在 API 管理中以编程方式管理 MCP 服务器

SUBSCRIPTION_ID="<your-subscription-id>"
RESOURCE_GROUP="<your-resource-group>"
APIM_NAME="<your-api-management-service-name>"
API_VERSION="2025-09-01-preview"
BASE_URL="https://management.chinacloudapi.cn/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.ApiManagement/service/${APIM_NAME}"
TOKEN=$(az account get-access-token --resource https://management.chinacloudapi.cn --query accessToken -o tsv)

$subscriptionId = "<your-subscription-id>"
$resourceGroup  = "<your-resource-group>"
$apimName       = "<your-apim-service-name>"
$apiVersion     = "2025-09-01-preview"
$baseUri        = "https://management.chinacloudapi.cn/subscriptions/$subscriptionId" +
                  "/resourceGroups/$resourceGroup" +
                  "/providers/Microsoft.ApiManagement/service/$apimName"

Invoke-AzRestMethod 使用当前 Connect-AzAccount -Environment AzureChinaCloud 会话进行身份验证。 无需单独的令牌处理步骤。

curl -sG "${BASE_URL}/apis" \
  --data-urlencode "api-version=${API_VERSION}" \
  --data-urlencode "\$filter=type eq 'mcp'" \
  -H "Authorization: Bearer ${TOKEN}"

$uri = "$baseUri/apis?api-version=$apiVersion&`$filter=type eq 'mcp'"
(Invoke-AzRestMethod -Method GET -Uri $uri).Content | ConvertFrom-Json

MCP_SERVER_ID="my-mcp-server"

curl -s "${BASE_URL}/apis/${MCP_SERVER_ID}?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}"

$mcpServerId = "my-mcp-server"

$uri = "$baseUri/apis/$mcpServerId?api-version=$apiVersion"
(Invoke-AzRestMethod -Method GET -Uri $uri).Content | ConvertFrom-Json

MCP_SERVER_ID="my-mcp-server"

curl -s -X PUT \
  "${BASE_URL}/apis/${MCP_SERVER_ID}?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}" \
  -H "Content-Type: application/json" \
  -H "If-Match: *" \
  -d '{
    "properties": {
      "type": "mcp",
      "path": "my-mcp",
      "displayName": "My MCP Server",
      "description": "MCP server backed by a REST API",
      "protocols": ["https"]
    }
  }'

$mcpServerId = "my-mcp-server"

$uri  = "$baseUri/apis/$mcpServerId?api-version=$apiVersion"
$body = @{
    properties = @{
        type        = "mcp"
        path        = "my-mcp"
        displayName = "My MCP Server"
        description = "MCP server backed by a REST API"
        protocols   = @("https")
    }
} | ConvertTo-Json -Depth 5

Invoke-AzRestMethod -Method PUT -Uri $uri -Payload $body `
    -Headers @{ "If-Match" = "*" }

MCP_SERVER_ID="my-mcp-passthrough"

curl -s -X PUT \
  "${BASE_URL}/apis/${MCP_SERVER_ID}?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}" \
  -H "Content-Type: application/json" \
  -H "If-Match: *" \
  -d '{
    "properties": {
      "type": "mcp",
      "path": "my-mcp-passthrough",
      "displayName": "My Passthrough MCP Server",
      "description": "Passthrough MCP server using streamable HTTP transport",
      "protocols": ["https"],
      "serviceUrl": "https://mcp-backend.contoso.com",
      "mcpProperties": {
        "transportType": "streamable",
        "endpoints": [
          { "name": "message", "uriTemplate": "/mcp" }
        ]
      }
    }
  }'

$mcpServerId = "my-mcp-passthrough"

$uri  = "$baseUri/apis/$mcpServerId?api-version=$apiVersion"
$body = @{
    properties = @{
        type          = "mcp"
        path          = "my-mcp-passthrough"
        displayName   = "My Passthrough MCP Server"
        description   = "Passthrough MCP server using streamable HTTP transport"
        protocols     = @("https")
        serviceUrl    = "https://mcp-backend.contoso.com"
        mcpProperties = @{
            transportType = "streamable"
            endpoints     = @(
                @{ name = "message"; uriTemplate = "/mcp" }
            )
        }
    }
} | ConvertTo-Json -Depth 10

