Copilot Studio MCP
NPM · COPILOT-STUDIO-MCP · SCANNED SEP 20
Build, test, ship and maintain Microsoft Copilot Studio agents from the editor
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 60 of 157 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 5 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability76
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 34022 tokens (~239/item across 142 items; 142 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
- Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage95
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 85% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 16 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "cs_logout" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 143 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Copilot Studio MCP server?
Copilot Studio MCP runs locally as an npm package, launched with npx -y copilot-studio-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · copilot-studio-mcp
claude mcp add jgt87-copilot-studio-mcp -- npx -y copilot-studio-mcp
{
"mcpServers": {
"jgt87-copilot-studio-mcp": {
"command": "npx",
"args": [
"-y",
"copilot-studio-mcp"
]
}
}
} {
"servers": {
"jgt87-copilot-studio-mcp": {
"command": "npx",
"args": [
"-y",
"copilot-studio-mcp"
]
}
}
} codex mcp add jgt87-copilot-studio-mcp -- npx -y copilot-studio-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"jgt87-copilot-studio-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"copilot-studio-mcp"
],
"enabled": true
}
}
} openclaw mcp add jgt87-copilot-studio-mcp --command npx --arg -y --arg copilot-studio-mcp
mcp_servers:
jgt87-copilot-studio-mcp:
command: "npx"
args: ["-y", "copilot-studio-mcp"] {
"McpServers": {
"jgt87-copilot-studio-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"copilot-studio-mcp"
]
}
}
} assistant mcp add jgt87-copilot-studio-mcp -t stdio -c npx -a -y copilot-studio-mcp
{
"mcpServers": {
"jgt87-copilot-studio-mcp": {
"command": "npx",
"args": [
"-y",
"copilot-studio-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 0
- Security disclosure: unverified → fail ▼ functional
- 16 Sept 26 +1
- Security disclosure: fail → unverified ▼ functional
- 15 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 14 Sept 26 −13
- Malware scan: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Stability: unverified → 0.10 ▲ functional
- Package version: 0.1.6 → 0.1.7 functional
- 13 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 11 Sept 26 53
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/copilot-studio-mcp@0.1.7
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 157 packages
| Packages resolved | 157 |
|---|---|
| Deprecated | 1 |
| Stale | 59 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
cs_add_flow Scaffold a cloud flow (experimental) ~262
EXPERIMENTAL: write workflows/<Name>/metadata.yaml + workflow.json for a flow with the 'when an agent calls the flow' trigger and a response, optionally exposing it as a tool. Format follows the schema's CloudFlowDefinition and the Power Automate solution JSON; verify with cs_pack and in the portal after push. The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.
| Name | Type | Req | Description |
|---|---|---|---|
| actions | object | – | Extra Power Automate actions (name -> definition) inserted before the response |
| addTool | boolean | – | Also create actions/<name>.mcs.yml invoking this flow |
| confirm | boolean | – | Required to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing. |
| description | string | – | – |
| inputs | array | – | – |
| name | string | yes | – |
| outputs | array | – | – |
| overwrite | boolean | – | – |
| workspace | string | – | Path to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory. |
No output schema declared.
No examples provided.
cs_add_knowledge_source Add a knowledge source ~300
Add knowledge as YAML: kind 'public-site' (Bing-scoped website, max 2 path levels), 'sharepoint' (direct folder URL), 'graph-connector' (Microsoft Graph connector via environment variable), or 'files' (copy documents into knowledge/files for upload on push). Dataverse, AI Search and SQL knowledge are portal-only. The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing. |
| connectionEnvironmentVariable | string | – | – |
| connectionName | string | – | – |
| contentSourceDisplayName | string | – | – |
| description | string | – | – |
| files | array | – | Absolute paths of documents (pdf, docx, txt, ...) |
| includeSubPages | boolean | – | – |
| kind | string | yes | – |
| name | string | yes | – |
| overwrite | boolean | – | – |
| site | string | – | – |
| triggerCondition | string | – | Power Fx condition restricting when this source is searched |
| workspace | string | – | Path to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory. |
No output schema declared.
