{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-16T02:40:06.177Z", "record_id": "VXI-EXT-TOOL-TRUST-AZURE-DEVOPS-01-v1", "record_kind": "external_reference", "title": "Azure DevOps MCP: Remote and local identity are not interchangeable", "system": "Azure DevOps MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Can the same Azure DevOps MCP setup be assumed to work for every organisation and action?", "near_questions": [ "Does remote Azure DevOps MCP support my organisation identity?", "How does local authentication differ from remote access?", "Can the agent create a wiki page?", "Can it update work items rather than only read them?", "Which project permissions apply to the caller?", "Do local and remote tools have identical coverage?", "Can renamed tools break an existing integration?", "What repository data reaches the agent client?", "Does organisation membership prove change authority?", "Which version should a procurement record identify?", "When should an agent decline a project mutation?", "Can I save an Azure DevOps deployment review?" ], "supported_claims": [ { "claim": "The remote offering documents Entra-backed organisations and differs from the locally configured server. The local inventory includes writes such as wiki and work-item changes, not just retrieval. Identify the deployment, organisation identity and effective grants before authorising operations; tool-name changes can also affect an existing client.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "The remote offering documents Entra-backed organisations and differs from the locally configured server. The local inventory includes writes such as wiki and work-item changes, not just retrieval. Identify the deployment, organisation identity and effective grants before authorising operations; tool-name changes can also affect an existing client.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-GITGUARDIAN-01-v1", "VXI-EXT-TOOL-TRUST-BIGQUERY-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Azure DevOps MCP overview and variants", "source_url": "https://learn.microsoft.com/en-us/azure/devops/mcp-server/mcp-server-overview?view=azure-devops", "checked_on": "2026-10-16", "candidate_record_id": "VXI-EXT-TOOL-TRUST-AZURE-DEVOPS-01-v1", "candidate_record_sha256": "d987ed2f88770290fb5a1ac209363435d0066a215728ef2ab77bf791fdd03759", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "The remote offering documents Entra-backed organisations and differs from the locally configured server. The local inventory includes writes such as wiki and work-item changes, not just retrieval. Identify the deployment, organisation identity and effective grants before authorising operations; tool-name changes can also affect an existing client.", "required_buyer_context": "Remote/local variant, organisation identity, tool version and effective project permissions.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Azure DevOps MCP", "variant": "Remote Entra-backed offering and separately configured local server" }, "review_status": "documentation_review_only", "checked_on": "2026-10-16", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Microsoft publishes the Azure DevOps MCP implementations.", "source_ids": [ "ado", "ado-local" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Retrieve and manage supported Azure DevOps project information.", "source_ids": [ "ado", "ado-local" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Authorised project, work-item, repository and wiki information.", "source_ids": [ "ado", "ado-local" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "The local inventory includes creation and updates, including wiki content.", "source_ids": [ "ado", "ado-local" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "Remote access uses the documented organisation identity path; local setup offers several credential modes.", "source_ids": [ "ado", "ado-local" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Organisation membership and granted project permissions remain relevant.", "source_ids": [ "ado", "ado-local" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Project content and instructions pass through the selected MCP client and Azure DevOps service.", "source_ids": [ "ado", "ado-local" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Unsupported organisation identity, renamed tools and differing local/remote coverage can break a workflow.", "source_ids": [ "ado", "ado-local" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Buyer organisation type, identity grants and enabled tool inventory are unknown.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Do not turn a retrieval request into a repository, wiki or work-item change without specific authority.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "ado", "url": "https://learn.microsoft.com/en-us/azure/devops/mcp-server/mcp-server-overview?view=azure-devops", "final_url": "https://learn.microsoft.com/en-us/azure/devops/mcp-server/mcp-server-overview?view=azure-devops", "title": "Azure DevOps MCP overview and variants", "checked_on": "2026-10-16", "sha256": "c7e8a34e13f4051269dce00ba426fca209968df8209aa64323d7cc2005d53861", "bytes": 66354 }, { "source_id": "ado-local", "url": "https://github.com/microsoft/azure-devops-mcp", "final_url": "https://github.com/microsoft/azure-devops-mcp", "title": "Azure DevOps MCP tools and authentication", "checked_on": "2026-10-16", "sha256": "03a71b53e0961f6016df0063b2b21d63ef9e5222969e0078ee58f2a8d4618766", "bytes": 401348 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Keep the identity and change-authority assumptions behind a project integration decision.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Remote availability, authentication modes, tool names and project grants." }, "change_history": [ { "version": 1, "date": "2026-10-16", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#azure-devops-mcp-remote-local-identity", "machine_readable_record": "/varexis-index/records/azure-devops-mcp-remote-local-identity.json" }