Platform Engineering Copilot

AI-Powered Infrastructure & Compliance Platform for Azure Government

Built on .NET 9.0, and Model Context Protocol (MCP). Uses the Microsoft Agent Framework architecture pattern with 8+ specialized AI agents for infrastructure, compliance, cost management, and more.

Quick Start

# Clone and build
git clone https://github.com/azurenoops/platform-engineering-copilot.git
cd platform-engineering-copilot
dotnet build

# Azure authentication
az cloud set --name AzureUSGovernment  # or AzureCloud
az login
export AZURE_TENANT_ID=$(az account show --query tenantId -o tsv)

# Configure
cp .env.example .env
# Edit .env with Azure OpenAI and subscription details

# Run MCP server only (Docker)
docker-compose -f docker-compose.mcp.yml up -d
curl http://localhost:5100/health

# Run MCP + Chat UI
docker-compose -f docker-compose.mcp-chat.yml up -d
open http://localhost:5001

# Run full platform (MCP + Chat + Admin)
docker-compose -f docker-compose.mcp-chat-admin.yml up -d
open http://localhost:5000  # Admin Client

Architecture

The platform uses Microsoft Agent Framework with PlatformAgentGroupChat for multi-agent orchestration.

┌─────────────────────────────────────────────────────────────────┐
│                    MCP SERVER (:5100)                            │
│  ┌─────────────────────────────────────────────────────────────┐│
│  │              PlatformAgentGroupChat                         ││
│  │  ├─ PlatformSelectionStrategy (intent-based routing)       ││
│  │  ├─ PlatformTerminationStrategy                            ││
│  │  └─ 8 Specialized Agents                                    ││
│  └─────────────────────────────────────────────────────────────┘│
│                                                                  │
│  ┌─────────────┐ ┌─────────────┐ ┌─────────────┐               │
│  │ Compliance  │ │Infrastructure│ │    Cost     │               │
│  │   Agent     │ │    Agent    │ │   Agent     │               │
│  └─────────────┘ └─────────────┘ └─────────────┘               │
│  ┌─────────────┐ ┌─────────────┐ ┌─────────────┐               │
│  │  Discovery  │ │ Environment │ │Configuration│               │
│  │   Agent     │ │   Agent     │ │   Agent     │               │
│  └─────────────┘ └─────────────┘ └─────────────┘               │
│  ┌─────────────┐ ┌─────────────┐                               │
│  │ Knowledge   │ │  Security   │                               │
│  │ Base Agent  │ │   Agent     │                               │
│  └─────────────┘ └─────────────┘                               │
└─────────────────────────────────────────────────────────────────┘
        │                    │                    │
        ▼                    ▼                    ▼
┌─────────────┐      ┌─────────────┐      ┌─────────────┐
│ Chat UI     │      │ Admin API   │      │Admin Client │
│   :5001     │      │   :5050     │      │   :5000     │
└─────────────┘      └─────────────┘      └─────────────┘

Service Ports

Agents

Example Queries

"Run NIST 800-53 compliance scan on my subscription"
"Create storage account data001 in rg-dr with encryption"
"Show cost analysis for last 30 days grouped by resource type"
"What's my secure score and top recommendations?"
"List all VMs in my subscription with their health status"
"Generate Bicep for an AKS cluster in usgovvirginia"
"Clone environment dev to staging"
"What are the FedRAMP High requirements for access control?"

MCP Client Configuration

GitHub Copilot

Create ~/.vscode/mcp.json:

{
  "mcpServers": {
    "platform-engineering-copilot": {
      "command": "dotnet",
      "args": ["run", "--project", "/path/to/src/Platform.Engineering.Copilot.Mcp"]
    }
  }
}

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "platform-engineering-copilot": {
      "command": "dotnet",
      "args": ["run", "--project", "/path/to/src/Platform.Engineering.Copilot.Mcp"]
    }
  }
}

