# How to connect Azure Monitor Activity Log to Claude

```json
{
  "title": "How to connect Azure Monitor Activity Log to Claude",
  "toolkit": "Azure Monitor Activity Log",
  "toolkit_slug": "azure_monitor_activity_log",
  "framework": "Claude Cowork",
  "framework_slug": "claude-cowork",
  "url": "https://composio.dev/toolkits/azure_monitor_activity_log/framework/claude-cowork",
  "markdown_url": "https://composio.dev/toolkits/azure_monitor_activity_log/framework/claude-cowork.md",
  "updated_at": "2026-09-11T05:33:58.651Z"
}
```

## Introduction

Claude is Anthropic's AI assistant, available on the web, in the desktop app, and on mobile. Cowork is its agent for knowledge work, and it runs on all of those surfaces too. Connected to your apps, Claude can work with your files and services to accomplish complex tasks on your behalf.
This guide walks you through the easiest and most secure way to connect your Azure Monitor Activity Log account to Claude via Composio Connect, enabling it to list recent activity events for subscription, filter activity logs by resource and time, summarize failed operations in last 24h, and more such actions on your behalf without compromising your account security.
Setup is the same on Claude Web, Desktop, and Cowork, and you only need to do it once. The connector is tied to your account, so it's available in all three.

## Also integrate Azure Monitor Activity Log with

- [ChatGPT Work](https://composio.dev/toolkits/azure_monitor_activity_log/framework/chatgpt)
- [Hermes](https://composio.dev/toolkits/azure_monitor_activity_log/framework/hermes-agent)

## Connect Azure Monitor Activity Log to Claude Cowork

### Connecting Azure Monitor Activity Log to Claude Web, Desktop, and Cowork
1. Open Customize
In Claude Desktop, click Customize in the left sidebar, then select Connectors and click the + icon at the top.
2. Add the Composio MCP server
Click Add custom connector and paste in the Composio MCP server URL:

```bash
https://connect.composio.dev/mcp
```

## What is the Azure Monitor Activity Log MCP server, and what's possible with it?

The Azure Monitor Activity Log MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Azure Monitor Activity Log account. It provides structured and secure access so your agent can perform Azure Monitor Activity Log operations on your behalf.

## Supported Tools

| Tool slug | Name | Description |
|---|---|---|
| `AZURE_MONITOR_ACTIVITY_LOG_LIST_EVENT_CATEGORIES` | List Event Categories | Return the Activity Log event categories recognized by Azure, including their localized labels when available. |
| `AZURE_MONITOR_ACTIVITY_LOG_LIST_EVENTS` | List Activity Log Events | Return one page of Activity Log events for a UTC time range from the subscription selected when the Azure connection was created. Legacy connections missing that selection work only when exactly one subscription is visible; otherwise reconnect. Optionally narrow by one documented resource or correlation field. |

## Supported Triggers

None listed.

## Troubleshooting

### 1. Why does Claude not use the Composio connector for Azure Monitor Activity Log?

The connector can show as connected, but Claude must use it in each Azure Monitor Activity Log conversation.
- Click + at the lower left of the chat, or type /.
- Hover Connectors.
- Turn on Composio.
- Ask Claude to connect to Azure Monitor Activity Log again.

### 2. Why does Claude show an MCP server error before Azure Monitor Activity Log connects?

Claude can show Couldn't reach the MCP server or Authorization with the MCP server failed when you add the connector for Azure Monitor Activity Log.
- Check that the connector URL is https://connect.composio.dev/mcp.
- Connectors run from Anthropic's cloud, so your device network is usually not the problem.
- Add the connector again from Customize > Connectors, then ask Claude to connect Azure Monitor Activity Log.
- If it fails again, send the error and the ofid_ reference id to support@composio.dev.

