A local copy of Microsoft Entra ID, formerly called Azure Active Directory, for testing OAuth 2.0 and OpenID Connect sign-in. It also emulates token discovery, token exchange, and the Microsoft Graph profile endpoint.

Use it to test authorization-code login, PKCE, client credentials, ID tokens, OIDC discovery, and requests for the signed-in user’s profile.

It lets you test Microsoft login and access-token flows without relying on a real Microsoft tenant or changing production identity settings.

microsoft — Skill for Claude Code by pleaseai/claude-code-plugins

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add pleaseai/claude-code-plugins --skill microsoft

Clone the repo

git clone --depth 1 https://github.com/pleaseai/claude-code-plugins

Made for: Claude Code.

Or install emulate, the plugin that ships this one along with the rest of its 11 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/pleaseai/claude-code-plugins/microsoft/github.svg)](https://agentmods.dev/skills/pleaseai/claude-code-plugins/microsoft)

Your own site

<a href="https://agentmods.dev/skills/pleaseai/claude-code-plugins/microsoft"><img src="https://agentmods.dev/badge/skills/pleaseai/claude-code-plugins/microsoft/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/pleaseai/claude-code-plugins/microsoft"><img src="https://agentmods.dev/badge/skills/pleaseai/claude-code-plugins/microsoft.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 133 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 3,384 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.

Origin 100% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00133	$0.03384
Opus 5.5	$0.00053	$0.01354
Sonnet 5.5	$0.00027	$0.00677
Haiku 4.5	$0.00013	$0.00338

Measured today against content hash 7d1882c31e3c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

microsoft scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

allowed-tools: Bash(npx emulate:*), Bash(curl:*)

Origin

This is a copy

100% identical to microsoft — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

plugins/emulate/.agents/skills/microsoft/SKILL.md · 370 lines

How it starts

The opening of the file, as written. The whole thing — 370 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Microsoft Entra ID Emulator

Microsoft Entra ID (Azure AD) v2.0 OAuth 2.0 and OpenID Connect emulation with authorization code flow, PKCE, client credentials, RS256 ID tokens, OIDC discovery, and a Microsoft Graph /v1.0/me endpoint.

Start

Local listeners bind to 127.0.0.1 by default. For access from containers or other machines, pass --host 0.0.0.0 to the CLI or hostname: '0.0.0.0' to createEmulator. Configure --base-url or baseUrl for advertised URLs reachable by those clients.

# Microsoft only
npx emulate --service microsoft

# Default port (when run alone)
# http://localhost:4000

Or programmatically:

import { createEmulator } from 'emulate'

const microsoft = await createEmulator({ service: 'microsoft', port: 4005 })
// microsoft.url === 'http://localhost:4005'

Pointing Your App at the Emulator

Environment Variable

MICROSOFT_EMULATOR_URL=http://localhost:4005

OAuth URL Mapping

Real Microsoft URL	Emulator URL
`https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration`	`$MICROSOFT_EMULATOR_URL/{tenant}/v2.0/.well-known/openid-configuration`
`https://login.microsoftonline.com/.well-known/openid-configuration`	`$MICROSOFT_EMULATOR_URL/.well-known/openid-configuration`
`https://login.microsoftonline.com/common/oauth2/v2.0/authorize`	`$MICROSOFT_EMULATOR_URL/oauth2/v2.0/authorize`
`https://login.microsoftonline.com/common/oauth2/v2.0/token`	`$MICROSOFT_EMULATOR_URL/oauth2/v2.0/token`
`https://login.microsoftonline.com/common/discovery/v2.0/keys`	`$MICROSOFT_EMULATOR_URL/discovery/v2.0/keys`
`https://graph.microsoft.com/oidc/userinfo`	`$MICROSOFT_EMULATOR_URL/oidc/userinfo`
`https://graph.microsoft.com/v1.0/me`	`$MICROSOFT_EMULATOR_URL/v1.0/me`

Auth.js / NextAuth.js

import MicrosoftEntraId from '@auth/core/providers/microsoft-entra-id'

MicrosoftEntraId({
  clientId: process.env.MICROSOFT_CLIENT_ID,
  clientSecret: process.env.MICROSOFT_CLIENT_SECRET,
  authorization: {
    url: `${process.env.MICROSOFT_EMULATOR_URL}/oauth2/v2.0/authorize`,
    params: { scope: 'openid email profile User.Read' },
  },
  token: {
    url: `${process.env.MICROSOFT_EMULATOR_URL}/oauth2/v2.0/token`,
  },
  userinfo: {
    url: `${process.env.MICROSOFT_EMULATOR_URL}/oidc/userinfo`,
  },
  issuer: process.env.MICROSOFT_EMULATOR_URL,
})

Read the full file on GitHub · 370 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

today Changed · +6 lines 7d1882c31e3c
29d ago Changed · +1 lines 80a6277cfbef
1mo ago First seen · 363 lines · 133 tokens per session scan A abe0b697486a

Subscribe to this mod's changes

microsoft is a skill published in the GitHub repository pleaseai/claude-code-plugins (16 stars, last pushed today), licensed MIT. It adds 133 tokens to every session and 3,384 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). It is 100% identical to microsoft, differing in 0 lines, and is treated as a copy.

Security Testing

research-engineer

An uncompromising Academic Research Engineer. Operates with absolute scientific rigor, objective criticism, and zero flair. Focuses on theoretical correctness, formal verification, and optimal implementation across any required technology.

davila7/claude-code-templates · 43 tokens

tika-eval-compare

Compare extracts from two Tika builds over a corpus to detect regressions in content, encoding, exceptions, and embedded-document handling. Use for "compare before/after extracts", "eval this change against the corpus".

apache/tika · 50 tokens

cua-driver

Use Cua Driver for desktop or browser tasks that are awkward or unavailable through Bash/APIs, or when the user explicitly wants GUI interaction: app testing, visual bug reproduction, form filling, calendar entry, screenshots, and demo recording. Also covers Cua setup; not OpenAI Codex Computer Use or web research.

davidondrej/skills · 68 tokens

microsoft