Project Structure

src/
├── Platform.Engineering.Copilot.Mcp/        # MCP Server (HTTP:5100 + stdio)
│   ├── Server/                              # HTTP bridge endpoints
│   ├── Tools/                               # MCP tool definitions
│   └── Prompts/                             # Agent system prompts
├── Platform.Engineering.Copilot.Agents/     # All agents (consolidated)
│   ├── Common/                              # Shared abstractions
│   ├── Orchestration/                       # PlatformAgentGroupChat, strategies
│   ├── Compliance/                          # Compliance Agent
│   ├── Infrastructure/                      # Infrastructure Agent
│   ├── CostManagement/                      # Cost Agent
│   ├── Discovery/                           # Discovery Agent
│   ├── Environments/                        # Environment Agent
│   ├── Configuration/                       # Configuration Agent
│   ├── KnowledgeBase/                       # Knowledge Base Agent
│   └── Extensions/                          # DI registration
├── Platform.Engineering.Copilot.Core/       # Shared core library
│   ├── Data/                                # EF Core context, migrations
│   ├── Services/                            # Azure SDK integrations
│   ├── Models/                              # Domain models
│   └── Interfaces/                          # Service contracts
├── Platform.Engineering.Copilot.State/      # State management
├── Platform.Engineering.Copilot.Channels/   # Communication channels
├── Platform.Engineering.Copilot.Chat/       # Web Chat UI (:5001)
├── Platform.Engineering.Copilot.Admin.API/  # Admin REST API (:5050)
└── Platform.Engineering.Copilot.Admin.Client/ # Blazor WASM (:5000)

Docker Compose Profiles

Infrastructure as Code (Bicep)

Refactored Bicep templates live under infra/bicep. They use modern .bicepparam files, typed parameters, and simplified orchestration.

Quick steps:

# Set cloud and authenticate
az cloud set --name AzureUSGovernment   # or AzureCloud
az login

# Dev: MCP + Admin
az deployment group create \
  --resource-group rg-pecop-dev \
  --parameters infra/bicep/main.dev.bicepparam \
  --parameters sqlAdminPassword='YourSecurePassword123!'

# MCP-only
az deployment group create \
  --resource-group rg-pecop-dev \
  --parameters infra/bicep/main.mcp-only.bicepparam \
  --parameters sqlAdminPassword='YourSecurePassword123!'

# Prod: all services
az deployment group create \
  --resource-group rg-pecop-prod \
  --parameters infra/bicep/main.prod.bicepparam \
  --parameters sqlAdminPassword='SetSecurelyFromKeyVaultOrPipeline'

More details and parameters: infra/bicep/README.md

Configuration

All configuration in appsettings.json:

{
  "ConnectionStrings": {
    "DefaultConnection": "Data Source=platform_engineering_copilot_management.db"
  },
  "Gateway": {
    "AzureOpenAI": {
      "Endpoint": "https://your-openai.openai.azure.us/",
      "ApiKey": "<key>",
      "DeploymentName": "gpt-4o"
    }
  },
  "AgentConfiguration": {
    "ComplianceAgent": { "Enabled": true, "Temperature": 0.2 },
    "InfrastructureAgent": { "Enabled": true, "DefaultRegion": "usgovvirginia" }
  },
  "GitSync": {
    "AutoSyncEnabled": true,
    "DefaultSyncIntervalMinutes": 30
  }
}

Documentation

Technology Stack

Development

# Build
dotnet build Platform.Engineering.Copilot.sln

# Test
dotnet test Platform.Engineering.Copilot.sln

# Run MCP server (stdio mode for AI clients)
dotnet run --project src/Platform.Engineering.Copilot.Mcp

# Run MCP server (HTTP mode for web clients)
dotnet run --project src/Platform.Engineering.Copilot.Mcp -- --http

# Run Chat UI
dotnet run --project src/Platform.Engineering.Copilot.Chat --urls http://0.0.0.0:5001

# Run Admin services
dotnet run --project src/Platform.Engineering.Copilot.Admin.API --urls http://0.0.0.0:5050
dotnet run --project src/Platform.Engineering.Copilot.Admin.Client --urls http://0.0.0.0:5000

License

MIT License - see LICENSE