Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Copilot Studio MCP

NPM · COPILOT-STUDIO-MCP · SCANNED SEP 20

Build, test, ship and maintain Microsoft Copilot Studio agents from the editor

Available components

+4 this week 72 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 60 of 157 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability76
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 34022 tokens (~239/item across 142 items; 142 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
  • Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage95
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 85% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 16 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "cs_logout" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 143 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the Copilot Studio MCP server?

Copilot Studio MCP runs locally as an npm package, launched with npx -y copilot-studio-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · copilot-studio-mcp

# add to Claude Code
claude mcp add jgt87-copilot-studio-mcp -- npx -y copilot-studio-mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "jgt87-copilot-studio-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "copilot-studio-mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "jgt87-copilot-studio-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "copilot-studio-mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add jgt87-copilot-studio-mcp -- npx -y copilot-studio-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "jgt87-copilot-studio-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "copilot-studio-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add jgt87-copilot-studio-mcp --command npx --arg -y --arg copilot-studio-mcp
# ~/.hermes/config.yaml
mcp_servers:
  jgt87-copilot-studio-mcp:
    command: "npx"
    args: ["-y", "copilot-studio-mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "jgt87-copilot-studio-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "copilot-studio-mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add jgt87-copilot-studio-mcp -t stdio -c npx -a -y copilot-studio-mcp
// mcp.json
{
  "mcpServers": {
    "jgt87-copilot-studio-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "copilot-studio-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 19 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Sept 26 0
    • Security disclosure: unverified → fail functional
  • 16 Sept 26 +1
    • Security disclosure: fail → unverified functional
  • 15 Sept 26 +15
    • Malware scan: unverified → pass security
  • 14 Sept 26 −13
    • Malware scan: pass → unverified security
    • Tool safety: pass → unverified security
    • Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
    • Capabilities: pass → unverified functional
    • Tool coverage: 100 → unverified functional
    • Schema quality: 100 → unverified functional
    • Stability: unverified → 0.10 functional
    • Package version: 0.1.6 → 0.1.7 functional
  • 13 Sept 26 +15
    • Malware scan: unverified → pass security
  • 11 Sept 26 53

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/copilot-studio-mcp@0.1.7

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 157 packages
Packages resolved 157
Deprecated 1
Stale 59
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 142 exposed · ~33,335 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
cs_add_flow ~262

EXPERIMENTAL: write workflows/<Name>/metadata.yaml + workflow.json for a flow with the 'when an agent calls the flow' trigger and a response, optionally exposing it as a tool. Format follows the schema's CloudFlowDefinition and the Power Automate solution JSON; verify with cs_pack and in the portal after push. The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.

NameTypeReqDescription
actionsobjectExtra Power Automate actions (name -> definition) inserted before the response
addToolbooleanAlso create actions/<name>.mcs.yml invoking this flow
confirmbooleanRequired to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing.
descriptionstring
inputsarray
namestringyes
outputsarray
overwriteboolean
workspacestringPath to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory.

No output schema declared.

No examples provided.

cs_add_knowledge_source ~300

Add knowledge as YAML: kind 'public-site' (Bing-scoped website, max 2 path levels), 'sharepoint' (direct folder URL), 'graph-connector' (Microsoft Graph connector via environment variable), or 'files' (copy documents into knowledge/files for upload on push). Dataverse, AI Search and SQL knowledge are portal-only. The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.

NameTypeReqDescription
confirmbooleanRequired to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing.
connectionEnvironmentVariablestring
connectionNamestring
contentSourceDisplayNamestring
descriptionstring
filesarrayAbsolute paths of documents (pdf, docx, txt, ...)
includeSubPagesboolean
kindstringyes
namestringyes
overwriteboolean
sitestring
triggerConditionstringPower Fx condition restricting when this source is searched
workspacestringPath to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory.

No output schema declared.

