Powerautomate Mcp

Docs: Overview · Installation & Upgrading · Changelog · Report an issue

An MCP (Model Context Protocol) server for Microsoft Power Platform. Create, manage, and deploy Power Automate flows using natural language amd more.

Works with any MCP-compatible AI client: Claude Desktop, Claude Code, VS Code Copilot, Cursor, Google Gemini CLI, and more.

Documentation Map

Features

• Create Flows - Build flows from natural language descriptions with guided wizard
• Test & Debug - Automatic testing with intelligent error diagnosis
• Validate - Pre-flight checks with best practices scoring (0-100)
• Manage Flows - List, update, clone, and delete flows
• Power Apps - Manage canvas and model-driven apps, permissions, versions
• Power Pages - Configure sites (pages, web roles, table permissions, snippets, templates) and manage hosting (provision, restart, delete)
• Environment Admin - Create, copy, backup, restore environments
• DLP Policies - Create and manage data loss prevention policies
• Solutions ALM - Export, import, and manage Dataverse solutions
• Dataverse CRUD - Full table/row operations via OData Web API
• SharePoint - Sites, lists, items, and files via Microsoft Graph
• Expression Help - Interactive Power Automate expression reference
• Connector Intelligence - Full knowledge of 400+ connectors and schemas
• Cross-Platform - Works on Windows, macOS, and Linux

Quick Start

Three commands — run them in a terminal:

npm install -g powerautomate-mcp   # 1. install
powerautomate-mcp --setup          # 2. sign in + connect your AI app
powerautomate-mcp --doctor         # 3. confirm everything works

The --setup wizard does it all: lets you choose a least-privilege permission set, creates the Entra app registration (or takes one you provide), signs you in, handles admin consent, picks your environment, and wires the server into your AI app for you — no hand-editing JSON. Then restart your app and ask it to build a flow.

Not very technical? Follow the step-by-step Easy Path with checkpoints.

Supported apps: Claude Desktop, Claude Code, Cursor, VS Code (Copilot), Gemini CLI, Windsurf, ChatGPT (via --http).

Microsoft Entra App Registration

The setup wizard (--setup) creates the app registration automatically if you have Azure CLI installed. No manual steps required for most users.

New tenants work too (v0.13.0+): if your tenant has never used Power Platform, setup creates the missing first-party service principals and resolves the permission ids your tenant actually publishes — the old AADSTS650052 / AADSTS65006 sign-in failures repair themselves on a re-run of --setup.

Who Needs to Do What?

Tip: You can also set PA_MCP_CLIENT_ID as an environment variable to skip the prompt entirely.

Admin Consent

When the Azure CLI is signed in as an admin, the wizard offers to grant tenant-wide consent directly (v0.13.0+) — no browser round-trip. Otherwise it presents the admin consent URL and auto-opens it in your browser. Any of these Entra ID roles can grant consent: Global Administrator, Application Administrator, Cloud Application Administrator, or Privileged Role Administrator. If you don't have one of these roles, share the URL with your admin:

https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id=YOUR_CLIENT_ID

Manual Setup (Optional)

If you prefer to create the app registration manually:

1. Go to Azure Portal > Microsoft Entra ID > App registrations > New registration

2. Configure basic settings:

   • Name: Power Automate MCP
   • Supported account types: Accounts in any organizational directory (multi-tenant)
   • Redirect URI: Select "Public client/native" and enter:

     https://login.microsoftonline.com/common/oauth2/nativeclient
     

3. After creation, go to Authentication and enable:

   • Allow public client flows: Yes

4. Go to API permissions > Add a permission and add only the permissions for the tool surfaces you want to enable. The setup wizard offers presets for All tool surfaces, Power Automate only, Power Automate + connectors, Dataverse, Power Pages, and Custom.

