azure-resource-lookup
bymicrosoft· 555 skills
List, find, and show Azure resources across subscriptions or resource groups. Handles prompts like \"list the websites in my subscription\", \"list my web apps\", \"show my app services\", \"list virtual machines\", \"list my VMs\", \"show storage accounts\", \"find container apps\", and \"what resources do I have\". USE FOR: list websites, list web apps, list app services, show websites in subscription, resource inventory, find resources by tag, tag analysis, orphaned resource discovery (not for cost analysis), unattached disks, count resources by type, cross-subscription lookup, and Azure Resource Graph queries. DO NOT USE FOR: deploying/changing resources (use azure-deploy), cost optimization (use azure-cost), or non-Azure clouds.
How to install azure-resource-lookup?
microsoft/azure-skills/azure-resource-lookup
$npx -y skills add microsoft/azure-skills --skill azure-resource-lookupInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/microsoft/azure-skills" --skill "microsoft/azure-skills/azure-resource-lookup"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/microsoft/azure-skills" that are relevant to the current task. Run `npx skills add "https://github.com/microsoft/azure-skills"` and select the relevant skills, then follow their instructions.
SKILL.md
| 1 | # Azure Resource Lookup |
| 2 | |
| 3 | List, find, and discover Azure resources of any type across subscriptions and resource groups. Use Azure Resource Graph (ARG) for fast, cross-cutting queries when dedicated MCP tools don't cover the resource type. |
| 4 | |
| 5 | ## When to Use This Skill |
| 6 | |
| 7 | Use this skill when the user wants to: |
| 8 | - **List resources** of any type (VMs, web apps, storage accounts, container apps, databases, etc.) |
| 9 | - **Show resources** in a specific subscription or resource group |
| 10 | - Query resources **across multiple subscriptions** or resource types |
| 11 | - Find **orphaned resources** (unattached disks, unused NICs, idle IPs) |
| 12 | - Discover resources **missing required tags** or configurations |
| 13 | - Get a **resource inventory** spanning multiple types |
| 14 | - Find resources in a **specific state** (unhealthy, failed provisioning, stopped) |
| 15 | - Answer "**what resources do I have?**" or "**show me my Azure resources**" |
| 16 | - **List web apps, websites, or App Services** |
| 17 | |
| 18 | > ⚠️ **Warning:** App Service / Web Apps have no dedicated MCP `list` command. Prompts like "list websites", "list web apps", or "list app services" **must** route through this skill to use Azure Resource Graph. |
| 19 | |
| 20 | > 💡 **Tip:** For single-resource-type queries, first check if a dedicated MCP tool can handle it (see routing table below). If none exists, use Azure Resource Graph. |
| 21 | |
| 22 | ## Quick Reference |
| 23 | |
| 24 | | Property | Value | |
| 25 | |----------|-------| |
| 26 | | **Query Language** | KQL (Kusto Query Language subset) | |
| 27 | | **CLI Command** | `az graph query -q "<KQL>" -o table` | |
| 28 | | **Extension** | `az extension add --name resource-graph` | |
| 29 | | **MCP Tool** | `extension_cli_generate` with intent for `az graph query` | |
| 30 | | **Best For** | Cross-subscription queries, orphaned resources, tag audits | |
| 31 | |
| 32 | ## MCP Tools |
| 33 | |
| 34 | | Tool | Purpose | When to Use | |
| 35 | |------|---------|-------------| |
| 36 | | `extension_cli_generate` | Generate `az graph query` commands | Primary tool — generate ARG queries from user intent | |
| 37 | | `mcp_azure_mcp_subscription_list` | List available subscriptions | Discover subscription scope before querying | |
| 38 | | `mcp_azure_mcp_group_list` | List resource groups | Narrow query scope | |
| 39 | |
| 40 | ## Workflow |
| 41 | |