Invoke-AzRestMethod -Method PUT -Uri $uri -Payload $body `
    -Headers @{ "If-Match" = "*" }

MCP_SERVER_ID="my-mcp-sse"

curl -s -X PUT \
  "${BASE_URL}/apis/${MCP_SERVER_ID}?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}" \
  -H "Content-Type: application/json" \
  -H "If-Match: *" \
  -d '{
    "properties": {
      "type": "mcp",
      "path": "my-mcp-sse",
      "displayName": "My SSE MCP Server",
      "description": "Passthrough MCP server using SSE transport",
      "protocols": ["https"],
      "serviceUrl": "https://mcp-backend.contoso.com",
      "mcpProperties": {
        "transportType": "sse",
        "endpoints": [
          { "name": "sse",     "uriTemplate": "/sse" },
          { "name": "message", "uriTemplate": "/messages" }
        ]
      }
    }
  }'

$mcpServerId = "my-mcp-sse"

$uri  = "$baseUri/apis/$mcpServerId?api-version=$apiVersion"
$body = @{
    properties = @{
        type          = "mcp"
        path          = "my-mcp-sse"
        displayName   = "My SSE MCP Server"
        description   = "Passthrough MCP server using SSE transport"
        protocols     = @("https")
        serviceUrl    = "https://mcp-backend.contoso.com"
        mcpProperties = @{
            transportType = "sse"
            endpoints     = @(
                @{ name = "sse";     uriTemplate = "/sse" },
                @{ name = "message"; uriTemplate = "/messages" }
            )
        }
    }
} | ConvertTo-Json -Depth 10

Invoke-AzRestMethod -Method PUT -Uri $uri -Payload $body `
    -Headers @{ "If-Match" = "*" }

MCP_SERVER_ID="my-mcp-server"
TOOL_ID="listOrders"
BACKING_API_ID="orders-api"
BACKING_OP_ID="list-orders"
OP_ID="/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.ApiManagement/service/${APIM_NAME}/apis/${BACKING_API_ID}/operations/${BACKING_OP_ID}"

curl -s -X PUT \
  "${BASE_URL}/apis/${MCP_SERVER_ID}/tools/${TOOL_ID}?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}" \
  -H "Content-Type: application/json" \
  -H "If-Match: *" \
  --data-raw "{
    \"properties\": {
      \"displayName\": \"listOrders\",
      \"description\": \"List all orders for a customer\",
      \"operationId\": \"${OP_ID}\"
    }
  }"

$mcpServerId  = "my-mcp-server"
$toolId       = "listOrders"
$backingApiId = "orders-api"
$backingOpId  = "list-orders"

$uri         = "$baseUri/apis/$mcpServerId/tools/$toolId?api-version=$apiVersion"
$operationId = "/subscriptions/$subscriptionId/resourceGroups/$resourceGroup" +
               "/providers/Microsoft.ApiManagement/service/$apimName" +
               "/apis/$backingApiId/operations/$backingOpId"
$body = @{
    properties = @{
        displayName = $toolId
        description = "List all orders for a customer"
        operationId = $operationId
    }
} | ConvertTo-Json -Depth 5

Invoke-AzRestMethod -Method PUT -Uri $uri -Payload $body `
    -Headers @{ "If-Match" = "*" }

MCP_SERVER_ID="my-mcp-server"
TOOL_ID="listOrders"

curl -s -X DELETE \
  "${BASE_URL}/apis/${MCP_SERVER_ID}/tools/${TOOL_ID}?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}" \
  -H "If-Match: *"

$mcpServerId = "my-mcp-server"
$toolId      = "listOrders"

$uri = "$baseUri/apis/$mcpServerId/tools/$toolId?api-version=$apiVersion"
Invoke-AzRestMethod -Method DELETE -Uri $uri `
    -Headers @{ "If-Match" = "*" }

