currency (e.g. "USD"), filter (OData filter for retail prices API) ✅

Usage: Query Azure retail pricing. Use service + region for broad queries, sku for exact SKU lookup (when armSkuName is populated — e.g., Redis Cache, App Service Premium). Use filter for advanced OData queries against the retail prices API. See pricing-guide.md for per-service filter strings and meter name mappings.

mcp_azure_mcp_quota (hierarchical)

⛔ Do NOT use for AppOnboard quota checks. Use az rest with the Quota REST API instead — see sku-quota-validation.md. The MCP quota tool returns misleading "No Limit" values for unsupported resource types — "No Limit" means the quota API doesn't support that resource type, NOT unlimited capacity.

Command Required Params Optional Params Read-Only
quota_usage_check region, resource-types (ARM type, e.g. Microsoft.Compute/virtualMachines) subscription ✅
quota_region_availability_list resource-types (ARM type) subscription ✅

mcp_azure_mcp_cloudarchitect (hierarchical)

Sub-command Required Params Optional Params Read-Only
cloudarchitect_design (none) question, question-number, total-questions, answer, next-question-needed (bool), confidence-score (0.0–1.0), state (JSON — tracks architectureComponents, architectureTiers, requirements{explicit,implicit,assumed}, confidenceFactors) ✅

Usage: Multi-turn conversational tool. For single-shot use, populate state with known requirements, set confidence-score ≥ 0.7 and next-question-needed: false to get a direct recommendation without follow-ups.

mcp_azure_mcp_wellarchitectedframework (hierarchical)

Sub-command Required Params Optional Params Read-Only
wellarchitectedframework_serviceguide_get (none) service (case-insensitive, hyphens/underscores/spaces OK, e.g. "cosmos-db", "App Service", "cosmosdb") ✅

Usage: Omit service to list all supported services. Provide service to get per-service guidance across all 5 WAF pillars.

mcp_azure_mcp_advisor (hierarchical)

Sub-command Required Params Optional Params Read-Only
advisor_recommendation_list (none) subscription, resource-group ✅

mcp_azure_mcp_group_resource_list

Required Optional Read-Only
resource-group subscription, tenant ✅

Returns: resource names, IDs, types, locations within the group.

mcp_azure_mcp_policy (hierarchical)

Sub-command Required Params Optional Params Read-Only
(subscription scope) (none) subscription ✅

Usage: Bulk fetch subscription policy constraints — blocked resource types, required tags, allowed regions. Use in prepare Step 2 alongside advisor_recommendation_list to surface governance constraints early.


Phase 2 Tool Map

Tool Sub-command AppOnboard Step Purpose
mcp_azure_mcp_cloudarchitect cloudarchitect_design Step 3 Architecture validation. Single-shot: populate state from context.json, set confidence-score: 0.8
mcp_azure_mcp_wellarchitectedframework wellarchitectedframework_serviceguide_get Step 4 Per-service WAF guidance. Call with service: "{service-name}" for each planned service
mcp_azure_mcp_advisor advisor_recommendation_list Step 2 Get existing subscription recommendations alongside policy query
mcp_azure_mcp_policy (hierarchical) Step 2 Subscription policy constraints — blocked types, required tags, allowed regions
mcp_azure_mcp_pricing pricing_get Step 6 Cost estimation. Read pricing-guide.md first
mcp_azure_mcp_quota ⛔ Do NOT use Step 5 ⛔ Read sku-quota-validation.md and use az rest with Quota REST API instead
mcp_azure_mcp_subscription_list (flat) Step 1 Resolve target subscription if not in context
mcp_azure_mcp_group_list (flat) Step 7 List existing RGs for reuse/conflict detection
mcp_azure_mcp_group_resource_list (flat) Step 7 Detect naming collisions in target RG

Tool Pitfalls

  • mcp_azure_mcp_pricing → pricing_get: Use --sku when querying by armSkuName (e.g., Redis Cache, App Service Premium). For services without armSkuName, use filter and meterName matching instead. Omitting all filter params returns too many results.

Source: SKILL.md on GitHub

No alerts3d3 checks · Risk SAFE
  • Gen Agent Trust Hub3d

    This skill provides a comprehensive end-to-end orchestrator for deploying applications to Azure. It incorporates several security-focused patterns, such as secrets management via Azure Key Vault, managed identity integration, and robust preflight validation. There are some security considerations, such as a surface for indirect prompt injection during workspace analysis and broad default firewall rules, but these are managed through explicit user approval gates and documented trade-offs.

  • Socket3d

    No alerts

  • Snyk3d

    Risk: LOW · No issues

Signed by skilld at b8a1c66. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week
metadata
{
  "author": "Microsoft",
  "version": "1.2.4"
}

README badge

README badge for microsoft/skills/azure-app-onboard