| 42 | ### Step 1: Check for a Dedicated MCP Tool |
| 43 | |
| 44 | For single-resource-type queries, check if a dedicated MCP tool can handle it: |
| 45 | |
| 46 | | Resource Type | MCP Tool | Coverage | |
| 47 | |---|---|---| |
| 48 | | Virtual Machines | `compute` | ✅ Full — list, details, sizes | |
| 49 | | Storage Accounts | `storage` | ✅ Full — accounts, blobs, tables | |
| 50 | | Cosmos DB | `cosmos` | ✅ Full — accounts, databases, queries | |
| 51 | | Key Vault | `keyvault` | ⚠️ Partial — secrets/keys only, no vault listing | |
| 52 | | SQL Databases | `sql` | ⚠️ Partial — requires resource group name | |
| 53 | | Container Registries | `acr` | ✅ Full — list registries | |
| 54 | | Kubernetes (AKS) | `aks` | ✅ Full — clusters, node pools | |
| 55 | | App Service / Web Apps | `appservice` | ❌ No list command — use ARG | |
| 56 | | Container Apps | — | ❌ No MCP tool — use ARG | |
| 57 | | Event Hubs | `eventhubs` | ✅ Full — namespaces, hubs | |
| 58 | | Service Bus | `servicebus` | ✅ Full — queues, topics | |
| 59 | |
| 60 | If a dedicated tool is available with full coverage, use it. Otherwise proceed to Step 2. |
| 61 | |
| 62 | ### Step 2: Generate the ARG Query |
| 63 | |
| 64 | Use `extension_cli_generate` to build the `az graph query` command: |
| 65 | |
| 66 | ```yaml |
| 67 | mcp_azure_mcp_extension_cli_generate |
| 68 | intent: "query Azure Resource Graph to <user's request>" |
| 69 | cli-type: "az" |
| 70 | ``` |
| 71 | |
| 72 | See [Azure Resource Graph Query Patterns](references/azure-resource-graph.md) for common KQL patterns. |
| 73 | |
| 74 | ### Step 3: Execute and Format Results |
| 75 | |
| 76 | Run the generated command. Use `--query` (JMESPath) to shape output: |
| 77 | |
| 78 | ```bash |
| 79 | az graph query -q "<KQL>" --query "data[].{name:name, type:type, rg:resourceGroup}" -o table |
| 80 | ``` |
| 81 | |
| 82 | Use `--first N` to limit results. Use `--subscriptions` to scope. |
| 83 | |
| 84 | ## Error Handling |
| 85 | |
| 86 | | Error | Cause | Fix | |
| 87 | |-------|-------|-----| |
| 88 | | `resource-graph extension not found` | Extension not installed | `az extension add --name resource-graph` | |
| 89 | | `AuthorizationFailed` | No read access to subscription | Check RBAC — need Reader role | |
| 90 | | `BadRequest` on query | Invalid KQL syntax | Verify table/column names; use `=~` for case-insensitive type matching | |
| 91 | | Empty results | No matching resources or wrong scope | Check `--subscriptions` flag; verify resource type spelling | |
| 92 | |
| 93 | ## Constraints |
| 94 | |
| 95 | - ✅ **Always** use `=~` for case-insensitive type matching (types are lowercase) |
| 96 | - ✅ **Always** scope queries with `--subscriptions` or `--first` for large tenants |
| 97 | - ✅ **Prefer** dedicated MCP tools for single-resource-type queries |
| 98 | - ❌ **Never** use ARG for real-time monitoring (data has slight delay) |
| 99 | - ❌ **Never** attempt mutations through ARG (read-only) |
Related
6 picksType
- azure-storageAzure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake.Jul 2026
- azure-resource-visualizerAnalyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the relationships between individual resources.Jul 2026
- azure-computeAzure VM/VMSS router. WHEN: create / provision / deploy / spin-up VM, recommend VM size, compare VM pricing, VMSS, scale set, autoscale, burstable, lightweight…Jul 2026
- azure-quotasCheck/manage Azure quotas and usage across providers. For deployment planning, capacity validation, region selection.Jul 2026
- azure-upgradeAssess and upgrade Azure workloads between plans, tiers, or SKUs, or modernize Azure SDK dependencies in source code.Jul 2026
- azure-enterprise-infra-plannerArchitect and provision enterprise Azure infrastructure from workload descriptions.Jul 2026