Secure Microsoft Learn access for AI agents
Ground agent answers in official Microsoft and Azure docs, with every lookup checked by your policies
Agents that write Azure or .NET code from memory get API names and parameters wrong. Through Microsoft Learn, agents search Microsoft's official documentation, read full pages, and find current code samples before they answer. Every tool only reads public documentation, so none of them can change anything. Routing the server through the gateway lets you decide which agents may use it, and every call is logged for audit.
Server URL: https://learn.microsoft.com/api/mcp/
Before you begin
You need administrator access to your Agent Authority workspace to add the resource. Nothing is needed on the Microsoft side: the server takes no account, no app registration, and no credentials.
Setup
- In the Agent Authority console, go to Tools & Services and click Add Resource.
- Select Microsoft Learn from the catalog.
- Click Install Microsoft Learn. You choose no credential mode and enter nothing.
The gateway lists the Microsoft Learn tools as soon as you install it.
No authentication required
Microsoft Learn's MCP server is public. It has no OAuth flow, and the gateway sends it no credentials. The gateway connects to it directly, without a per-user connection:
- Every user and agent in your organization can use it as soon as you install it, subject to your policies.
- It never appears on the Connections page, and users are never asked to sign in to it.
- The resource shows a Public badge on Tools & Services.
Your policies and the audit log still apply to every call. Microsoft Learn itself can't tell your users apart, because no identity reaches it.
Verify the connection
Ask your agent to run a request:
Summarize Microsoft Entra ID from the Microsoft docsIf the agent answers with a summary drawn from learn.microsoft.com, the connection is working.
Available tools
Microsoft Learn exposes three tools, all read-only lookups against public documentation.
| Tool | Tags | Description |
|---|---|---|
microsoft_docs_search | read-only | Search Microsoft and Azure documentation and return relevant excerpts |
microsoft_code_sample_search | read-only | Find code samples in Microsoft Learn, optionally filtered by language |
microsoft_docs_fetch | read-only | Fetch a Microsoft documentation page as markdown |
Policy examples
Rules are evaluated first-match-wins from the top of the list, and every org starts with a seeded Allow all rule at the bottom. Because every tool is read-only, most organizations leave this resource open. To restrict it, add denies above Allow all:
- Keep Microsoft Learn away from one agent: deny
*on this resource for that agent. - Allow search but not full-page reads: deny
microsoft_docs_fetch.
Next steps
Your agents can now check Microsoft and Azure facts against the official docs, with no credentials to manage. Decide which agents should use it, then create a policy for any that should not.
- Create a policy – the full rule editor walkthrough.
- Policies – how first-match-wins rule order and the seeded Allow all rule interact.