No examples provided.

cs_add_solution_component ~325

Add an existing component (an agent, flow, connection reference, environment variable, table ...) to an unmanaged solution by schema name or id and component type code. Runs 'pac solution add-solution-component' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
addRequiredComponentsbooleanAlso add the components it depends on
asyncbooleanRun the operation asynchronously
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
componentstringyesSchema name or id of the component
componentTypestringyesComponent type code or name (e.g. 29 for a flow / workflow, 10088 for a connection reference, 380 for an environment variable definition)
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL; default: the environment of the active pac auth profile
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
solutionNamestringyesSolution unique name
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_add_solution_license ~202

Attach license plan definition and mapping CSV files to a solution project (ISV licensing). Run in the solution project folder (cwd). Local file change only. Runs 'pac solution add-license' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
planDefinitionFilestringyesCSV: Service ID, Display name, More info URL
planMappingFilestringyesCSV: Service ID, Component name
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_add_solution_reference ~186

Reference another project (plug-in, PCF, ...) from a .cdsproj so it is packed into the solution. Run in the solution project folder (cwd). Local file change only. Runs 'pac solution add-reference' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
pathstringyesPath of the referenced project
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_add_tool ~529

Create actions/<name>.mcs.yml. type 'connector': a connector operation (connectorId like shared_office365, operationId like SendEmailV2; use cs_list_connectors / cs_describe_connector to find them). type 'mcp': an MCP server exposed through a connector. type 'flow': a cloud flow by id. type 'prompt': an AI Builder prompt by model id (cs_list_prompts). type 'connected-agent': another Copilot Studio agent by schema name. type 'child-agent': a child agent's GPT component. type 'raw': any other TaskAction kind with the action object supplied. When the connector definition is cached, the operationId is checked and required inputs are filled from the catalog unless inputs are given. Connector and MCP tools need a connection that only the portal can authorise; the tool writes the connection-reference stub and returns the portal step. The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.

NameTypeReqDescription
actionobjecttype raw: full TaskAction object with kind
aiModelIdstringtype prompt: AI Builder model id
botSchemaNamestringtype connected-agent
confirmbooleanRequired to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing.
connectionModestringInvoker = end user's connection; Maker = the maker's shared connection
connectionReferencestringExisting logical name from connectionreferences.mcs.yml
connectorIdstringshared_<name> or a display name from the catalog
descriptionstringyesAlso used as modelDescription unless overridden; the orchestrator routes on it
flowIdstring
gptComponentSchemaNamestringtype child-agent
inputsarray
inputsFromCatalogbooleanDefault true: when no inputs are given and the connector definition is cached, add automatic inputs for the operation's required parameters
modelDescriptionstring
namestringyes
operationIdstring
outputsarray
overwriteboolean
typestringyes
workspacestringPath to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory.

No output schema declared.

No examples provided.

cs_add_topic ~244

Create topics/<name>.topic.mcs.yml from a declarative spec: trigger phrases (or a system trigger) plus message / question / condition / redirect / setVariable / searchKnowledge / http / invokeFlow / end / raw nodes. Validates the result. Push to apply. The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.

NameTypeReqDescription
actionsarrayyes
confirmbooleanRequired to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing.
descriptionstring
namestringyes
overwriteboolean
prioritynumber
triggerKindstringSystem trigger instead of phrases
triggerPhrasesarrayUser phrases that start the topic (OnRecognizedIntent)
workspacestringPath to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory.

No output schema declared.

No examples provided.

cs_add_trigger ~171

Create trigger/<name>.trigger.mcs.yml pointing at a cloud flow that starts the agent (WorkflowExternalTrigger). The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.

NameTypeReqDescription
confirmbooleanRequired to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing.
descriptionstring
flowIdstringyes
namestringyes
overwriteboolean
workspacestringPath to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory.

No output schema declared.

No examples provided.

cs_add_variable ~177

Create variables/<name>.variable.mcs.yml (GlobalVariableComponent, conversation scope). The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.

NameTypeReqDescription
aiVisibilitystring
confirmbooleanRequired to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing.
defaultValuestring|number|boolean
descriptionstring
namestringyes
overwriteboolean
workspacestringPath to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory.

No output schema declared.

