// MCP TOOL REFERENCE

POWERPLATFORM MCP TOOLS

66 tools from the PowerPlatform MCP MCP Server, categorised by risk level.

// ALL 66 POWERPLATFORM MCP TOOLS

READ 46 tools

Read check-component-dependencies Check dependencies for a PowerPlatform component before deletion. Returns all components that depend on the... Read check-delete-eligibility Check if a PowerPlatform component can be safely deleted. Returns whether deletion is allowed and lists blo... Read get-all-plugin-steps Get all plugin SDK message processing steps across all assemblies in the environment Read get-business-rule Get a specific business rule with its complete XAML definition Read get-business-rules Get all business rules in the environment Read get-connection-references Get connection references in the PowerPlatform environment with optional filtering by managed status, conne... Read get-custom-api Get a single Custom API definition by unique name Read get-custom-api-request-parameters List request parameters for a Custom API Read get-custom-api-response-properties List response properties for a Custom API Read get-custom-apis List Custom API definitions in the PowerPlatform environment with optional filtering Read get-entity-attribute Get a specific attribute/field of a PowerPlatform entity Read get-entity-attributes Get attributes/fields of a PowerPlatform entity Read get-entity-keys Get alternate keys defined on a Dataverse entity Read get-entity-metadata Get metadata about a PowerPlatform entity Read get-entity-plugin-pipeline Get all plugins that execute on a specific entity, organized by message and stage Read get-entity-relationships Get relationships (one-to-many and many-to-many) for a PowerPlatform entity Read get-environment-variables Get environment variable definitions and their current values from the PowerPlatform environment Read get-flow-definition Get a Power Automate flow with its complete definition or a parsed summary of triggers, actions, and connec... Read get-flow-inventory Get complete inventory of all cloud flows (name, state, modified date). Lighter than scan-flow-health as it... Read get-flow-run-details Get detailed flow run information including action-level outputs and errors. For failed actions, fetches de... Read get-flow-runs Get flow run history for a specific Power Automate flow Read get-flows Get Power Automate cloud flows with smart filtering (excludes system, Copilot Sales, and Customer Insights ... Read get-global-option-set Get a global option set definition by name Read get-ootb-workflows Get all non-cloud-flow workflows: background workflows, business rules, actions, BPFs, on-demand workflows Read get-plugin-assemblies Get all plugin assemblies in the environment Read get-plugin-assembly-complete Get a plugin assembly by name with all related plugin types, steps, and images Read get-plugin-trace-logs Get plugin trace logs with filtering options Read get-plugin-type Look up a plugin type by its fully qualified class name (e.g. Read get-publishers Get all non-readonly publishers in the PowerPlatform environment Read get-record Get a specific record by entity name (plural) and ID Read get-sdk-message Look up an SDK message by name (e.g. Read get-security-role-privileges Get privileges assigned to a specific security role, optionally filtered by entity or access right Read get-security-roles Get security roles in the PowerPlatform environment, filtered to unmanaged or customizable roles. Supports ... Read get-service-endpoints Get all service endpoints (Service Bus, webhooks, Event Hub, Event Grid) Read get-solution Get a specific solution by its unique name Read get-solution-components Get all components in a solution, ordered by component type Read get-solutions Get all visible solutions in the PowerPlatform environment, ordered by creation date Read get-web-resource Get a single web resource by its exact name Read get-web-resources List web resources in a PowerPlatform environment with optional type and name filters Read get-workflow-definition Get a specific classic workflow with its complete XAML definition or a structured summary Read get-workflows Get all classic Dynamics workflows in the environment Read list-privileges List the system privilege catalog. Use to discover privilegeId GUIDs and supported depths before assigning ... Read query-records Query records using an OData filter expression Read scan-flow-health Batch-scan all Power Automate cloud flows for health metrics. Fetches run history for each flow and compute... Read search-workflows Search workflows (both classic workflows and Power Automate flows) by name, entity, description, category, ... Read export-solution Export a solution as a base64-encoded package. This is a read-only operation that serializes the solution.

WRITE 14 tools

Write add-security-role-privileges Append privileges to a security role using AddPrivilegesRole. Existing privileges are preserved. Write add-solution-component Add a component to a Dataverse solution Write clone-security-role Clone an existing security role into a new role, copying its privileges. Uses CloneAsRole with a fallback t... Write create-custom-api Create a new Custom API definition in Dataverse Write create-custom-api-request-parameter Create a request parameter for a Custom API Write create-custom-api-response-property Create a response property for a Custom API Write create-entity-alternate-key Create an alternate key on a Dataverse entity Write create-entity-string-attribute Create a new Single Line of Text attribute/column on a Dataverse entity Write create-environment-variable Create a new environment variable definition in Dataverse Write create-plugin-step Register a new plugin step (SDK message processing step) Write create-security-role Create a new security role. If businessUnitId is omitted, the role is created in the root business unit. Pa... Write create-web-resource Create a new web resource in a PowerPlatform environment. Content must be base64-encoded. Write set-environment-variable-value Set or update the current value of an environment variable Write update-security-role Update properties of a security role (name, description, business unit). At least one field must be provided.

DESTRUCTIVE 3 tools

Destructive delete-security-role Delete a security role. Destructive — requires confirm: true to proceed. Destructive remove-security-role-privileges Remove privileges from a security role. Loops RemovePrivilegeRole — each privilege is removed in its own call. Destructive replace-security-role-privileges Replace the entire set of privileges on a role with the supplied list (ReplacePrivilegesRole). Destructive ...

EXECUTE 3 tools

Execute cancel-flow-run Cancel a running or waiting flow run. Cannot cancel flows already in a terminal state (Succeeded, Failed, C... Execute resubmit-flow-run Resubmit/retry a failed flow run using the original trigger inputs Execute publish-customizations Publish entity customizations or all customizations in Dataverse

// FAQ

How many tools does the PowerPlatform MCP MCP server have? +

The PowerPlatform MCP MCP server exposes 66 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on PowerPlatform MCP tools? +

Route the PowerPlatform MCP server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do PowerPlatform MCP tools fall into? +

PowerPlatform MCP tools are categorised as Read (46), Write (14), Destructive (3), Execute (3). Each category has a recommended default policy.

Enforce policy on every PowerPlatform MCP tool call.

Start from PowerPlatform MCP, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Free to start. No card required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.