MCP_SERVER_ID="my-mcp-server"
POLICY='<policies><inbound><base /><rate-limit calls="100" renewal-period="60" /></inbound><backend><forward-request /></backend><outbound><base /></outbound></policies>'

curl -s -X PUT \
  "${BASE_URL}/apis/${MCP_SERVER_ID}/policies/policy?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}" \
  -H "Content-Type: application/json" \
  -H "If-Match: *" \
  --data-raw "{\"properties\":{\"format\":\"rawxml\",\"value\":\"${POLICY}\"}}"

$mcpServerId = "my-mcp-server"

$uri    = "$baseUri/apis/$mcpServerId/policies/policy?api-version=$apiVersion"
$policy = '<policies><inbound><base /><rate-limit calls="100" renewal-period="60" /></inbound>' +
          '<backend><forward-request /></backend>' +
          '<outbound><base /></outbound></policies>'
$body   = @{
    properties = @{
        format = "rawxml"
        value  = $policy
    }
} | ConvertTo-Json

Invoke-AzRestMethod -Method PUT -Uri $uri -Payload $body `
    -Headers @{ "If-Match" = "*" }

MCP_SERVER_ID="my-mcp-server"
PRODUCT_ID="my-product"

curl -s -X PUT \
  "${BASE_URL}/products/${PRODUCT_ID}/apis/${MCP_SERVER_ID}?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}" \
  -H "Content-Length: 0"

$mcpServerId = "my-mcp-server"
$productId   = "my-product"

$uri = "$baseUri/products/$productId/apis/$mcpServerId?api-version=$apiVersion"
Invoke-AzRestMethod -Method PUT -Uri $uri

MCP_SERVER_ID="my-mcp-server"

curl -s -X DELETE \
  "${BASE_URL}/apis/${MCP_SERVER_ID}?api-version=${API_VERSION}" \
  -H "Authorization: Bearer ${TOKEN}" \
  -H "If-Match: *"

$mcpServerId = "my-mcp-server"

$uri = "$baseUri/apis/$mcpServerId?api-version=$apiVersion"
Invoke-AzRestMethod -Method DELETE -Uri $uri `
    -Headers @{ "If-Match" = "*" }

@description('Name of the existing API Management service instance.')
param serviceName string

@description('Resource name for the new MCP server.')
param mcpServerId string = 'orders-mcp'

@description('Resource name of the existing REST API that backs this MCP server.')
param backingApiId string

@description('Resource name of the operation in the backing REST API to expose as a tool.')
param backingOperationId string

@description('Resource name and display name of the MCP tool to create.')
param toolId string = 'sampleTool'

@description('Resource name of the existing product to bind the MCP server to.')
param productId string = 'starter'

resource apimService 'Microsoft.ApiManagement/service@2025-09-01-preview' existing = {
  name: serviceName
}

resource mcpServer 'Microsoft.ApiManagement/service/apis@2025-09-01-preview' = {
  parent: apimService
  name: mcpServerId
  properties: {
    type: 'mcp'
    displayName: 'Orders MCP Server'
    description: 'MCP server backed by the Orders REST API'
    path: mcpServerId
    protocols: [ 'https' ]
    subscriptionRequired: true
  }
}

resource mcpTool 'Microsoft.ApiManagement/service/apis/tools@2025-09-01-preview' = {
  parent: mcpServer
  name: toolId
  properties: {
    displayName: toolId
    description: 'MCP tool backed by an API operation'
    operationId: resourceId(
      'Microsoft.ApiManagement/service/apis/operations',
      serviceName, backingApiId, backingOperationId
    )
  }
}

resource mcpPolicy 'Microsoft.ApiManagement/service/apis/policies@2025-09-01-preview' = {
  parent: mcpServer
  name: 'policy'
  properties: {
    format: 'rawxml'
    value: '''<policies>
  <inbound>
    <base />
    <rate-limit calls="100" renewal-period="60" />
  </inbound>
  <backend>
    <forward-request />
  </backend>
  <outbound>
    <base />
  </outbound>
</policies>'''
  }
}

resource product 'Microsoft.ApiManagement/service/products@2025-09-01-preview' existing = {
  parent: apimService
  name: productId
}

resource productBinding 'Microsoft.ApiManagement/service/products/apis@2025-09-01-preview' = {
  parent: product
  name: mcpServerId
  dependsOn: [ mcpServer ]
}