No examples provided.

cs_admin_add_environment_to_group ~233

Put an environment into an environment group, which applies that group's rules to it. Changes tenant configuration: requires confirm: true. Runs 'pac admin add-group' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id, url, unique or partial name
environmentGroupstringyesEnvironment group name or id
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_assign_group ~308

Give an Entra group a security role in an environment through a Dataverse team. Changes a live environment: requires confirm: true. Runs 'pac admin assign-group' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
businessUnitstringBusiness unit id
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL
groupstringyesEntra group object id
groupNamestringyesName of the Dataverse team to create
membershipTypestringyesMembership type (MembersAndGuests, Members, Owners, Guests)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
rolestringyesSecurity role name or id
teamTypestringyesTeam type (Owner, Access, AadSecurityGroup, AadOfficeGroup)
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_assign_user ~280

Give a user (or an application user) a security role in an environment. Changes a live environment: requires confirm: true. Runs 'pac admin assign-user' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
applicationUserbooleanThe user is an application (service principal)
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
businessUnitstringBusiness unit id
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
rolestringyesSecurity role name or id (cs_admin_list_security_roles)
timeoutSecondsnumberDefault 600
userstringyesObject id or UPN, or the application id for an application user

No output schema declared.

No examples provided.

cs_admin_assign_users ~432

Give many users their security roles in one environment, from a CSV roster or an inline list. pac assigns one user and one role per call, so a roster of ten developers with three roles each is thirty calls; this expands the roster and runs them under a single approval. Without confirm it returns the plan: every user-and-role pair it would attempt, so you can read the whole thing before any of it happens. Rows are independent, so a bad UPN or a role the environment does not have is reported and the rest still run. Changes a live environment: requires confirm: true. Runs as the admin account: pass 'profile' or set CPS_ADMIN_PROFILE. Prefer cs_admin_assign_group when the roster is really a group: that is one call per role however many people are in it, and new joiners inherit access. Unverified against a live tenant.

NameTypeReqDescription
assignmentsarrayRoster inline instead of a CSV file
backgroundbooleanRun in the background and return a jobId immediately, then poll cs_job_status. MCP clients cut a tool call off after about 60 seconds; this operation can take much longer, and without this the work i…
businessUnitstringBusiness unit for rows that do not name one
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
continueOnErrorbooleanDefault true: one failed row does not abort the roster. false stops at the first failure.
csvstringPath to a CSV roster. Header row needs a user column (user, upn, email) and a roles column (roles, role); several roles in one cell separated by comma, semicolon or pipe. Optional businessUnit and ap…
environmentstringyesEnvironment id or URL to assign the roles in
profilestringpac auth profile of the admin account; default CPS_ADMIN_PROFILE, then the active profile

No output schema declared.

No examples provided.

cs_admin_backup_environment ~231

Take a manual backup of an environment (the platform's own backup, not the file backup cs_backup_tenant writes). Changes a live environment: requires confirm: true. Runs 'pac admin backup' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL
labelstringyesBackup label
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 3600

No output schema declared.

No examples provided.

cs_admin_copy_environment ~295

Copy a source environment onto a target environment. Everything in the target is replaced: requires confirm: true. Runs 'pac admin copy' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
asyncbooleanRun the operation asynchronously
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
maxAsyncWaitTimenumberMax asynchronous wait time in minutes (default 60)
namestringName for the target environment
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
skipAuditDatabooleanDo not copy audit data
sourceEnvironmentstringEnvironment to copy from
targetEnvironmentstringEnvironment to overwrite
timeoutSecondsnumberDefault 14400
typestringCopy type (for example MinimalCopy, FullCopy)

No output schema declared.

