Azure DevOps connector

The Azure DevOps connector exposes the Azure DevOps Services REST API (projects, Git repositories, work items) as MCP tools through the PolicyArc gateway, governed by policy on every call.

Prerequisite

You must have the Microsoft Entra ID identity provider connected first. The connector reuses the same Entra app registration — make sure it has the Azure DevOps delegated permission granted (Step 7 of the Microsoft IDP setup). No separate gateway app is required.

Step 1 — Open the Add Connector screen

Open Resources → Add connector and pick Azure DevOps.

Step 2 — Choose the authentication mode

• entra_refresh (default) — PolicyArc uses the refresh token obtained at sign-in to mint an Azure-DevOps-audienced token at call time. Works alongside any other Microsoft connector (Mail, OneDrive, Teams) in the same session with a single sign-in.
• idp_passthrough — forwards your Microsoft sign-in token directly to Azure DevOps. Use this only when Azure DevOps is your sole Microsoft connector and the sign-in is audienced for Azure DevOps. Don't combine it with Graph connectors or with entra_refresh.

Set Azure DevOps organization URL to https://dev.azure.com/your-org. Click Connect.

Step 3 — Confirm the connector

After connecting you'll see the connector's status screen with the available Azure DevOps tools, policy-governed from the first request.

What's next

• Recommended: Claude Code — fastest path to verify end-to-end.
• All MCP clients →