No examples provided.
cs_add_solution_component Add a component to a solution ~325
Add an existing component (an agent, flow, connection reference, environment variable, table ...) to an unmanaged solution by schema name or id and component type code. Runs 'pac solution add-solution-component' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| addRequiredComponents | boolean | – | Also add the components it depends on |
| async | boolean | – | Run the operation asynchronously |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| component | string | yes | Schema name or id of the component |
| componentType | string | yes | Component type code or name (e.g. 29 for a flow / workflow, 10088 for a connection reference, 380 for an environment variable definition) |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL; default: the environment of the active pac auth profile |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| solutionName | string | yes | Solution unique name |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_add_solution_license Add license plan files to a solution project ~202
Attach license plan definition and mapping CSV files to a solution project (ISV licensing). Run in the solution project folder (cwd). Local file change only. Runs 'pac solution add-license' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| planDefinitionFile | string | yes | CSV: Service ID, Display name, More info URL |
| planMappingFile | string | yes | CSV: Service ID, Component name |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_add_solution_reference Add a project reference to a solution project ~186
Reference another project (plug-in, PCF, ...) from a .cdsproj so it is packed into the solution. Run in the solution project folder (cwd). Local file change only. Runs 'pac solution add-reference' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| path | string | yes | Path of the referenced project |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_add_tool Add a tool (connector, MCP server, flow, prompt, agent, or raw) ~529
Create actions/<name>.mcs.yml. type 'connector': a connector operation (connectorId like shared_office365, operationId like SendEmailV2; use cs_list_connectors / cs_describe_connector to find them). type 'mcp': an MCP server exposed through a connector. type 'flow': a cloud flow by id. type 'prompt': an AI Builder prompt by model id (cs_list_prompts). type 'connected-agent': another Copilot Studio agent by schema name. type 'child-agent': a child agent's GPT component. type 'raw': any other TaskAction kind with the action object supplied. When the connector definition is cached, the operationId is checked and required inputs are filled from the catalog unless inputs are given. Connector and MCP tools need a connection that only the portal can authorise; the tool writes the connection-reference stub and returns the portal step. The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.
| Name | Type | Req | Description |
|---|---|---|---|
| action | object | – | type raw: full TaskAction object with kind |
| aiModelId | string | – | type prompt: AI Builder model id |
| botSchemaName | string | – | type connected-agent |
| confirm | boolean | – | Required to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing. |
| connectionMode | string | – | Invoker = end user's connection; Maker = the maker's shared connection |
| connectionReference | string | – | Existing logical name from connectionreferences.mcs.yml |
| connectorId | string | – | shared_<name> or a display name from the catalog |
| description | string | yes | Also used as modelDescription unless overridden; the orchestrator routes on it |
| flowId | string | – | – |
| gptComponentSchemaName | string | – | type child-agent |
| inputs | array | – | – |
| inputsFromCatalog | boolean | – | Default true: when no inputs are given and the connector definition is cached, add automatic inputs for the operation's required parameters |
| modelDescription | string | – | – |
| name | string | yes | – |
| operationId | string | – | – |
| outputs | array | – | – |
| overwrite | boolean | – | – |
| type | string | yes | – |
| workspace | string | – | Path to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory. |
No output schema declared.
No examples provided.
cs_add_topic Add a topic ~244
Create topics/<name>.topic.mcs.yml from a declarative spec: trigger phrases (or a system trigger) plus message / question / condition / redirect / setVariable / searchKnowledge / http / invokeFlow / end / raw nodes. Validates the result. Push to apply. The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.
| Name | Type | Req | Description |
|---|---|---|---|
| actions | array | yes | – |
| confirm | boolean | – | Required to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing. |
| description | string | – | – |
| name | string | yes | – |
| overwrite | boolean | – | – |
| priority | number | – | – |
| triggerKind | string | – | System trigger instead of phrases |
| triggerPhrases | array | – | User phrases that start the topic (OnRecognizedIntent) |
| workspace | string | – | Path to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory. |
No output schema declared.
No examples provided.
cs_add_trigger Add an event trigger ~171
Create trigger/<name>.trigger.mcs.yml pointing at a cloud flow that starts the agent (WorkflowExternalTrigger). The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing. |
| description | string | – | – |
| flowId | string | yes | – |
| name | string | yes | – |
| overwrite | boolean | – | – |
| workspace | string | – | Path to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory. |
No output schema declared.
No examples provided.
cs_add_variable Add a global variable ~177
Create variables/<name>.variable.mcs.yml (GlobalVariableComponent, conversation scope). The first call changes nothing: it returns the files it would write, as a diff against what is there now, for the user to approve. Call it again with the same arguments plus confirm: true to write them.
| Name | Type | Req | Description |
|---|---|---|---|
| aiVisibility | string | – | – |
| confirm | boolean | – | Required to write the change to the file. Without it the tool returns a preview - the changed lines against the current ones, and the character count - and writes nothing. |
| defaultValue | string|number|boolean | – | – |
| description | string | – | – |
| name | string | yes | – |
| overwrite | boolean | – | – |
| workspace | string | – | Path to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory. |
No output schema declared.
