Blue Bridge

What is Blue Bridge?

Blue Bridge is a Model Context Protocol (MCP) server that enables querying and managing Azure resources with zero‑secret authentication. It uses the signed‑in Azure CLI account or a managed identity—no passwords or keys are stored. Sample prompts and recipes are provided for Azure Managed Grafana, Azure Data Explorer (Kusto), Azure Resource Graph, and Azure Resource Manager.

How to use Blue Bridge?

Clone the repository, then run the Docker container with optional environment variables for Grafana or Kusto. On first start, authenticate via a device‑code prompt in a web browser. Finally, add the server to your MCP host configuration using SSE transport at http://localhost:6688/sse.

Key features of Blue Bridge

• Zero‑secret authentication via Azure CLI or managed identity.
• Out‑of‑the‑box support for Azure Resource Graph and Azure Resource Manager.
• Optional connectivity to Azure Managed Grafana and Azure Data Explorer (Kusto).
• Ready‑to‑use Docker container with SSE transport.
• Sample recipes for common Azure management tasks.

Use cases of Blue Bridge

• Identify and turn off idle virtual machines to reduce Azure costs.
• Retrieve subscription CPU quotas for capacity planning.
• Query Azure resources using natural language prompts.
• Automate routine Azure management with an MCP‑enabled host.

FAQ from Blue Bridge

How does authentication work in Blue Bridge?

On first start, the container prints a device‑code URL. Open the link, enter the code, and grant consent. Alternatively, set UseManagedIdentity=true or specify a ManagedIdentityClientId to use a managed identity without interactive login.

What environment variables do I need?

Only AzureManagedGrafanaEndpoint and KustoUri are optional—set them if you want to connect to those services. For managed identity authentication, set UseManagedIdentity=true or ManagedIdentityClientId.

Can I run Blue Bridge without Docker?

The README only describes running Blue Bridge via Docker. There is no alternative installation method documented.

What transport does Blue Bridge use?

It uses Server‑Sent Events (SSE) transport, accessible at /sse on localhost:6688.

Where are credentials stored?

No passwords or keys are stored inside the container. Authentication relies entirely on the Azure CLI token (via device‑code flow) or a managed identity available on the compute resource.