Microsoft formalized the Dataverse MCP server tool shape in June 2026 — 15 named tools that give any MCP-compatible agent grounded, auditable access to your Power Platform environment. This analysis covers the full tool surface organized by risk tier, how to configure clients in VS Code and Copilot Studio, the billing model, and a dedicated security and governance breakdown: Entra ID auth, RBAC, client allowlisting, audit gaps, prompt injection risks, and the delete-override danger in the sample agent instructions.