No examples provided.
cs_admin_add_environment_to_group Add an environment to a group ~233
Put an environment into an environment group, which applies that group's rules to it. Changes tenant configuration: requires confirm: true. Runs 'pac admin add-group' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id, url, unique or partial name |
| environmentGroup | string | yes | Environment group name or id |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_assign_group Assign a group to an environment ~308
Give an Entra group a security role in an environment through a Dataverse team. Changes a live environment: requires confirm: true. Runs 'pac admin assign-group' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| businessUnit | string | – | Business unit id |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL |
| group | string | yes | Entra group object id |
| groupName | string | yes | Name of the Dataverse team to create |
| membershipType | string | yes | Membership type (MembersAndGuests, Members, Owners, Guests) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| role | string | yes | Security role name or id |
| teamType | string | yes | Team type (Owner, Access, AadSecurityGroup, AadOfficeGroup) |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_assign_user Assign a user to an environment ~280
Give a user (or an application user) a security role in an environment. Changes a live environment: requires confirm: true. Runs 'pac admin assign-user' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| applicationUser | boolean | – | The user is an application (service principal) |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| businessUnit | string | – | Business unit id |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| role | string | yes | Security role name or id (cs_admin_list_security_roles) |
| timeoutSeconds | number | – | Default 600 |
| user | string | yes | Object id or UPN, or the application id for an application user |
No output schema declared.
No examples provided.
cs_admin_assign_users Assign security roles to a roster of users ~432
Give many users their security roles in one environment, from a CSV roster or an inline list. pac assigns one user and one role per call, so a roster of ten developers with three roles each is thirty calls; this expands the roster and runs them under a single approval. Without confirm it returns the plan: every user-and-role pair it would attempt, so you can read the whole thing before any of it happens. Rows are independent, so a bad UPN or a role the environment does not have is reported and the rest still run. Changes a live environment: requires confirm: true. Runs as the admin account: pass 'profile' or set CPS_ADMIN_PROFILE. Prefer cs_admin_assign_group when the roster is really a group: that is one call per role however many people are in it, and new joiners inherit access. Unverified against a live tenant.
| Name | Type | Req | Description |
|---|---|---|---|
| assignments | array | – | Roster inline instead of a CSV file |
| background | boolean | – | Run in the background and return a jobId immediately, then poll cs_job_status. MCP clients cut a tool call off after about 60 seconds; this operation can take much longer, and without this the work i… |
| businessUnit | string | – | Business unit for rows that do not name one |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| continueOnError | boolean | – | Default true: one failed row does not abort the roster. false stops at the first failure. |
| csv | string | – | Path to a CSV roster. Header row needs a user column (user, upn, email) and a roles column (roles, role); several roles in one cell separated by comma, semicolon or pipe. Optional businessUnit and ap… |
| environment | string | yes | Environment id or URL to assign the roles in |
| profile | string | – | pac auth profile of the admin account; default CPS_ADMIN_PROFILE, then the active profile |
No output schema declared.
No examples provided.
cs_admin_backup_environment Back up an environment ~231
Take a manual backup of an environment (the platform's own backup, not the file backup cs_backup_tenant writes). Changes a live environment: requires confirm: true. Runs 'pac admin backup' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL |
| label | string | yes | Backup label |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 3600 |
No output schema declared.
No examples provided.
cs_admin_copy_environment Copy one environment over another ~295
Copy a source environment onto a target environment. Everything in the target is replaced: requires confirm: true. Runs 'pac admin copy' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| async | boolean | – | Run the operation asynchronously |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| maxAsyncWaitTime | number | – | Max asynchronous wait time in minutes (default 60) |
| name | string | – | Name for the target environment |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| skipAuditData | boolean | – | Do not copy audit data |
| sourceEnvironment | string | – | Environment to copy from |
| targetEnvironment | string | – | Environment to overwrite |
| timeoutSeconds | number | – | Default 14400 |
| type | string | – | Copy type (for example MinimalCopy, FullCopy) |
No output schema declared.
