A fully managed platform in Microsoft Foundry for hosting, scaling, and securing AI agents built with any supported framework or model
This pattern matches either a tool discovery/connectivity problem or a transient service-side issue in Foundry, especially since agents without tools work and failures start only when tools are attached.
Recommended checks:
- Validate tool discovery first.
- If
tools/listreturns zero tools for MCP or A2A tools, the usual cause is invalid or missing connection credentials. - Verify that the
project_connection_idexists in the Foundry project. - Verify the stored credentials are correct.
- Try connecting to the MCP server directly to confirm authentication works.
- If managed identity is used, verify the caller has the correct RBAC role assignments on the target resource.
- If
- If the issue is with OpenAPI-based tools, validate the spec.
- Confirm the OpenAPI document is valid 3.0 or 3.1.
- Check that
paths,operationId, and parameter schemas are valid.
- If fewer tools appear than expected, check
allowed_tools.- Remove
allowed_toolstemporarily. - Call
tools/listagain. - Re-add only the exact tool names returned. Tool names are case-sensitive.
- Remove
- If tools are built-in and return empty, retry after a short delay.
- For built-in tools, an empty result can mean the toolbox is not fully provisioned yet.
- Wait 10 seconds and retry.
- For MCP-specific failures, verify the endpoint and auth.
- Confirm the MCP server URL is correct and reachable.
- Check network connectivity and any firewall rules blocking outbound requests.
- Confirm the selected authentication method is correct.
- If the server uses an API key or OAuth token, verify the credential is valid and not expired.
- If tools do not appear in the allowed tools list, refresh the tool list by closing and reopening the MCP tool dialog.
- If the tool is an Azure Language agent integration, verify common configuration issues.
- For authentication errors, confirm the connection uses the
Ocp-Apim-Subscription-Keyheader and that the value matches the Azure Language resource key. - If CLU or CQA is not used as expected, confirm those projects are deployed and connected to the correct resources.
- If the MCP server returns 404 or connection errors, verify the endpoint URL uses the correct Foundry resource name and API version, and confirm the Azure Language resource is in a supported region.
- For authentication errors, confirm the connection uses the
- Consider a transient regional or portal-side issue.
- A reported Foundry case in Japan showed agent failures such as agent load errors, 403 errors, and bad requests that recovered without configuration changes.
- That behavior was attributed to a temporary service-side or portal-related issue, including backend disruption, authorization/cache desynchronization, metadata/indexing delay, or regional instability.
Given the symptom that all tool-enabled agents fail in Japan East while tool-free agents work, the most direct path is:
- test
tools/list - verify each tool connection credential and
project_connection_id - test the MCP endpoint directly
- verify managed identity RBAC if used
- retry after a short delay
- if the issue clears without changes, treat it as a transient service-side issue
References:
