Azure Resource Lookup
- 481k installs
- 1.3k repo stars
- Updated July 26, 2026
- microsoft/azure-skills
azure-resource-lookup is an agent skill that lists and discovers Azure resources across subscriptions and resource groups using Azure Resource Graph queries.
About
azure-resource-lookup lists, finds and inventories Azure resources of any type across subscriptions and resource groups. A developer uses it to answer 'what resources do I have', list web apps or VMs, audit tags, or find orphaned resources like unattached disks, routing through Azure Resource Graph when no dedicated MCP tool covers the type. It is read-only and defers deployment to azure-deploy and cost work to azure-cost. It requires the resource-graph az extension and Reader role on the target subscriptions.
- Lists and discovers Azure resources of any type across subscriptions and resource groups
- Uses Azure Resource Graph (KQL) for cross-cutting queries when no dedicated MCP tool exists
- Finds orphaned resources (unattached disks, unused NICs, idle IPs) and untagged resources
- Read-only: explicitly never mutates resources through Resource Graph
Azure Resource Lookup by the numbers
- 480,988 all-time installs (skills.sh)
- Security screen: LOW risk (skills.sh audit)
- Data as of Jul 28, 2026 (Skillselion catalog sync)
azure-resource-lookup capabilities & compatibility
Free skill; requires the resource-graph az extension and Reader access to the subscriptions.
- Capabilities
- resource inventory · resource graph query · orphaned resource discovery · tag audit · cross subscription lookup
- Works with
- azure
- Use cases
- devops
- Pricing
- Free
What azure-resource-lookup says it does
List, find, and discover Azure resources of any type across subscriptions and resource groups.
Find **orphaned resources** (unattached disks, unused NICs, idle IPs)
**Never** attempt mutations through ARG (read-only)
npx skills add https://github.com/microsoft/azure-skills --skill azure-resource-lookupAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 481k |
|---|---|
| repo stars | ★ 1.3k |
| Security audit | 3 / 3 scanners passed |
| Last updated | July 26, 2026 |
| Repository | microsoft/azure-skills ↗ |
What Azure resources exist across my subscriptions, and which are orphaned or missing required tags?
devops
Who is it for?
Developers who need a fast cross-subscription Azure resource inventory, tag audit, or orphaned-resource sweep from agent chat.
Skip if: Deploying or changing resources (use azure-deploy), cost optimization (use azure-cost), or non-Azure clouds.
When should I use this skill?
The user asks to list, show or count Azure resources, inventory a subscription, find resources by tag, or discover orphaned resources like unattached disks.
What you get
A formatted resource inventory or Resource Graph query result scoped by subscription, type or tag.
- Formatted resource inventory table
- Generated az graph query commands
By the numbers
- 11-resource-type routing table (dedicated MCP vs ARG)
- 3-step lookup workflow
Files
Azure Resource Lookup
List, find, and discover Azure resources of any type across subscriptions and resource groups. Use Azure Resource Graph (ARG) for fast, cross-cutting queries when dedicated MCP tools don't cover the resource type.
When to Use This Skill
Use this skill when the user wants to:
- List resources of any type (VMs, web apps, storage accounts, container apps, databases, etc.)
- Show resources in a specific subscription or resource group
- Query resources across multiple subscriptions or resource types
- Find orphaned resources (unattached disks, unused NICs, idle IPs)
- Discover resources missing required tags or configurations
- Get a resource inventory spanning multiple types
- Find resources in a specific state (unhealthy, failed provisioning, stopped)
- Answer "what resources do I have?" or "show me my Azure resources"
- List web apps, websites, or App Services
⚠️ Warning: App Service / Web Apps have no dedicated MCP list command. Prompts like "list websites", "list web apps", or "list app services" must route through this skill to use Azure Resource Graph.💡 Tip: For single-resource-type queries, first check if a dedicated MCP tool can handle it (see routing table below). If none exists, use Azure Resource Graph.
Quick Reference
| Property | Value |
|---|---|
| Query Language | KQL (Kusto Query Language subset) |
| CLI Command | az graph query -q "<KQL>" -o table |
| Extension | az extension add --name resource-graph |
| MCP Tool | extension_cli_generate with intent for az graph query |
| Best For | Cross-subscription queries, orphaned resources, tag audits |
MCP Tools
| Tool | Purpose | When to Use |
|---|---|---|
extension_cli_generate | Generate az graph query commands | Primary tool — generate ARG queries from user intent |
mcp_azure_mcp_subscription_list | List available subscriptions | Discover subscription scope before querying |
mcp_azure_mcp_group_list | List resource groups | Narrow query scope |
Workflow
Step 1: Check for a Dedicated MCP Tool
For single-resource-type queries, check if a dedicated MCP tool can handle it:
| Resource Type | MCP Tool | Coverage |
|---|---|---|
| Virtual Machines | compute | ✅ Full — list, details, sizes |
| Storage Accounts | storage | ✅ Full — accounts, blobs, tables |
| Cosmos DB | cosmos | ✅ Full — accounts, databases, queries |
| Key Vault | keyvault | ⚠️ Partial — secrets/keys only, no vault listing |
| SQL Databases | sql | ⚠️ Partial — requires resource group name |
| Container Registries | acr | ✅ Full — list registries |
| Kubernetes (AKS) | aks | ✅ Full — clusters, node pools |
| App Service / Web Apps | appservice | ❌ No list command — use ARG |
| Container Apps | — | ❌ No MCP tool — use ARG |
| Event Hubs | eventhubs | ✅ Full — namespaces, hubs |
| Service Bus | servicebus | ✅ Full — queues, topics |
If a dedicated tool is available with full coverage, use it. Otherwi
Related skills
Azure AiIntegrates Azure AI Content Safety, Document Intelligence, Speech, and Search services into Java-based agents and applications.479k1.3kAzure PrepareGenerate the exact Azure infrastructure files, Dockerfiles, and azure.yaml configuration needed before deploying any new or modernized application.479k1.3kAzure StorageConnect agents and applications to Azure Blob Storage, File Shares, Queues, Tables, and Data Lake without leaving the coding environment.478k1.3kAppinsights InstrumentationAutomatically instrument web applications running on Azure App Service with Application Insights for observability without manual configuration.478k1.3kAzure AigatewayConfigure Azure API Management as a secure, governed gateway for routing traffic to LLMs, MCP servers, and agent tools.478k1.3kAzure Resource VisualizerInstantly generate accurate Mermaid architecture diagrams from any live Azure resource group.477k1.3kHow it compares
Use azure-resource-lookup for read-only inventory; pair with azure-compliance when orphaned resource findings need security follow-up.
FAQ
How does azure-resource-lookup query resources?
It generates and runs az graph query commands against Azure Resource Graph using KQL, and falls back to dedicated MCP tools for single resource types with full coverage.
Can it list App Service web apps?
Yes. App Service and Web Apps have no dedicated MCP list command, so prompts like 'list websites' or 'list web apps' route through this skill to use Azure Resource Graph.
Can it delete or change resources?
No. It is read-only and never attempts mutations through Azure Resource Graph.
Is Azure Resource Lookup safe to install?
skills.sh reports 3 of 3 security scanners passed. Review the Security Audits panel on this page before installing in production.