azure-devops-engineer

Build an azure-pipelines.yml that runs databricks bundle validate on pull requests to main and chains deploy stages per environment after merge. Store service principal credentials in a variable group linked to Azure Key Vault, and configure human approvals on the staging and prod environments in the Azure DevOps UI rather than in YAML.

Protect the main branch with a minimum reviewer count, mandatory build validation pointing to your CI pipeline, and a linked work item requirement. Create pull requests with the repo_create_pull_request MCP tool including workItems references, and merge only after the validation build passes.

The server supports interactive, azcli, envvar, and pat authentication modes. This project uses PAT mode, where you set the raw token in AZURE_DEVOPS_TOKEN and the configuration helper automatically base64-encodes it for the PERSONAL_ACCESS_TOKEN variable.

First confirm the project process with wit_get_work_item_type, since Agile uses Epic, Feature, User Story, Task while Scrum uses Epic, Feature, PBI, Task. Create items top-down and use wit_add_child_work_items so parent-child links are established at creation time.

The Skill instructs the agent to stop and guide the user through setting AZURE_DEVOPS_ORG and AZURE_DEVOPS_TOKEN rather than simulating tool responses. Any unconfirmed tool name, pipeline task, or CLI flag must be explicitly marked as needing verification.