No examples provided.

cs_admin_create_environment ~364

Create a Dataverse environment in the tenant. Consumes tenant capacity: requires confirm: true. Runs 'pac admin create' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
asyncbooleanRun the operation asynchronously
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
currencystringCurrency (default USD)
cwdstringWorking directory for pac (for project commands: the solution project folder)
domainstringDomain part of the environment URL
inputFilestringJSON file with the arguments
languagestringLanguage (default English)
maxAsyncWaitTimenumberMax asynchronous wait time in minutes (default 60)
namestringEnvironment name
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
regionstringRegion (default unitedstates)
securityGroupIdstringEntra security group id (required for a Teams environment)
templatesarrayDynamics 365 templates to deploy
timeoutSecondsnumberDefault 7200
typestringyesProduction, Sandbox, Trial, Developer or Teams
userstringUser to assign to the environment (object id or UPN)

No output schema declared.

No examples provided.

cs_admin_create_service_principal ~258

Register an Entra application and give it an application user with a security role in an environment: the headless identity a pipeline signs in as. Changes a live environment: requires confirm: true. Runs 'pac admin create-service-principal' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL
namestringApplication name to create in Entra
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
rolestringSecurity role (default System Administrator)
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_delete_environment ~255

Delete an environment from the tenant, with everything in it: agents, solutions, flows and data. Irreversible beyond the platform's own backup retention: requires confirm: true. Runs 'pac admin delete' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
asyncbooleanRun the operation asynchronously
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL
maxAsyncWaitTimenumberMax asynchronous wait time in minutes (default 60)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 7200

No output schema declared.

No examples provided.

cs_admin_environment_status ~153

Status of the tenant operations that are still running (copies, restores, resets, deletions). Runs 'pac admin status' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_list_app_templates ~169

The Dynamics 365 application templates that can be installed when creating an environment, per region. Runs 'pac admin list-app-templates' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
regionstringRegion name (default unitedstates)
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_list_applications ~147

Entra applications registered with the tenant for Power Platform. Runs 'pac admin application list' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_list_backups ~168

Backups of an environment, with their labels and dates: what cs_admin_restore_environment can restore. Runs 'pac admin list-backups' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_list_dlp_policies ~162

Data loss prevention policies in the tenant: the connector groups that decide which connectors an agent or flow may combine. Runs 'pac admin dlp-policy list' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_list_environment_groups ~152

Environment groups in the tenant (the grouping used for managed-environment rules). Runs 'pac admin list-groups' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_list_environments ~229

Every environment in the tenant with its type, region and state, as the admin centre lists them. Filters by name, type or installed application. Runs 'pac admin list' with the active pac auth profile.

NameTypeReqDescription
applicationstringOnly environments with this application installed
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringOnly environments whose name or id contains this text
namestringOnly environments whose name contains this text
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600
typestringOnly environments of this type (Production, Sandbox, Trial, Developer, Teams)

No output schema declared.

No examples provided.

cs_admin_list_security_roles ~199

Security roles in an environment, optionally including child roles: what cs_admin_assign_user and cs_admin_assign_group can grant. Runs 'pac admin list-roles' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
businessUnitstringFilter by business unit name or id
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL
includeChildRolesbooleanInclude child roles
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_list_service_principals ~186

Entra applications that have an application user in Dataverse: who can act without a person signing in. Runs 'pac admin list-service-principal' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
filterstringApplication name starts-with filter
maxnumberMaximum applications (default 20)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_list_tenant_settings ~197

The tenant-wide Power Platform settings (governance, sharing, support, licensing). With settingsFile, pac writes them as JSON to that path; that file is the reference copy to keep in source control. Runs 'pac admin list-tenant-settings' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
settingsFilestringWrite the settings to this .json file
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_query ~218

Run a tenant-level resource query (the admin centre's own query language) and optionally write the results to a file as JSON, list or CSV. Runs 'pac admin query' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
outputFilestringWhere to save the results
outputTypestringJson, List or Grid (default Grid)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
querystringResource query JSON as a string
queryFilestringFile containing the query JSON
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_register_application ~216

Register an Entra application with the tenant so it can be used by Power Platform. Changes tenant configuration: requires confirm: true. Runs 'pac admin application register' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
applicationIdstringyesApplication (client) id
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_reset_environment ~314

Reset an environment to an empty Dataverse instance. Everything in it is deleted: requires confirm: true. Runs 'pac admin reset' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
asyncbooleanRun the operation asynchronously
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
currencystringCurrency
cwdstringWorking directory for pac (for project commands: the solution project folder)
domainstringDomain part of the URL
environmentstringEnvironment id or URL
inputFilestringJSON file with the arguments
languagestringLanguage
maxAsyncWaitTimenumberMax asynchronous wait time in minutes (default 60)
namestringNew name
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
purposestringDescription of the environment's intent
templatesarrayDynamics 365 templates
timeoutSecondsnumberDefault 7200

No output schema declared.