No examples provided.
cs_admin_create_environment Create an environment ~364
Create a Dataverse environment in the tenant. Consumes tenant capacity: requires confirm: true. Runs 'pac admin create' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| async | boolean | – | Run the operation asynchronously |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| currency | string | – | Currency (default USD) |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| domain | string | – | Domain part of the environment URL |
| inputFile | string | – | JSON file with the arguments |
| language | string | – | Language (default English) |
| maxAsyncWaitTime | number | – | Max asynchronous wait time in minutes (default 60) |
| name | string | – | Environment name |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| region | string | – | Region (default unitedstates) |
| securityGroupId | string | – | Entra security group id (required for a Teams environment) |
| templates | array | – | Dynamics 365 templates to deploy |
| timeoutSeconds | number | – | Default 7200 |
| type | string | yes | Production, Sandbox, Trial, Developer or Teams |
| user | string | – | User to assign to the environment (object id or UPN) |
No output schema declared.
No examples provided.
cs_admin_create_service_principal Create an application user ~258
Register an Entra application and give it an application user with a security role in an environment: the headless identity a pipeline signs in as. Changes a live environment: requires confirm: true. Runs 'pac admin create-service-principal' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL |
| name | string | – | Application name to create in Entra |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| role | string | – | Security role (default System Administrator) |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_delete_environment Delete an environment ~255
Delete an environment from the tenant, with everything in it: agents, solutions, flows and data. Irreversible beyond the platform's own backup retention: requires confirm: true. Runs 'pac admin delete' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| async | boolean | – | Run the operation asynchronously |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL |
| maxAsyncWaitTime | number | – | Max asynchronous wait time in minutes (default 60) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 7200 |
No output schema declared.
No examples provided.
cs_admin_environment_status Operations in progress ~153
Status of the tenant operations that are still running (copies, restores, resets, deletions). Runs 'pac admin status' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_list_app_templates List Dynamics 365 app templates ~169
The Dynamics 365 application templates that can be installed when creating an environment, per region. Runs 'pac admin list-app-templates' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| region | string | – | Region name (default unitedstates) |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_list_applications List registered Entra applications ~147
Entra applications registered with the tenant for Power Platform. Runs 'pac admin application list' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_list_backups List environment backups ~168
Backups of an environment, with their labels and dates: what cs_admin_restore_environment can restore. Runs 'pac admin list-backups' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_list_dlp_policies List DLP policies ~162
Data loss prevention policies in the tenant: the connector groups that decide which connectors an agent or flow may combine. Runs 'pac admin dlp-policy list' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_list_environment_groups List environment groups ~152
Environment groups in the tenant (the grouping used for managed-environment rules). Runs 'pac admin list-groups' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_list_environments List environments (admin) ~229
Every environment in the tenant with its type, region and state, as the admin centre lists them. Filters by name, type or installed application. Runs 'pac admin list' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| application | string | – | Only environments with this application installed |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Only environments whose name or id contains this text |
| name | string | – | Only environments whose name contains this text |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
| type | string | – | Only environments of this type (Production, Sandbox, Trial, Developer, Teams) |
No output schema declared.
No examples provided.
cs_admin_list_security_roles List security roles ~199
Security roles in an environment, optionally including child roles: what cs_admin_assign_user and cs_admin_assign_group can grant. Runs 'pac admin list-roles' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| businessUnit | string | – | Filter by business unit name or id |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL |
| includeChildRoles | boolean | – | Include child roles |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_list_service_principals List service principals with Dataverse access ~186
Entra applications that have an application user in Dataverse: who can act without a person signing in. Runs 'pac admin list-service-principal' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| filter | string | – | Application name starts-with filter |
| max | number | – | Maximum applications (default 20) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_list_tenant_settings Read tenant settings ~197
The tenant-wide Power Platform settings (governance, sharing, support, licensing). With settingsFile, pac writes them as JSON to that path; that file is the reference copy to keep in source control. Runs 'pac admin list-tenant-settings' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| settingsFile | string | – | Write the settings to this .json file |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_query Run a tenant resource query ~218
Run a tenant-level resource query (the admin centre's own query language) and optionally write the results to a file as JSON, list or CSV. Runs 'pac admin query' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| outputFile | string | – | Where to save the results |
| outputType | string | – | Json, List or Grid (default Grid) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| query | string | – | Resource query JSON as a string |
| queryFile | string | – | File containing the query JSON |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_register_application Register an Entra application ~216
Register an Entra application with the tenant so it can be used by Power Platform. Changes tenant configuration: requires confirm: true. Runs 'pac admin application register' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| applicationId | string | yes | Application (client) id |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_reset_environment Reset an environment ~314
Reset an environment to an empty Dataverse instance. Everything in it is deleted: requires confirm: true. Runs 'pac admin reset' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| async | boolean | – | Run the operation asynchronously |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| currency | string | – | Currency |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| domain | string | – | Domain part of the URL |
| environment | string | – | Environment id or URL |
| inputFile | string | – | JSON file with the arguments |
| language | string | – | Language |
| maxAsyncWaitTime | number | – | Max asynchronous wait time in minutes (default 60) |
| name | string | – | New name |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| purpose | string | – | Description of the environment's intent |
| templates | array | – | Dynamics 365 templates |
| timeoutSeconds | number | – | Default 7200 |
No output schema declared.
