Microsoft formalized the Dataverse MCP server tool shape in June 2026 — 15 named tools that give any MCP-compatible agent grounded, auditable access to your Power Platform environment. This analysis covers the full tool surface organized by risk tier, how to configure clients in VS Code and Copilot Studio, the billing model, and a dedicated security and governance breakdown: Entra ID auth, RBAC, client allowlisting, audit gaps, prompt injection risks, and the delete-override danger in the sample agent instructions.
Model Context Protocol
Power Apps MCP Server: Complete Guide to Every Feature (Public Preview 2026)
The Power Apps MCP (Model Context Protocol) Server is now in public preview. It exposes three tools — invoke_data_entry, request_assistance, and log_for_review — that let AI agents automate tasks inside model-driven apps with built-in human supervision via a redesigned agent feed. This guide covers every feature, technical detail, current limitation, and step-by-step setup path.