hieuttmmo/entraid-mcp-server ? reverse-engineered prompt

Build me an MCP server for managing Microsoft Entra ID through Microsoft Graph, using a clean modular Python setup.

I want it to let me search and inspect users, groups, applications, service principals, managed devices, sign in logs, audit logs, MFA status, conditional access policies, and passwords. It should also support creating, updating, and deleting groups and applications, adding and removing group members and owners, and looking up privileged users and user roles.

Please keep the code organized so each feature lives in its own module, with one shared Graph client and a single server entry point that registers all the tools. Use environment variables from a config file for auth, and make it easy to run and test locally with FastMCP. Include solid error handling, logging, and helpful responses so it feels safe and reliable to use.

If anything needs current Microsoft Graph or FastMCP details, look them up online and follow the latest docs.