No examples provided.

cs_admin_restore_environment ~309

Restore a backup into the same or another environment. Overwrites the target's data and customisations: requires confirm: true. Runs 'pac admin restore' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
asyncbooleanRun the operation asynchronously
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
maxAsyncWaitTimenumberMax asynchronous wait time in minutes (default 60)
namestringName for the restored environment
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
selectedBackupstringyesBackup date as mm/dd/yyyy hh:mm, or 'latest'
skipAuditDatabooleanDo not restore audit data
sourceEnvironmentstringEnvironment the backup came from
targetEnvironmentstringEnvironment to restore into (defaults to the source)
timeoutSecondsnumberDefault 14400

No output schema declared.

No examples provided.

cs_admin_self_elevate ~223

Give yourself the System Administrator role in an environment. Needs Global, Power Platform or Dynamics 365 admin. Changes a live environment: requires confirm: true. Runs 'pac admin self-elevate' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringEnvironment id or URL
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_set_backup_retention ~275

Set how many days backups of an environment are kept (7, 14, 21 or 28). Changes a live environment: requires confirm: true. Runs 'pac admin set-backup-retention-period' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
asyncbooleanRun the operation asynchronously
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
daysnumberyes7, 14, 21 or 28
environmentstringEnvironment id or URL
maxAsyncWaitTimenumberMax asynchronous wait time in minutes (default 60)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_set_governance_config ~434

Turn managed environments on ('Standard') or off ('Basic') for an environment and set its governance options: sharing limits, solution checker mode, maker onboarding. Changes tenant governance: requires confirm: true. Runs 'pac admin set-governance-config' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
checkerRuleOverridesstringSolution checker rule overrides
cloudFlowsLimitnumberHow many people makers may share solution cloud flows with
cloudFlowsModestringSharing limit mode for solution cloud flows
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
disableGroupSharingbooleanDisable sharing with groups
environmentstringyesEnvironment id or URL
excludeAnalysisbooleanExclude this environment from the weekly usage digest
includeInsightsbooleanShow insights on the admin centre home page
limitSharingModestringSharing limit mode
makerOnboardingMarkdownstringMaker onboarding markdown
makerOnboardingUrlstringMaker onboarding URL
maxLimitUserSharingnumberHow many people makers may share canvas apps with
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
protectionLevelstringyesStandard enables managed environments, Basic disables them
solutionCheckerModestringSolution checker validation mode (None, Warn, Block)
suppressValidationEmailsbooleanDo not send validation emails
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_set_runtime_state ~275

Put an environment into administration mode (only admins can use it) or back, and control background operations. Changes a live environment: requires confirm: true. Runs 'pac admin set-runtime-state' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
asyncbooleanRun the operation asynchronously
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
backgroundOperationsstringBackground operations state
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
environmentstringyesEnvironment id or URL
maxAsyncWaitTimenumberMax asynchronous wait time in minutes (default 60)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
runtimeStatestringyesAdminMode or Enabled
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_show_dlp_policy ~179

One data loss prevention policy in full: its connector classification and the environments it applies to. Runs 'pac admin dlp-policy show' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
policyNamestringyesPolicy id (GUID); cs_admin_list_dlp_policies shows it
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_unregister_application ~207

Remove an Entra application's tenant registration. Changes tenant configuration: requires confirm: true. Runs 'pac admin application unregister' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
applicationIdstringyesApplication (client) id
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_admin_update_tenant_settings ~270