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "serviceName": {
      "type": "string",
      "metadata": { "description": "Name of the existing API Management service instance." }
    },
    "mcpServerId": {
      "type": "string",
      "defaultValue": "orders-mcp",
      "metadata": { "description": "Resource name for the new MCP server." }
    },
    "backingApiId": {
      "type": "string",
      "metadata": { "description": "Resource name of the existing REST API that backs this MCP server." }
    },
    "backingOperationId": {
      "type": "string",
      "metadata": { "description": "Resource name of the operation in the backing REST API to expose as a tool." }
    },
    "toolId": {
      "type": "string",
      "defaultValue": "sampleTool",
      "metadata": { "description": "Resource name and display name of the MCP tool to create." }
    },
    "productId": {
      "type": "string",
      "defaultValue": "starter",
      "metadata": { "description": "Resource name of the existing product to bind the server to." }
    }
  },
  "resources": [
    {
      "type": "Microsoft.ApiManagement/service/apis",
      "apiVersion": "2025-09-01-preview",
      "name": "[concat(parameters('serviceName'), '/', parameters('mcpServerId'))]",
      "properties": {
        "type": "mcp",
        "displayName": "Orders MCP Server",
        "description": "MCP server backed by the Orders REST API",
        "path": "[parameters('mcpServerId')]",
        "protocols": [ "https" ],
        "subscriptionRequired": true
      }
    },
    {
      "type": "Microsoft.ApiManagement/service/apis/tools",
      "apiVersion": "2025-09-01-preview",
      "name": "[concat(parameters('serviceName'), '/', parameters('mcpServerId'), '/', parameters('toolId'))]",
      "dependsOn": [
        "[resourceId('Microsoft.ApiManagement/service/apis', parameters('serviceName'), parameters('mcpServerId'))]"
      ],
      "properties": {
        "displayName": "[parameters('toolId')]",
        "description": "MCP tool backed by an API operation",
        "operationId": "[resourceId('Microsoft.ApiManagement/service/apis/operations', parameters('serviceName'), parameters('backingApiId'), parameters('backingOperationId'))]"
      }
    },
    {
      "type": "Microsoft.ApiManagement/service/apis/policies",
      "apiVersion": "2025-09-01-preview",
      "name": "[concat(parameters('serviceName'), '/', parameters('mcpServerId'), '/policy')]",
      "dependsOn": [
        "[resourceId('Microsoft.ApiManagement/service/apis', parameters('serviceName'), parameters('mcpServerId'))]"
      ],
      "properties": {
        "format": "rawxml",
        "value": "<policies>\n  <inbound>\n    <base />\n    <rate-limit calls=\"100\" renewal-period=\"60\" />\n  </inbound>\n  <backend>\n    <forward-request />\n  </backend>\n  <outbound>\n    <base />\n  </outbound>\n</policies>"
      }
    },
    {
      "type": "Microsoft.ApiManagement/service/products/apis",
      "apiVersion": "2025-09-01-preview",
      "name": "[concat(parameters('serviceName'), '/', parameters('productId'), '/', parameters('mcpServerId'))]",
      "dependsOn": [
        "[resourceId('Microsoft.ApiManagement/service/apis', parameters('serviceName'), parameters('mcpServerId'))]"
      ]
    }
  ]
}

@description('Name of the existing API Management service instance.')
param serviceName string

@description('Resource name for the new MCP server.')
param mcpServerId string = 'external-mcp'

@description('Absolute URL of the external MCP backend.')
param backendUrl string

