Azure MCP Server 3.0 rejects unknown parameters and creates Azure resources secure by default
Azure MCP Server 3.0.0 (Oct 12) now fails tool calls that pass dropped options like --subscription or --retry-*, creates Storage accounts with Shared Key off and Event Hubs with local auth off, and speaks the stateless MCP 2026-07-28 protocol. Pin @azure/[email protected] and clean up saved agent prompts before upgrading; the MySQL/PostgreSQL query tools are now marked destructive, so use --read-only if the agent should only look.