ActiveDirectoryMCP
access level: write✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/alpadalar/ActiveDirectoryMCP |
|---|---|
| Category | AD/Entra |
| Systems touched | Active Directory (43 tools) |
| Access (as described) | write |
| License / price | MIT / free |
| GitHub stars | 51 |
| Read tools | list/get users, groups, computers, OUs; get_user_groups, get_inactive_users, get_stale_computers, get_privileged_groups, get_password_policy_violations, get_domain_info, get_schema_info |
| Write / delete / exec tools | create/modify/delete/enable/disable user; reset_user_password; create/modify/delete group; add/remove group member; create/modify/delete/disable computer; reset_computer_password; create/modify/delete/move OU |
| Read-only mode | None found in source (no read-only/dry-run flag) |
| Safety notes | Can reset passwords and delete objects. Only safe read-only by binding with a read-only AD service account; never a Domain Admin bind. |
| Verified | yes (source review 2026-10-20) |
| Notes | Docker deploy |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.