No examples provided.
cs_admin_restore_environment Restore an environment from a backup ~309
Restore a backup into the same or another environment. Overwrites the target's data and customisations: requires confirm: true. Runs 'pac admin restore' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| async | boolean | – | Run the operation asynchronously |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| maxAsyncWaitTime | number | – | Max asynchronous wait time in minutes (default 60) |
| name | string | – | Name for the restored environment |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| selectedBackup | string | yes | Backup date as mm/dd/yyyy hh:mm, or 'latest' |
| skipAuditData | boolean | – | Do not restore audit data |
| sourceEnvironment | string | – | Environment the backup came from |
| targetEnvironment | string | – | Environment to restore into (defaults to the source) |
| timeoutSeconds | number | – | Default 14400 |
No output schema declared.
No examples provided.
cs_admin_self_elevate Self-elevate to System Administrator ~223
Give yourself the System Administrator role in an environment. Needs Global, Power Platform or Dynamics 365 admin. Changes a live environment: requires confirm: true. Runs 'pac admin self-elevate' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | – | Environment id or URL |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_set_backup_retention Set the backup retention period ~275
Set how many days backups of an environment are kept (7, 14, 21 or 28). Changes a live environment: requires confirm: true. Runs 'pac admin set-backup-retention-period' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| async | boolean | – | Run the operation asynchronously |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| days | number | yes | 7, 14, 21 or 28 |
| environment | string | – | Environment id or URL |
| maxAsyncWaitTime | number | – | Max asynchronous wait time in minutes (default 60) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_set_governance_config Enable or edit managed environments ~434
Turn managed environments on ('Standard') or off ('Basic') for an environment and set its governance options: sharing limits, solution checker mode, maker onboarding. Changes tenant governance: requires confirm: true. Runs 'pac admin set-governance-config' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| checkerRuleOverrides | string | – | Solution checker rule overrides |
| cloudFlowsLimit | number | – | How many people makers may share solution cloud flows with |
| cloudFlowsMode | string | – | Sharing limit mode for solution cloud flows |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| disableGroupSharing | boolean | – | Disable sharing with groups |
| environment | string | yes | Environment id or URL |
| excludeAnalysis | boolean | – | Exclude this environment from the weekly usage digest |
| includeInsights | boolean | – | Show insights on the admin centre home page |
| limitSharingMode | string | – | Sharing limit mode |
| makerOnboardingMarkdown | string | – | Maker onboarding markdown |
| makerOnboardingUrl | string | – | Maker onboarding URL |
| maxLimitUserSharing | number | – | How many people makers may share canvas apps with |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| protectionLevel | string | yes | Standard enables managed environments, Basic disables them |
| solutionCheckerMode | string | – | Solution checker validation mode (None, Warn, Block) |
| suppressValidationEmails | boolean | – | Do not send validation emails |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_set_runtime_state Set environment administration mode ~275
Put an environment into administration mode (only admins can use it) or back, and control background operations. Changes a live environment: requires confirm: true. Runs 'pac admin set-runtime-state' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| async | boolean | – | Run the operation asynchronously |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| backgroundOperations | string | – | Background operations state |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| environment | string | yes | Environment id or URL |
| maxAsyncWaitTime | number | – | Max asynchronous wait time in minutes (default 60) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| runtimeState | string | yes | AdminMode or Enabled |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_show_dlp_policy Show one DLP policy ~179
One data loss prevention policy in full: its connector classification and the environments it applies to. Runs 'pac admin dlp-policy show' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| policyName | string | yes | Policy id (GUID); cs_admin_list_dlp_policies shows it |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_unregister_application Unregister an Entra application ~207
Remove an Entra application's tenant registration. Changes tenant configuration: requires confirm: true. Runs 'pac admin application unregister' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| applicationId | string | yes | Application (client) id |
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_admin_update_tenant_settings Update tenant settings ~270
Change tenant-wide settings, either from a settings file or one setting at a time (for example powerPlatform.governance.disableDeveloperEnvironmentCreationByNonAdminUsers). Affects the whole tenant: requires confirm: true. Runs 'pac admin update-tenant-settings' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| confirm | boolean | – | Required to actually perform a change in a live environment. Without it the tool returns a dry run. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| settingName | string | – | Single setting path |
| settingValue | string | – | Value for that setting |
| settingsFile | string | – | A .json file of settings (from cs_admin_list_tenant_settings) |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_analyze_flow_health Assess a flow's reliability ~278
How reliable a cloud flow is across its recent runs: failure rate, duration spread (median and 90th percentile), and which actions the failures concentrate on. The verdict distinguishes one broken step from failures spread across many actions, which points at a connection, throttling or an unreliable downstream system instead. Read-only. Use it before cs_explain_flow_run when the complaint is 'it fails sometimes' rather than 'it failed just now'. Uses the Power Automate service (cs_login scope 'flow'). Unverified against a live tenant.
