Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | kordocShortlist candidate | Azure MCP ServerMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | Community implementation Chris Ryu / Community · Publisher source ↗ | First-party MCP Microsoft · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Not documented Package: Not documented |
| Popularity evidence | ||
| Package downloads / 30 days | No reliable download data | 537,523 package downloads / 30 days · checked 2026-09-24T18:01:10.773000Z |
| Shared repository stars | 2,627 Shared repository stars (not MCP-specific) · checked 2026-10-20 | 3,708 Shared repository stars (not MCP-specific) · checked 2026-09-24T18:01:37.573000Z |
| Shared-package downloads / 30 days | 139,335 shared-package downloads / 30 days (not MCP-specific) · checked 2026-10-20 | Not documented |
| Client coverage | ||
| Client coverage details | Not documented | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | No authentication is required for the local MCP process. | The local server uses Azure's established authentication chain, commonly Azure CLI sign-in or other Microsoft identity credentials. No credential should be embedded in MCP JSON; use a dedicated least-privilege identity or subscription context. |
| Cost | No separate MCP fee is documented for the open-source package. | The MIT-licensed server has no separately documented MCP charge. Azure resources created or queried, network usage, logs, and the AI client remain subject to their normal plans and charges. |
| Permissions | The MCP can read and write local documents. `KORDOC_ROOT` confines MCP file access to a directory and `KORDOC_OFFLINE=1` blocks outbound traffic. | Tools invoke Azure operations using the current Azure authentication context, and Azure RBAC determines effective access. Depending on enabled services and roles, the server can read, create, update, or delete cloud resources and retrieve logs or configuration. |
| Data handling | Document parsing/OCR/rendering runs locally. Some OCR models can be downloaded at runtime unless offline mode is enabled. | Azure resource identifiers, configuration, logs, command inputs, and results may be returned to the MCP client. Microsoft documents optional usage telemetry that can be disabled with AZURE_MCP_COLLECT_TELEMETRY=false; normal Azure service requests remain visible to Azure. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | The MCP can process sensitive government/business documents and can fill, patch, redact, generate, and render files. Untrusted documents can be hostile inputs. | A broadly privileged Azure identity can make the agent an infrastructure administrator. Use a non-production subscription for evaluation, least-privilege RBAC, explicit subscription/resource-group targeting, telemetry choice, activity logs, budgets, and confirmation before every mutation. This review does not claim MCP100 execution testing. |
| Evidence date | ||
| Editorial review | 2026-10-19 | 2026-07-24 |
| Candidate evidence | 2026-10-20 | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →