MCP Servers
Model Context Protocol servers Clustersco connects to Claude Code. Each is packaged as an installable
plugin in the clustersco marketplace.
microsoft-entra (read-only)
Read-only access to the Clustersco Microsoft 365 / Entra directory (users, groups, apps, devices, licenses, audit logs) via Microsoft's hosted Enterprise MCP server. Authenticated per-user with OAuth.
/plugin marketplace add https://bitbucket.org/clustersco/<org-repo>.git
/plugin install microsoft-entra@clustersco
/mcp # select "microsoft-entra" → complete the browser sign-in
The plugin ships the connection config (endpoint + client ID + callback port); each person
authenticates with their own Microsoft account. Only read scopes are granted (MCP.*.Read.All).
Rules of the road
.mcp.jsonholds only non-secret config (endpoints, client IDs, OAuth callback) — never a client secret.- Prefer read-only scopes.
- Every new server gets a setup + verify runbook before it's considered done.
Backlog
- Atlassian (Jira / Confluence / Bitbucket) — mirror the code + delivery + docs system-of-record.
- Cloudflare — R2 / Access / DNS for the
cluster-clidistribution and edge.