Can an agent create a storage bucket with Microsoft Azure?
Who does each step
Whether the agent handles it alone or a person has to step in.
- 01
Discover
MachineThe vendor's machine-readable docs show the agent where and how to call this job.
- 02
Access
Workaround · setupYou give the agent a key or token.
- 03
Onboard
Workaround · setupYou sign up or register a client for the agent.
- 04
Pay
Workaround · setupYou add a payment card at the vendor's checkout.
- 05
Confirm
MachineThe response or specification defines errors the agent can distinguish from success.
- 06
Sustain
Workaround · setupYou replace or revoke the agent's access when it needs to change.
- Access: handing over a key or token.
- Onboard: signing up or registering a client for the agent.
- Pay: adding a payment card.
- Sustain: renewing, replacing or revoking its access.
To remove these handoffs: support OAuth client registration so the agent can register its own client and ask for consent; provide an agent registration route, such as auth.md, a sign-up API or OAuth client registration; support payment in the request, such as x402 or MPP, so setup does not require a person to add a card; provide key management or OAuth refresh and revocation so the agent can maintain its own access.
Agent surfaces
The probe
Each request it sent and what came back; the descriptors it read, counted, with what they named.
Discover46 descriptor reads3 facts
- Found
- OAuthmcp.management.azure.comOAuthlogin.microsoftonline.com/organizations/v2.0For agentsmanagement.azure.com
- From
- mcp.management.azure.com/.well-known/oauth-protected-resource · learn.microsoft.com/en-us/azure/azure-resource-manager/management/async-operations
- This endpoint
- management.azure.com is named by a document written for agents
Job requestPUT management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sourcey-probe/providers/Microsoft.Storage/storageAccounts/sourceyprobe/blobServices/default/containers/sourcey-probe?api-version=2026-09-0140499 ms
- Request
- PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sourcey-probe/providers/Microsoft.Storage/storageAccounts/sourceyprobe/blobServices/default/containers/sourcey-probe?api-version=2026-09-01
- Response
- 404 · application/json · 129 bytes
- Body
- sha256:f0ee7dec0adeed4ed0883ebaae91592df0e7bb33dac3d6cc59a0c2b44c9e6ebd
- Exchange
- sha256:ee83d265427ecce7d94c8ac1b7b199f6347f70877b03cb1872284b135fcbd349
Resource metadataGET management.azure.com/.well-known/oauth-protected-resource/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sourcey-probe/providers/Microsoft.Storage/storageAccounts/sourceyprobe/blobServices/default/containers/sourcey-probe40069 ms
- Request
- GET https://management.azure.com/.well-known/oauth-protected-resource/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sourcey-probe/providers/Microsoft.Storage/storageAccounts/sourceyprobe/blobServices/default/containers/sourcey-probe
- Response
- 400 · application/json · 137 bytes
- Body
- sha256:521a7f78c64c964cb50f73a25ac876eaed1a3655a4045518b30af8734c265791
- Exchange
- sha256:ab962ca67393ec99c0f326f097663289a822ffea608e97c53624b3c367a99712
Resource metadataGET management.azure.com/.well-known/oauth-protected-resource40055 ms
- Request
- GET https://management.azure.com/.well-known/oauth-protected-resource
- Response
- 400 · application/json · 137 bytes
- Body
- sha256:521a7f78c64c964cb50f73a25ac876eaed1a3655a4045518b30af8734c265791
- Exchange
- sha256:c60b9e5b46d3a4da7f1c3213d57feff80b11221e521f7b2affdf7494c12510dd
Job requestsession openedPOST mcp.management.azure.com401137 ms
- Request