Change tenant-wide settings, either from a settings file or one setting at a time (for example powerPlatform.governance.disableDeveloperEnvironmentCreationByNonAdminUsers). Affects the whole tenant: requires confirm: true. Runs 'pac admin update-tenant-settings' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
confirmbooleanRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
settingNamestringSingle setting path
settingValuestringValue for that setting
settingsFilestringA .json file of settings (from cs_admin_list_tenant_settings)
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_analyze_flow_health ~278

How reliable a cloud flow is across its recent runs: failure rate, duration spread (median and 90th percentile), and which actions the failures concentrate on. The verdict distinguishes one broken step from failures spread across many actions, which points at a connection, throttling or an unreliable downstream system instead. Read-only. Use it before cs_explain_flow_run when the complaint is 'it fails sometimes' rather than 'it failed just now'. Uses the Power Automate service (cs_login scope 'flow'). Unverified against a live tenant.

NameTypeReqDescription
clientIdstringEntra app (client) id for MSAL. Defaults to CPS_CLIENT_ID, then the first-party VS Code id.
environmentIdstringPower Platform environment id (GUID). Defaults to workspace sync metadata or CPS_ENVIRONMENT_ID.
flowIdstringyesFlow id (cs_list_flows)
lastNnumberRuns to examine; default 50
sampleFailuresnumberFailed runs to open for action-level attribution; default 5
tenantIdstringEntra tenant id. Defaults to the workspace sync metadata, then CPS_TENANT_ID.
workspacestringPath to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory.

No output schema declared.

No examples provided.

cs_auth_who ~146

Who pac is signed in as, and against which environment. Runs 'pac auth who' with the active pac auth profile.

NameTypeReqDescription
backgroundbooleanRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
cwdstringWorking directory for pac (for project commands: the solution project folder)
profilestringpac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
timeoutSecondsnumberDefault 600

No output schema declared.

No examples provided.

cs_backup_tenant ~347

Write the tenant's Power Platform configuration to local files for reference, diffing and source control: tenant settings, environments, DLP policies, environment groups, service principals, registered applications and app templates, plus per environment its details, solutions, agents, connections, security roles and platform backups. Read-only for the tenant; it only writes files. Runs as the admin account: pass 'profile' or set CPS_ADMIN_PROFILE. Each capture is independent, so a command the account cannot run is reported in 'skipped' and the rest still completes.

NameTypeReqDescription
clientIdstringEntra app (client) id for MSAL. Defaults to CPS_CLIENT_ID, then the first-party VS Code id.
dirstringyesFolder to write the backup into (created; existing files with the same names are overwritten)
environmentsarrayEnvironments to detail; default: every environment 'pac admin list' returns
includeBackupsbooleanDefault true: the platform backups of each environment
includeDataversebooleanDefault true: flows, connection references, environment variables and agents per environment, when a Dataverse sign-in is cached (cs_login)
includeEnvironmentsbooleanDefault true; false captures tenant level only
includeRolesbooleanDefault true: the security roles of each environment
maxEnvironmentsnumberDefault 50
profilestringpac auth profile of the admin account; default CPS_ADMIN_PROFILE, then the active profile
tenantIdstringEntra tenant id. Defaults to the workspace sync metadata, then CPS_TENANT_ID.

No output schema declared.

No examples provided.

Common questions

What is the Copilot Studio MCP server?

Copilot Studio MCP is listed in the public MCP registry as io.github.jgt87/copilot-studio-mcp. Build, test, ship and maintain Microsoft Copilot Studio agents from the editor. This page covers its npm package (copilot-studio-mcp).

Is the Copilot Studio MCP server safe to use?

Copilot Studio MCP scores 72 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Copilot Studio MCP server expose?

Copilot Studio MCP exposes 142 tools: cs_init, cs_login, cs_login_status, cs_logout, cs_set_tool_preset, and 137 more. Their descriptions and schemas cost roughly 33,335 tokens of context every time the server is loaded.

Is the Copilot Studio MCP server still maintained?

Copilot Studio MCP is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Copilot Studio MCP server under?

Copilot Studio MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.