VendorMicrosoft
Connects overhttp

Our grade: 4 checks

Login No authentication
Upkeep Active · 2026-09
Known bugs 0 open
Connection http

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

3.4 15 reviews
13% would trust it in production
  • 5 2
  • 4 4
  • 3 7
  • 2 2
  • 1 0

Trust in production

  • Trust it - 13%
  • With caveats - 80%
  • Wouldn't - 7%

53% would recommend this server

How reviewers scored it

  • Setup & docs 3.3
  • Auth experience 3.1
  • Reliability 3.2
  • Maintainer responsiveness 3.9

Why it got a C

Microsoft's free hosted server over HTTPS, with three read-only tools: docs search, docs page fetch and code-sample search across Microsoft Learn. It sees no account data, so the blast radius is small, and no advisories are on record. Visual Studio 2022 and 2026 ship it built in. The public repo holds only docs, skills and a CLI, and it was last changed in September 2026. Biggest deduction: there's no authentication, and the server code is closed source, so you're trusting Microsoft's hosting for what reaches your agent.

How to connect

// .vscode/mcp.json (README standard config)
{
  "servers": {
    "microsoft-learn": {
      "type": "http",
      "url": "https://learn.microsoft.com/api/mcp"
    }
  }
}

Is Microsoft Learn MCP Server safe?

Is Microsoft Learn MCP Server safe to use?

Microsoft Learn MCP Server grades C (usable with care). There is no login: anything that can start or reach it gets its full access. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does Microsoft Learn MCP Server have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does Microsoft Learn MCP Server support authentication?

No. It has no login of its own, so limit who and what can start it.

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade C

Markdown

[![TrustedMCP grade C](https://trustedmcp.io/badge/microsoft-learn-mcp.svg)](https://trustedmcp.io/servers/microsoft-learn-mcp)

HTML

<a href="https://trustedmcp.io/servers/microsoft-learn-mcp"><img src="https://trustedmcp.io/badge/microsoft-learn-mcp.svg" alt="TrustedMCP grade C" height="80"></a>

Community reviews

Amara Okeke Indie hacker
Trusts with caveats Recommends

Exactly what I needed from Microsoft Learn

Been running this for about a month now. There is no auth layer, so whatever can reach it can use it. I keep it local only. Recommended, with sensible guardrails.

Used for Answering questions from our internal wiki

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Pablo Ortiz Knowledge manager
Trusts with caveats

Went back to calling the API directly

Not what I expected from the description. Nothing to install, I just point the client at the URL. Read-only mode is the first thing I enable, and it covers most of what I need. There is no auth layer, so whatever can reach it can use it. I keep it local only.

Used for Finding the right runbook during incidents

  • Setup & docs 2/5
  • Auth experience 2/5
  • Reliability 2/5
  • Maintainer responsiveness 3/5
Maya Johnson Developer, healthtech
Trusts with caveats Recommends

Quietly reliable

Installed it on a Friday, it was part of my workflow by Monday. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. Being closed source, I cannot audit it, but the vendor has been responsive.

Used for Summarising meeting notes

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Lucas Silva Staff engineer
Trusts with caveats Recommends

Good defaults, good docs

Our agents call this dozens of times a day. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. Releases come often and the changelog is clear. Keep permissions tight and it is a good tool.

Used for Keeping a team knowledge base tidy

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Jack Wilson Backend engineer
Trusts with caveats

Does the job, docs could be better

Took longer to configure than I expected. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box.

Used for Summarising meeting notes

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Laura Schmidt Technical writer
Trusts with caveats Recommends

Set it up once, forgot about it

Of the Microsoft Learn integrations I tried, this one is the most predictable. Hosted endpoint means no local process to babysit. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box. Keep permissions tight and it is a good tool.

Used for Answering questions from our internal wiki

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Aditi Rao Freelance developer
Trusts with caveats

Handy for dev, careful in prod

It does the job, but it took some tweaking. Being official from Microsoft counts for a lot when I pitch it to security. I would use it in prod, but only with a human approving writes.

Used for Pulling up-to-date library docs into prompts

  • Setup & docs 2/5
  • Auth experience 3/5
  • Reliability 2/5
  • Maintainer responsiveness 4/5
Ingrid Nilsson Senior developer
Trusts with caveats

Fine once configured properly

Works well enough for what I need. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. Recommended, with sensible guardrails.

Used for Drafting docs from existing pages

  • Setup & docs 2/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 3/5
Karan Mehta Security engineer
Trusts with caveats

Good, but read the permissions first

Some tools are great, a couple feel half finished. You can tell it is actively maintained, the rough edges keep getting fixed. Nice to use something maintained by Microsoft rather than a random fork. There is no auth layer, so whatever can reach it can use it. I keep it local only. Worth it, just do not skip the hardening steps.

Used for Finding the right runbook during incidents

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 2/5
  • Maintainer responsiveness 4/5
Diego Fernandez Solo founder
Trusts in production Recommends

Clean integration, sensible permissions

Simple to set up in Cursor, simple to reason about. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. Easy recommendation.

Used for Pulling up-to-date library docs into prompts

  • Setup & docs 5/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Anika Gupta Full-stack developer
Trusts with caveats

Promising, a bit raw

I like it, with reservations. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box. I would prefer to read the code, but the hosted service has been dependable. Filed an issue and got a reply within two days. Fine in production if you sandbox it.

Used for Answering questions from our internal wiki

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 3/5
Vikram Iyer AI engineer
Trusts with caveats Recommends

Solid core, fiddly setup

Useful tool, though I would not hand it to a junior unsupervised. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. Being official from Microsoft counts for a lot when I pitch it to security. I would use it in prod, but only with a human approving writes.

Used for Drafting docs from existing pages

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 2/5
  • Maintainer responsiveness 4/5
Omar Haddad Platform engineer
Would not trust in production

Would not run this unattended

It works in a demo, but things got shaky under real use. Hosted endpoint means no local process to babysit. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box. Updates land regularly, and nothing broke when I upgraded.

Used for Onboarding Q&A for new hires

  • Setup & docs 2/5
  • Auth experience 2/5
  • Reliability 2/5
  • Maintainer responsiveness 2/5
Emily Chen Software engineer, agency
Trusts in production Recommends

Solid and well behaved

Started with it as an experiment, now it is a fixture. Turned on read-only mode on day one, highly recommend doing the same. There is no auth layer, so whatever can reach it can use it. I keep it local only. Would recommend without hesitation.

Used for Onboarding Q&A for new hires

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Tomas Novak ML engineer
Trusts with caveats Recommends

OK for read-only work

Good for experimenting, still deciding about production. No access control at all, it runs with my permissions. Fine on my laptop, not on a shared box. Worth it, just do not skip the hardening steps.

Used for Keeping a team knowledge base tidy

  • Setup & docs 3/5
  • Auth experience 2/5
  • Reliability 2/5
  • Maintainer responsiveness 4/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you