// SCAN REPORT

PowerPlatform MCP

66 tools. 20 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

20 can modify or destroy data

46 read-only

66 tools total

Community server · catalogue entry verified 11/06/2026

How to control PowerPlatform MCP ↓

TOOL MAP

What PowerPlatform MCP exposes to your agents

Read (46) Write / Execute (17) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous PowerPlatform MCP tools

Destructive · Critical delete-security-role Deleting a security role is an irreversible action that removes access permissions for potentially many users. Destructive · High remove-security-role-privileges This tool irreversibly removes security privileges from a role, which is a destructive action affecting access control. Destructive · High replace-security-role-privileges The tool explicitly wipes all existing privileges on a security role and replaces them wholesale. Execute · High cancel-flow-run Cancelling a flow run terminates an active process mid-execution.

20 of PowerPlatform MCP's 66 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control PowerPlatform MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and PowerPlatform MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete-security-role": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add-security-role-privileges": {
    "limits": [
      {
        "counter": "add-security-role-privileges_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check-component-dependencies": {
    "limits": [
      {
        "counter": "check-component-dependencies_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register PowerPlatform MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON POWERPLATFORM →

Free to start. No card required.

FULL CATALOGUE

All 66 PowerPlatform MCP tools

DESTRUCTIVE 3 tools

Destructive delete-security-role Delete a security role. Destructive — requires confirm: true to proceed. Destructive remove-security-role-privileges Remove privileges from a security role. Loops RemovePrivilegeRole — each privilege is removed in its own call. Destructive replace-security-role-privileges Replace the entire set of privileges on a role with the supplied list (ReplacePrivilegesRole). Destructive — w

EXECUTE 3 tools

Execute cancel-flow-run Cancel a running or waiting flow run. Cannot cancel flows already in a terminal state (Succeeded, Failed, Canc Execute resubmit-flow-run Resubmit/retry a failed flow run using the original trigger inputs Execute publish-customizations Publish entity customizations or all customizations in Dataverse

WRITE 14 tools

Write add-security-role-privileges Append privileges to a security role using AddPrivilegesRole. Existing privileges are preserved. Write add-solution-component Add a component to a Dataverse solution Write clone-security-role Clone an existing security role into a new role, copying its privileges. Uses CloneAsRole with a fallback to c Write create-custom-api Create a new Custom API definition in Dataverse Write create-custom-api-request-parameter Create a request parameter for a Custom API Write create-custom-api-response-property Create a response property for a Custom API Write create-entity-alternate-key Create an alternate key on a Dataverse entity Write create-entity-string-attribute Create a new Single Line of Text attribute/column on a Dataverse entity Write create-environment-variable Create a new environment variable definition in Dataverse Write create-plugin-step Register a new plugin step (SDK message processing step) Write create-security-role Create a new security role. If businessUnitId is omitted, the role is created in the root business unit. Pass Write create-web-resource Create a new web resource in a PowerPlatform environment. Content must be base64-encoded. Write set-environment-variable-value Set or update the current value of an environment variable Write update-security-role Update properties of a security role (name, description, business unit). At least one field must be provided.

