MCP servers connect AI agents to your tools and data,but who can call them, and what can they do? This article shows five practical authorization patterns with Azure API Management, from token validation to interactive Entra sign-in in VS Code to blocking specific tools on GitHub's remote MCP server.
Updated Jun 24, 2026
Version 1.0