registry / record
@azure/mcp
Does @azure/mcp MCP work in Claude Code and Cursor? Throne executed @azure/mcp mcp in a single-use Firecracker microVM and replayed both recorded client behaviours. Compatibility verdict: inconclusive. Is @azure/mcp mcp safe? Static security scan: 4 finding(s) to review under security ruleset v1. The full per-step results, security findings, scan date, and evidence hash are below.
> throne registry @azure/mcp
sealed
- scan id
- c192d81d0fdb4a7aa3c3c1013c1c3a80
- target
- @azure/mcp
- sealed at
- 2026-06-16 17:19:05Z
- evidence hash
- sha256:e3bc625eae24298f818fb9041942c9ad7900f0eb258b561358649d19682aa46f
RuntimeError: connect failed: McpError: Connection closed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
RuntimeError: connect failed: McpError: Connection closed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
not run, connect failed
"postinstall" runs arbitrary code on every npm install: 'node ./scripts/post-install-script.js'
package/package.jsonexecSync() called with a dynamically built command (heuristic, review): '`npm install ${platformPackageName}@${packageVersion}`, {'
package/index.js:49execSync() called with a dynamically built command (heuristic, review): '`npm install ${platformPackageName}@${packageVersion} --no-save --prefer-online`'
package/index.js:581 non-local endpoint host(s) referenced in code, verify each is expected for this server's purpose: aka.ms (package/scripts/post-install-script.js:20)
package/scripts/post-install-script.js:20- target
- @azure/mcp npm
- engine
- sandboxed
- claude code
- calibration: partial recorded=9,spec=0,assumed=9
- cursor
- calibration: partial recorded=11,spec=0,assumed=7
- chatgpt desktop
- calibration: unavailable recorded=0,spec=2,assumed=16
- steps exercised
- 18 of 18
- test suite
- v1.0.0
- security ruleset
- v1.0.0
- sealed at
- 2026-06-16 17:19:05Z
- evidence hash
- sha256:e3bc625eae24298f818fb9041942c9ad7900f0eb258b561358649d19682aa46f
- valid until
- 2026-09-14
maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.
this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.