READ 46 tools

Read check-component-dependencies Check dependencies for a PowerPlatform component before deletion. Returns all components that depend on the sp Read check-delete-eligibility Check if a PowerPlatform component can be safely deleted. Returns whether deletion is allowed and lists blocki Read get-all-plugin-steps Get all plugin SDK message processing steps across all assemblies in the environment Read get-business-rule Get a specific business rule with its complete XAML definition Read get-business-rules Get all business rules in the environment Read get-connection-references Get connection references in the PowerPlatform environment with optional filtering by managed status, connecti Read get-custom-api Get a single Custom API definition by unique name Read get-custom-api-request-parameters List request parameters for a Custom API Read get-custom-api-response-properties List response properties for a Custom API Read get-custom-apis List Custom API definitions in the PowerPlatform environment with optional filtering Read get-entity-attribute Get a specific attribute/field of a PowerPlatform entity Read get-entity-attributes Get attributes/fields of a PowerPlatform entity Read get-entity-keys Get alternate keys defined on a Dataverse entity Read get-entity-metadata Get metadata about a PowerPlatform entity Read get-entity-plugin-pipeline Get all plugins that execute on a specific entity, organized by message and stage Read get-entity-relationships Get relationships (one-to-many and many-to-many) for a PowerPlatform entity Read get-environment-variables Get environment variable definitions and their current values from the PowerPlatform environment Read get-flow-definition Get a Power Automate flow with its complete definition or a parsed summary of triggers, actions, and connector Read get-flow-inventory Get complete inventory of all cloud flows (name, state, modified date). Lighter than scan-flow-health as it do Read get-flow-run-details Get detailed flow run information including action-level outputs and errors. For failed actions, fetches detai Read get-flow-runs Get flow run history for a specific Power Automate flow Read get-flows Get Power Automate cloud flows with smart filtering (excludes system, Copilot Sales, and Customer Insights flo Read get-global-option-set Get a global option set definition by name Read get-ootb-workflows Get all non-cloud-flow workflows: background workflows, business rules, actions, BPFs, on-demand workflows Read get-plugin-assemblies Get all plugin assemblies in the environment Read get-plugin-assembly-complete Get a plugin assembly by name with all related plugin types, steps, and images Read get-plugin-trace-logs Get plugin trace logs with filtering options Read get-plugin-type Look up a plugin type by its fully qualified class name (e.g. Read get-publishers Get all non-readonly publishers in the PowerPlatform environment Read get-record Get a specific record by entity name (plural) and ID Read get-sdk-message Look up an SDK message by name (e.g. Read get-security-role-privileges Get privileges assigned to a specific security role, optionally filtered by entity or access right Read get-security-roles Get security roles in the PowerPlatform environment, filtered to unmanaged or customizable roles. Supports sol Read get-service-endpoints Get all service endpoints (Service Bus, webhooks, Event Hub, Event Grid) Read get-solution Get a specific solution by its unique name Read get-solution-components Get all components in a solution, ordered by component type Read get-solutions Get all visible solutions in the PowerPlatform environment, ordered by creation date Read get-web-resource Get a single web resource by its exact name Read get-web-resources List web resources in a PowerPlatform environment with optional type and name filters Read get-workflow-definition Get a specific classic workflow with its complete XAML definition or a structured summary Read get-workflows Get all classic Dynamics workflows in the environment Read list-privileges List the system privilege catalog. Use to discover privilegeId GUIDs and supported depths before assigning pri Read query-records Query records using an OData filter expression Read scan-flow-health Batch-scan all Power Automate cloud flows for health metrics. Fetches run history for each flow and computes s Read search-workflows Search workflows (both classic workflows and Power Automate flows) by name, entity, description, category, or Read export-solution Export a solution as a base64-encoded package. This is a read-only operation that serializes the solution.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about PowerPlatform MCP

Can an AI agent delete data through the PowerPlatform MCP server? +

Yes. The PowerPlatform MCP server exposes 3 destructive tools including delete-security-role, remove-security-role-privileges, replace-security-role-privileges. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through PowerPlatform MCP? +

The PowerPlatform MCP server has 14 write tools including add-security-role-privileges, add-solution-component, clone-security-role. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach PowerPlatform MCP.

How many tools does the PowerPlatform MCP server expose? +

66 tools across 4 categories: Destructive, Execute, Read, Write. 46 are read-only. 20 can modify, create, or delete data.

How do I enforce a policy on PowerPlatform MCP? +

Register the PowerPlatform MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every PowerPlatform MCP tool call.

Deterministic rules across all 66 PowerPlatform MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON POWERPLATFORM →

Free to start. No card required.

66 PowerPlatform MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.