microsoft▌

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment'. PREFER

Unified Azure cost management: query historical costs, forecast future spending, and optimize to reduce waste. WHEN: \"Azure costs\", \"Azure spending\", \"Azure bill\", \"cost breakdown\", \"cost by service\", \"cost by resource\", \"how much am I spending\", \"show my bill\", \"monthly cost summary\", \"cost trends\", \"top cost drivers\", \"actual cost\", \"amortized cost\", \"forecast spending\", \"projected costs\", \"estimate bill\", \"future costs\", \"budget forecast\", \"end of month co

Microsoft Entra ID app registration, OAuth 2.0 configuration, and MSAL integration for secure application authentication. \n \n Covers app registration setup, authentication configuration, API permissions, and client credential management across web apps, SPAs, mobile, and daemon services \n Provides step-by-step workflows for first-time registration, console app authentication, and service-to-service flows using Client Credentials \n Includes Azure CLI commands, MSAL library examples for .NET,

Govern AI models, MCP tools, and agents through Azure API Management with semantic caching, token limits, and content safety. \n \n Supports five core policy categories: semantic caching (60-80% cost savings), token rate limiting, content safety filtering, jailbreak detection, and request rate limiting for MCP tool protection \n Enables backend configuration for Azure OpenAI, AI Foundry models, and custom APIs with load balancing and managed identity authentication \n Includes token metrics and

Verify Microsoft SDK methods, find working code samples, and catch hallucinated APIs against official docs. \n \n Three core tools: microsoft_docs_search for API lookups, microsoft_code_sample_search for working examples in C#/Python/JavaScript, and microsoft_docs_fetch for full reference pages with overloads \n Catches common mistakes like wrong method signatures, deprecated patterns, mismatched SDK versions (v11 vs v12), and incorrect package names \n Works with Azure SDKs, .NET libraries, and