@description('Resource name of the existing product to bind the MCP server to.')
param productId string = 'starter'

resource apimService 'Microsoft.ApiManagement/service@2025-09-01-preview' existing = {
  name: serviceName
}

resource mcpServer 'Microsoft.ApiManagement/service/apis@2025-09-01-preview' = {
  parent: apimService
  name: mcpServerId
  properties: {
    type: 'mcp'
    displayName: 'External MCP Server'
    description: 'Passthrough MCP server using streamable HTTP transport'
    path: mcpServerId
    protocols: [ 'https' ]
    serviceUrl: backendUrl
    subscriptionRequired: true
    mcpProperties: {
      transportType: 'streamable'
      endpoints: [
        {
          name: 'message'
          uriTemplate: '/mcp'
        }
      ]
    }
  }
}

resource mcpPolicy 'Microsoft.ApiManagement/service/apis/policies@2025-09-01-preview' = {
  parent: mcpServer
  name: 'policy'
  properties: {
    format: 'rawxml'
    value: '''<policies>
  <inbound>
    <base />
    <rate-limit calls="100" renewal-period="60" />
  </inbound>
  <backend>
    <forward-request />
  </backend>
  <outbound>
    <base />
  </outbound>
</policies>'''
  }
}

resource product 'Microsoft.ApiManagement/service/products@2025-09-01-preview' existing = {
  parent: apimService
  name: productId
}

resource productBinding 'Microsoft.ApiManagement/service/products/apis@2025-09-01-preview' = {
  parent: product
  name: mcpServerId
  dependsOn: [ mcpServer ]
}

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "serviceName": {
      "type": "string",
      "metadata": { "description": "Name of the existing API Management service instance." }
    },
    "mcpServerId": {
      "type": "string",
      "defaultValue": "external-mcp",
      "metadata": { "description": "Resource name for the new MCP server." }
    },
    "backendUrl": {
      "type": "string",
      "metadata": { "description": "Absolute URL of the external MCP backend." }
    },
    "productId": {
      "type": "string",
      "defaultValue": "starter",
      "metadata": { "description": "Resource name of the existing product to bind the server to." }
    }
  },
  "resources": [
    {
      "type": "Microsoft.ApiManagement/service/apis",
      "apiVersion": "2025-09-01-preview",
      "name": "[concat(parameters('serviceName'), '/', parameters('mcpServerId'))]",
      "properties": {
        "type": "mcp",
        "displayName": "External MCP Server",
        "description": "Passthrough MCP server using streamable HTTP transport",
        "path": "[parameters('mcpServerId')]",
        "protocols": [ "https" ],
        "serviceUrl": "[parameters('backendUrl')]",
        "subscriptionRequired": true,
        "mcpProperties": {
          "transportType": "streamable",
          "endpoints": [
            {
              "name": "message",
              "uriTemplate": "/mcp"
            }
          ]
        }
      }
    },
    {
      "type": "Microsoft.ApiManagement/service/apis/policies",
      "apiVersion": "2025-09-01-preview", 
      "name": "[concat(parameters('serviceName'), '/', parameters('mcpServerId'), '/policy')]",
      "dependsOn": [
        "[resourceId('Microsoft.ApiManagement/service/apis', parameters('serviceName'), parameters('mcpServerId'))]"
      ],
      "properties": {
        "format": "rawxml",
        "value": "<policies>\n  <inbound>\n    <base />\n    <rate-limit calls=\"100\" renewal-period=\"60\" />\n  </inbound>\n  <backend>\n    <forward-request />\n  </backend>\n  <outbound>\n    <base />\n  </outbound>\n</policies>"
      }
    },
    {
      "type": "Microsoft.ApiManagement/service/products/apis",
      "apiVersion": "2025-09-01-preview",
      "name": "[concat(parameters('serviceName'), '/', parameters('productId'), '/', parameters('mcpServerId'))]",
      "dependsOn": [
        "[resourceId('Microsoft.ApiManagement/service/apis', parameters('serviceName'), parameters('mcpServerId'))]"
      ]
    }
  ]
}