Subchapter 53.44
foundry-agent/create/references/tools/managed-harness-agent/tool-mcp.mdMarkdown2 KBView on GitHub
tools:
- type: mcp
server_label: learn
server_url: https://learn.microsoft.com/api/mcp
require_approval: alwaysAuthenticated server:
tools:
- type: mcp
server_label: internal
server_url: https://tools.example.com/mcp
project_connection_id: <connection-name-or-id>
require_approval: always
allowed_tools:
- searchserver_label and server_url are required. Keep require_approval: always unless the user explicitly trusts the server. Use allowed_tools to restrict exposure.
Use a connection supplied by the user or already referenced by the Agent. Create one only when explicitly requested. Select the matching azd connection flow:
Follow only the connection-creation and validation sections; do not create a Toolbox unless explicitly requested.
Agent Service requires a remotely reachable MCP endpoint. Do not place literal credentials in headers or azure.yaml.
A generic MCP URL remains a generic MCP workflow. Do not infer that it is a Foundry Toolbox or automatically create a Toolbox connection merely because its URL contains /toolboxes/. When the user explicitly requests a Foundry Toolbox, follow Toolbox.