### 3. Why does the Azure Monitor Activity Log authorization link not work?

The Composio connector is one server. Your Azure Monitor Activity Log account connects separately when Claude asks for it.
- If the browser does not open, or the link expires, ask Claude to retry the Azure Monitor Activity Log connection.
- Composio creates a fresh Azure Monitor Activity Log authorization link.
- Open that link in your browser and finish the Azure Monitor Activity Log sign-in.

### 4. Why do Azure Monitor Activity Log actions fail after they worked before?

The Azure Monitor Activity Log connection can expire or lose permission.
- Ask Claude to inspect the Azure Monitor Activity Log connection.
- If the connection is unhealthy, disconnect it when Claude prompts you.
- Reconnect the Azure Monitor Activity Log account and retry the action.
- If Claude shows a permission prompt, approve it before Claude changes data in Azure Monitor Activity Log.
- If the action still fails with a permission error, check that the connected account has that permission in Azure Monitor Activity Log itself.

### 5. How do I switch to a different Azure Monitor Activity Log account?

Claude can manage the Azure Monitor Activity Log connection for you.
- Ask Claude to disconnect or delete the current Azure Monitor Activity Log account.
- Ask Claude to connect Azure Monitor Activity Log again.
- Open the new Composio authorization link for Azure Monitor Activity Log.
- Sign in with the other Azure Monitor Activity Log account in the browser.
- After the account connects, ask Claude to retry the Azure Monitor Activity Log task.

### 6. Why is my Azure Monitor Activity Log connection missing in Claude Desktop or on a Team plan?

The connector belongs to your Claude account, so your Azure Monitor Activity Log connection works in Claude Web, Desktop, and Cowork.
- In Claude Desktop, open Customize > Connectors.
- Next to Composio, click ⋮ and click Clear cache.
- If Azure Monitor Activity Log tools still do not appear, click ⋮, disconnect, remove the connector, and add it again.
- On Team or Enterprise, an Owner or Primary Owner must enable the connector before you can connect Azure Monitor Activity Log.

## Creating MCP Server - Stand-alone vs Composio SDK

The Azure Monitor Activity Log MCP server connects Claude Web, Desktop, and Cowork to your Azure Monitor Activity Log account through Composio. Once connected, Claude can use the available Azure Monitor Activity Log tools and triggers to complete tasks on your behalf.

## Complete Code

None listed.

## How to build Azure Monitor Activity Log MCP Agent with another framework

- [ChatGPT Work](https://composio.dev/toolkits/azure_monitor_activity_log/framework/chatgpt)
- [Hermes](https://composio.dev/toolkits/azure_monitor_activity_log/framework/hermes-agent)

