Automated-BOD-25-01-CISA-Microsoft-Policies-MCP

The CISA M365 MCP Server is an MCP server designed to implement CISA's Binding Operational Directive 25-01 for security controls in Microsoft 365 environments. It offers comprehensive tools for managing security settings like legacy authentication controls, multi-factor authentication, and privilege management, enhancing compliance and security posture.

block_legacy_auth

Block traditional authentication methods

block_high_risk_users

Block high-risk users

enforce_phishing_resistant_mfa

Enforce anti-fishing MFA

configure_global_admins

Configure global administrator role assignment

get_policy_status

Get the current status of all security policies