Microsoft Azure

Connect your own Azure subscription by saving an App Registration's Tenant ID + Client ID + Client Secret plus a Subscription ID, after checking they actually work via OAuth2 client credentials. A Reader-only RBAC role is strongly recommended for the Service Principal you create.

Disconnect an Azure subscription: deletes the saved Tenant ID/Client ID/Client Secret/Subscription ID. Nothing in Azure itself is changed; the App Registration remains until you delete it yourself in Entra ID.

List the connected Azure subscriptions.

List Virtual Machines in the connected Azure subscription, optionally filtered by power state.

Read one Virtual Machine in full, including power state and OS/network details.

Start a stopped/deallocated Virtual Machine.

Stop (or fully deallocate) a running Virtual Machine.

Restart a Virtual Machine.

List Storage Accounts in the connected Azure subscription.

Read one Storage Account in full.

List blob containers inside a Storage Account.

List Azure SQL logical servers in the connected subscription.

List databases hosted on one Azure SQL logical server.

List Function Apps in the connected Azure subscription.

Restart a Function App.

List role assignments (who has what RBAC role) in the connected subscription.

List Azure Monitor metric alert rules configured in the connected subscription.

Read Azure Monitor metric datapoints for one resource over a time window.

Read Azure cost data for the connected subscription over a time window, optionally grouped by service.

Read Azure Cost Management's own forecast of upcoming spend for the connected subscription.

Value-add report: one-glance Azure subscription health snapshot -- VM counts by power state, Storage Account count, SQL database count, Function App error count, and month-to-date cost.