| Name | Type | Req | Description |
|---|---|---|---|
| clientId | string | – | Entra app (client) id for MSAL. Defaults to CPS_CLIENT_ID, then the first-party VS Code id. |
| environmentId | string | – | Power Platform environment id (GUID). Defaults to workspace sync metadata or CPS_ENVIRONMENT_ID. |
| flowId | string | yes | Flow id (cs_list_flows) |
| lastN | number | – | Runs to examine; default 50 |
| sampleFailures | number | – | Failed runs to open for action-level attribution; default 5 |
| tenantId | string | – | Entra tenant id. Defaults to the workspace sync metadata, then CPS_TENANT_ID. |
| workspace | string | – | Path to (or inside) the agent workspace. Defaults to CPS_WORKSPACE or the current directory. |
No output schema declared.
No examples provided.
cs_auth_who Show the active pac auth profile ~146
Who pac is signed in as, and against which environment. Runs 'pac auth who' with the active pac auth profile.
| Name | Type | Req | Description |
|---|---|---|---|
| background | boolean | – | Run in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status. |
| cwd | string | – | Working directory for pac (for project commands: the solution project folder) |
| profile | string | – | pac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles. |
| timeoutSeconds | number | – | Default 600 |
No output schema declared.
No examples provided.
cs_backup_tenant Back up the tenant configuration to files ~347
Write the tenant's Power Platform configuration to local files for reference, diffing and source control: tenant settings, environments, DLP policies, environment groups, service principals, registered applications and app templates, plus per environment its details, solutions, agents, connections, security roles and platform backups. Read-only for the tenant; it only writes files. Runs as the admin account: pass 'profile' or set CPS_ADMIN_PROFILE. Each capture is independent, so a command the account cannot run is reported in 'skipped' and the rest still completes.
| Name | Type | Req | Description |
|---|---|---|---|
| clientId | string | – | Entra app (client) id for MSAL. Defaults to CPS_CLIENT_ID, then the first-party VS Code id. |
| dir | string | yes | Folder to write the backup into (created; existing files with the same names are overwritten) |
| environments | array | – | Environments to detail; default: every environment 'pac admin list' returns |
| includeBackups | boolean | – | Default true: the platform backups of each environment |
| includeDataverse | boolean | – | Default true: flows, connection references, environment variables and agents per environment, when a Dataverse sign-in is cached (cs_login) |
| includeEnvironments | boolean | – | Default true; false captures tenant level only |
| includeRoles | boolean | – | Default true: the security roles of each environment |
| maxEnvironments | number | – | Default 50 |
| profile | string | – | pac auth profile of the admin account; default CPS_ADMIN_PROFILE, then the active profile |
| tenantId | string | – | Entra tenant id. Defaults to the workspace sync metadata, then CPS_TENANT_ID. |
No output schema declared.
No examples provided.
What is the Copilot Studio MCP server?
Copilot Studio MCP is listed in the public MCP registry as io.github.jgt87/copilot-studio-mcp. Build, test, ship and maintain Microsoft Copilot Studio agents from the editor. This page covers its npm package (copilot-studio-mcp).
Is the Copilot Studio MCP server safe to use?
Copilot Studio MCP scores 72 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Copilot Studio MCP server expose?
Copilot Studio MCP exposes 142 tools: cs_init, cs_login, cs_login_status, cs_logout, cs_set_tool_preset, and 137 more. Their descriptions and schemas cost roughly 33,335 tokens of context every time the server is loaded.
Is the Copilot Studio MCP server still maintained?
Copilot Studio MCP is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Copilot Studio MCP server under?
Copilot Studio MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.