How is this different from connecting Azure DevOps MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Azure DevOps MCP API changes?

We track the Azure DevOps MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Azure DevOps tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Azure DevOps?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Azure DevOps MCP server myself?

No. TrustGate connects to the Azure DevOps MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Azure DevOps directly.

Connect Azure DevOps MCP to your AI agents, securely.

Q: Is Azure DevOps MCP secure?

The server itself exposes 44 tools, and some of them can write to your Azure DevOps account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Azure DevOps.

One secured endpoint for every Azure DevOps call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Azure DevOps MCP now

What your agents can ask once Azure DevOps MCP is connected.

Select the tools your AI agents can call

44 tools from the Azure DevOps MCP schema.

Showing 44 tools

core_list_projectsreadLists all projects in the organization.
core_list_project_teamsreadLists the teams within a project.
core_get_identity_idsreadRetrieves identity IDs by search filter.
wit_work_itemreadReads work items: get a single item, get a batch by IDs, list comments, or list items relevant to the authenticated user.
wit_work_item_writewriteCreates or updates work items, individually or in batch.
wit_work_item_comment_writewriteAdds a comment to a work item.
wit_work_item_link_writewriteLinks work items to each other, to pull requests or to other artifacts.
wit_backlogreadLists backlog levels and the work items in a specific backlog level.
workreadLists iterations in a project and the iterations assigned to a team.
wit_work_item_attachmentwriteUploads an attachment to a work item or downloads an existing one.
work_iteration_writewriteCreates iterations and assigns them to a team.
work_capacity_writewriteUpdates the capacity of a team member for an iteration.
wit_queryreadGets a work item query by ID or path, runs saved queries and executes ad-hoc WIQL queries.
wit_work_item_attachment_uploadwriteUploads a file as a new work item attachment without linking it.
wit_work_item_attachment_linkwriteLinks an uploaded attachment to a work item.
repo_repositoryreadLists repositories in a project and gets the details of one.
repo_branchreadLists branches in a repository, or the branches the current user has pushed to.
repo_filereadLists the files and folders in a repository directory.
repo_pull_requestreadLists pull requests in a repository or project, and finds those containing specific commits.
repo_pull_request_orgreadLists the authenticated user's active pull requests across the organization.
repo_pull_request_threadreadLists comment threads on a pull request and the comments in a thread.
repo_pull_request_writewriteCreates or updates a pull request.
repo_pull_request_thread_writewriteAdds or replies to a comment thread on a pull request.
repo_file_writewriteCreates or edits a text file on an existing branch and commits the change.
repo_search_commitsreadSearches commits, with filters for text, author and date range.
repo_create_branchwriteCreates a new branch in a repository.
pipelines_buildreadLists builds with optional filters and gets the commits and work items associated with a build.
pipelines_build_logreadLists the available logs for a build and retrieves their content.
pipelines_definitionreadLists pipeline definitions with optional filters and their revision history.
pipelines_runreadLists the runs for a pipeline.
pipelines_artifactreadLists the artifacts produced by a build.
pipelines_writewriteQueues pipeline runs, creates and renames YAML pipeline definitions, and cancels, retries or runs stages on in-flight builds.
wikireadLists wikis in an organization or project, gets wiki details, lists pages, and gets page metadata and content.
wiki_upsert_pagewriteCreates or updates a wiki page.
search_codereadSearches for code across repositories.
search_wikireadSearches wiki pages by keywords.
search_workitemreadSearches work items by text and filters.
advsec_get_alertsreadRetrieves Advanced Security alerts for a repository.
advsec_get_alert_detailsreadGets detailed information about a specific security alert.
testplanreadLists test plans, test suites and test cases in a project.
testplan_show_test_results_from_build_idreadGets the test results for a specific build.
testplan_test_plan_writewriteCreates a new test plan.
testplan_test_suite_writewriteCreates a test suite within a test plan and adds test cases to it.
testplan_test_case_writewriteCreates test case work items and updates the steps of existing test cases.

What Azure DevOps MCP exposes

Azure DevOps MCP groups its 44 tools into 8 categories, each with a suggested starting policy.

All 44 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Work Items	Work item reads, batch reads, comments, backlogs, iterations and updates	Read / Write	Audit updates; keep batch writes disabled unless needed
Repos	Repositories, branches, files, pull requests and comment threads	Read / Write	Require approval for pull request actions
Pipelines	Builds, definitions, runs, logs and artifacts	Read / Write	Restrict pipeline execution
Wiki	Wiki listing, pages, page content and upserts	Read / Write	Review content before publishing
Search	Code, wiki and work item search across the organization	Read	Limit to intended projects
Core	Organizations, projects, teams, identities and group members	Read	Limit organization access
Advanced Security	Security alerts and alert details for a repository	Read	Limit access to security findings
Test Plans	Test plans, test suites, test cases and build test results	Read / Write	Allow reading; review creation of plans, suites and cases

Connect Azure DevOps MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Azure DevOps
Find Azure DevOps in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Azure DevOps MCP or block it. You allow the exact tools each agent can call, one by one.

Azure DevOps MCP	44 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 44 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Azure DevOps MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Azure DevOps MCP44 documented tools.
Coding assistants	Connection & credentialsper user	Work Items12 tools
Internal copilots	Tool access policiesdeny by default	Repos11 tools
Workflow automations	Request & response inspectioninline	Pipelines6 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools15 tools