≈705 tokens on demand. Your agent reads this file only when SKILL.md points to it.
Eval Summary
Coverage Status
| Language |
Manifest Templates |
Eval |
Status |
| Python |
1 (Bicep) |
✅ |
✅ Verified |
| TypeScript |
1 (Bicep) |
— |
📋 AZD template exists |
| C# (.NET) |
1 (Bicep) |
— |
📋 AZD template exists |
| Java |
— |
— |
⚠️ No AZD template |
| JavaScript |
— |
— |
⚠️ No AZD template |
| PowerShell |
— |
— |
⚠️ No AZD template |
⚠️ Eval cost note: Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in manifest. Java, JavaScript, and PowerShell have no SQL AZD template. Multi-language eval expansion tracked as follow-up.
MCP Tool Validation
| Test |
Status |
Details |
functions_template_get |
✅ PASS |
2 calls via azure-functions MCP tool |
| Template Discovery |
✅ PASS |
Templates found via resource filter |
| IaC Included |
✅ PASS |
SQL Server Bicep + RBAC in projectFiles |
| E2E Agent Test |
✅ PASS |
2 azure-functions calls, template sql-trigger-python-azd retrieved and applied |
IaC Validation
| IaC Type |
File |
Syntax |
Policy Compliant |
Status |
| Bicep |
sql.bicep |
✅ |
✅ |
PASS |
| Terraform |
sql.tf |
✅ |
✅ |
PASS |
Deployment Validation
| Test |
Status |
Details |
| AZD Template Init |
✅ PASS |
functions-quickstart-python-azd-sql |
| AZD Provision |
✅ PASS |
Resources created in rg-sql-eval |
| AZD Deploy |
✅ PASS |
Function deployed to func-api-arkwcvhvbkqwc |
| HTTP Response |
✅ PASS |
HTTP 200 from function endpoint |
| SQL Server |
✅ PASS |
sql-arkwcvhvbkqwc with Entra-only auth |
| SQL Database |
✅ PASS |
ToDo database created |
Results
| Test |
Python |
| Health |
✅ |
| SQL trigger |
✅ |
| SQL output |
✅ |
Notes
- Templates retrieved via
functions_template_get(language: "<language>", template: "<template-name>") MCP tool
- Dedicated AZD templates available for Python, TypeScript, .NET
- Requires T-SQL post-deploy for managed identity access
IaC Features
| Feature |
Bicep |
Terraform |
| SQL Server (Entra-only) |
✅ |
✅ |
| SQL Database |
✅ |
✅ |
| Firewall Rules |
✅ |
✅ |
| Private Endpoint (VNet) |
✅ |
✅ |
| Azure Policy Compliance |
✅ |
✅ |
Post-Deploy Note
SQL managed identity access requires T-SQL after deployment:
CREATE USER [<function-app-name>] FROM EXTERNAL PROVIDER;
ALTER ROLE db_datareader ADD MEMBER [<function-app-name>];
ALTER ROLE db_datawriter ADD MEMBER [<function-app-name>];
Test Date
2026-04-22