## Related Toolkits

- [Supabase](https://composio.dev/toolkits/supabase) - Supabase is an open-source backend platform offering scalable Postgres databases, authentication, storage, and real-time APIs. It lets developers build modern apps without managing infrastructure.
- [Codeinterpreter](https://composio.dev/toolkits/codeinterpreter) - Codeinterpreter is a Python-based coding environment with built-in data analysis and visualization. It lets you instantly run scripts, plot results, and prototype solutions inside supported platforms.
- [GitHub](https://composio.dev/toolkits/github) - GitHub is a code hosting platform for version control and collaborative software development. It streamlines project management, code review, and team workflows in one place.
- [1password](https://composio.dev/toolkits/_1password) - 1Password is a password manager and digital vault for storing logins, secrets, notes, and secure documents. It helps individuals and teams protect credentials, share access safely, and reduce password risk.
- [Ably](https://composio.dev/toolkits/ably) - Ably is a real-time messaging platform for live chat and data sync in modern apps. It offers global scale and rock-solid reliability for seamless, instant experiences.
- [Abuselpdb](https://composio.dev/toolkits/abuselpdb) - Abuselpdb is a central database for reporting and checking IPs linked to malicious online activity. Use it to quickly identify and report suspicious or abusive IP addresses.
- [Alchemy](https://composio.dev/toolkits/alchemy) - Alchemy is a blockchain development platform offering APIs and tools for Ethereum apps. It simplifies building and scaling Web3 projects with robust infrastructure.
- [Algolia](https://composio.dev/toolkits/algolia) - Algolia is a hosted search API that powers lightning-fast, relevant search experiences for web and mobile apps. It helps developers deliver instant, typo-tolerant, and scalable search without complex infrastructure.
- [Anchor browser](https://composio.dev/toolkits/anchor_browser) - Anchor browser is a developer platform for AI-powered web automation. It transforms complex browser actions into easy API endpoints for streamlined web interaction.
- [Apiflash](https://composio.dev/toolkits/apiflash) - Apiflash is a website screenshot API for programmatically capturing web pages. It delivers high-quality screenshots on demand for automation, monitoring, or reporting.
- [Apiverve](https://composio.dev/toolkits/apiverve) - Apiverve delivers a suite of powerful APIs that simplify integration for developers. It's designed for reliability and scalability so you can build faster, smarter applications without the integration headache.
- [Appcircle](https://composio.dev/toolkits/appcircle) - Appcircle is an enterprise-grade mobile CI/CD platform for building, testing, and publishing mobile apps. It streamlines mobile DevOps so teams ship faster and with more confidence.
- [Appdrag](https://composio.dev/toolkits/appdrag) - Appdrag is a cloud platform for building websites, APIs, and databases with drag-and-drop tools and code editing. It accelerates development and iteration by combining hosting, database management, and low-code features in one place.
- [Appveyor](https://composio.dev/toolkits/appveyor) - AppVeyor is a cloud-based continuous integration service for building, testing, and deploying applications. It helps developers automate and streamline their software delivery pipelines.
- [Authyo](https://composio.dev/toolkits/authyo) - Authyo is a REST API service for passwordless authentication, OTP verification, session management, and transactional notifications. Use it to add secure login flows and user verification without building auth infrastructure from scratch.
- [AWS Marketplace MCP](https://composio.dev/toolkits/aws_marketplace_mcp) - AWS Marketplace MCP provides MCP access to AWS Marketplace's cloud software, data, and services catalog. Use it to discover, compare, and evaluate 30K+ AWS Marketplace listings faster.
- [Backendless](https://composio.dev/toolkits/backendless) - Backendless is a backend-as-a-service platform for mobile and web apps, offering database, file storage, user authentication, and APIs. It helps developers ship scalable applications faster without managing server infrastructure.
- [Baserow](https://composio.dev/toolkits/baserow) - Baserow is an open-source no-code database platform for building collaborative data apps. It makes it easy for teams to organize data and automate workflows without writing code.
- [Bench](https://composio.dev/toolkits/bench) - Bench is a benchmarking tool for automated performance measurement and analysis. It helps you quickly evaluate, compare, and track your systems or workflows.
- [Better stack](https://composio.dev/toolkits/better_stack) - Better Stack is a monitoring, logging, and incident management solution for apps and services. It helps teams ensure application reliability and performance with real-time insights.

## Frequently Asked Questions

### What are the differences in Tool Router MCP and Azure Monitor Activity Log MCP?

With a standalone Azure Monitor Activity Log MCP server, the agents and LLMs can only access a fixed set of Azure Monitor Activity Log tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Azure Monitor Activity Log and many other apps based on the task at hand, all through a single MCP endpoint.

### Can I use Tool Router MCP with Claude Cowork?

Yes, you can. Claude Cowork fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Azure Monitor Activity Log tools.

### Can I manage the permissions and scopes for Azure Monitor Activity Log while using Tool Router?

Yes, absolutely. You can configure which Azure Monitor Activity Log scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

### How safe is my data with Composio Tool Router?

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Azure Monitor Activity Log data and credentials are handled as safely as possible.

---
[See all toolkits](https://composio.dev/toolkits) · [Composio docs](https://docs.composio.dev/llms.txt)