- POST https://mcp.management.azure.com
- Response
- 401 · application/octet-stream · 0 bytes
- Body
- sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
- Exchange
- sha256:22c52cb2dcf522cb8835c4c5bd499d878a0fe94aed668d22c15bf35954607954
Resource metadataGET mcp.management.azure.com/.well-known/oauth-protected-resource/200121 ms
- Request
- GET https://mcp.management.azure.com/.well-known/oauth-protected-resource/
- Response
- 200 · application/json · 243 bytes
- Body
- sha256:2ce9123dfb238a4dea09d6ad2d3af03e962e74835f850b1d5e8b5eb4961f1d53
- Exchange
- sha256:08b7ceda1d6a9820e74032adef8104ca6f29cc41441b266f2163e478dc2a8fc5
Authorization serverGET login.microsoftonline.com/.well-known/oauth-authorization-server/organizations/v2.040485 ms
- Request
- GET https://login.microsoftonline.com/.well-known/oauth-authorization-server/organizations/v2.0
- Response
- 404 · application/octet-stream · 0 bytes
- Body
- sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
- Exchange
- sha256:924874f2dff5b18c986cba73bb8acd58c195ec6fe026d2558ff9c59b2fbbe4c3
Authorization serverGET login.microsoftonline.com/.well-known/openid-configuration/organizations/v2.040499 ms
- Request
- GET https://login.microsoftonline.com/.well-known/openid-configuration/organizations/v2.0
- Response
- 404 · application/octet-stream · 0 bytes
- Body
- sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
- Exchange
- sha256:b6f48b565dc67bb01c7f682c65dbd81e584a74e719aae3de1ef57f32bc31223d
Authorization serverGET login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration200106 ms
- Request
- GET https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration
- Response
- 200 · application/json · 1777 bytes
- Body
- sha256:be8266b8a9e08a2c154a384995b6ac2555f7fa759a2155b3c8e07dc9f13ba96f
- Exchange
- sha256:4bd363d62fc3d886e4d4542d298c23eb17cbc9249c653ea656228e63dd5b80d8
Declared pageGET signup.azure.com406229 ms
- Request
- GET https://signup.azure.com/
- Response
- 406 · text/html · 98 bytes
- Body
- sha256:80375525f31609eb19b8d85cd09a5f97d094ecb1d1bb1562b73fa617aeb09aad
- Exchange
- sha256:92f988de03f287d73f981c32ba09c48b3f6afdac7430b15373eccb112f900ae8
Declared pageGET learn.microsoft.com/en-us/azure/cost-management-billing/manage/change-credit-card200295 ms
- Request
- GET https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/change-credit-card
- Response
- 200 · text/html · 80148 bytes
- Body
- sha256:fe981e2b40599ad8dac1ce8b74ede1a5a29be8db45fbb72008b769cafd0efd2d
- Exchange
- sha256:06260fc7dbe1bb75f2eb861cdcd114d974b7e55d344afe60a05c0efa3f79ed3e
Declared pageGET learn.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription200189 ms
- Request
- GET https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription
- Response
- 200 · text/html · 60863 bytes
- Body
- sha256:4cb39b10dfe05e143951c814804f53aa214e9d4c4a0a54a6d421f97c843b4a34
- Exchange
- sha256:d5111908a349edc020fc47a7718ea7c8689c6ca2b7dfb4b7213c2d81ad2fec2b
Microsoft on the startup-offers board
- Up to $150,000 in creditsMicrosoft for Startups Program
The grade’s badge
One image that keeps itself current, linking here.
[](https://sourcey.com/c/microsoft/agent-readiness/microsoft-azure/bucket-create)Improve the report
Correct it, probe it again, or improve the path.
- Profile
- arp_01m4pmq1336jvm0acycpce49sn
- Projection
- sha256:a84f04332751c31c2827e45aaba9291609bccc215568ca06772c670eb424fa9f
- Policy
- kind-2026-10-12 · sha256:0a4e4996176ce674b4f3ce910c5fca4f37c9b53bcdf51656d53a1a92fcf2c879
A report or a reassessment request names this profile, its revision and its projection. How report cards are assessed →View the exact declaration