   API	Permission	Type	Used For
   Power Automate (Flow Service)	Flows.Read.All	Delegated	Read flows
   Power Automate (Flow Service)	Flows.Manage.All	Delegated	Create/update/delete flows
   Power Automate (Flow Service)	Activity.Read.All	Delegated	Flow run history
   Power Automate (Flow Service)	Approvals.Manage.All	Delegated	Approval management
   Microsoft Graph	User.Read, Sites.ReadWrite.All, Files.ReadWrite.All	Delegated	Optional: SharePoint, OneDrive, and Excel helpers
   PowerApps Service	User	Delegated	Optional: connections, connector metadata, custom connectors, and Power Apps maker APIs
   BAP Admin API	user_impersonation	Delegated	Optional: admin tools, Dataverse URL discovery, and Power Pages configuration
   Dynamics CRM	user_impersonation	Delegated	Optional: Dataverse table/row CRUD and Power Pages configuration
   Power Platform API	delegated permission	Delegated	Optional: Power Pages site management (Tier 2 — see note below)

   Least privilege: Power Automate-only setups need only the Flow Service permissions. Skipped feature scopes are saved in features.enabled, hidden from the advertised MCP tool list, and skipped by --doctor / --validate.

   Dataverse and admin tools require the BAP Admin API delegated permission (appId 0e0bf3cc-3078-4fd4-9ef3-cb6dc0245b10). Without it, the server cannot resolve the real Dataverse org URL and falls back to a guessed *.crm.dynamics.com hostname that often fails DNS.

   Power Pages site-management tools (Tier 2) call https://api.powerplatform.com and need the "Power Platform API" delegated permission (appId 8578e004-a5c6-46e7-913e-12f58912df43). It is not added by the automatic --setup app creation because that API exposes only feature-scoped permissions and the auto-creator can't safely guess the scope. Add it manually here if you want Tier 2; the Power Pages config tools (Dataverse) work without it. After adding, re-run --setup — the wizard reports whether the Power Platform API authorized.

5. Click Grant admin consent for [Your Tenant] (requires Global Admin, Application Admin, Cloud Application Admin, or Privileged Role Admin)

CLI Reference

powerautomate-mcp [options]

Environment Variables:

How It Works

More Example Prompts

Create a flow that sends me an email every morning with the weather forecast

Test my "Daily Report" flow and tell me if there are any errors

Help me write an expression to format a date as "January 1, 2024"

Show me all the flows that have been shared with me

Patch the "Compose" action inside the Default case of "If_Recognized_Form" — only that one node, leave the rest alone

List all items in the "Projects" list on our Marketing site

Upload this month's report to the Shared Documents library

Show me all active accounts in Dataverse with revenue over $1M

Create a new contact row for John Smith in the contacts table

List all canvas apps in my environment and who owns them

Share the "Expense Tracker" app with the Finance team

Create a new sandbox environment called "Dev Testing"

What DLP policies are applied to my default environment?

Export the "Sales Solution" as a managed solution for deployment

What connectors are available for working with SharePoint?

What parameters does the "Send an email (V2)" action need?

↑ Back to top

Available Tools (121 total)

Every tool the server exposes, grouped by service. All 121 are listed here.

↑ Back to top

Security

This server implements defense-in-depth security hardened through 3 rounds of penetration testing:

• Secure Token Storage: DPAPI (Windows), Keychain (macOS), libsecret on Linux when available, with a 0o600 file-cache fallback when it is not
• SSRF Prevention: Comprehensive private host detection covering IPv4, IPv6, IPv6-mapped/compatible IPv4, octal/hex/decimal notation, ULA, link-local ranges, domain allowlists
• OData Injection Protection: Tautology detection across all comparison operators, parenthesized forms, arithmetic/function-based bypasses, Unicode NFC normalization, ASCII-only enforcement
• Path Traversal Prevention: NFKC Unicode normalization, bidi control character stripping, zero-width character removal, null byte rejection, URL double-encoding defense
• Input Validation: GUID validation on all IDs, field list validation, environment ID format checks, SharePoint hostname allowlist
• Injection Prevention: Power Automate expression injection blocking (@{/}@), command injection prevention (execFile over exec), prototype pollution defense
• Error Sanitization: Recursive sensitive key redaction (tokens, passwords, secrets), PII removal, stack trace suppression
• Log Redaction: Deep wildcard Pino redaction for auth headers, tokens, API keys
• HTTP Transport Security: Localhost-only binding, session-based Streamable HTTP, timing-safe API key comparison
• Resource Limits: 2MB input size limit, 20-level depth limit, 50MB JSON response limit, 100MB binary download limit
• Config Hardening: File permissions (0o600), symlink rejection, world-readable warnings
• Auth Safety: Token refresh mutex, MSAL PII filtering, MSAL verbose/trace suppression, silent-only mode in server

↑ Back to top

Architecture

AI Client <--stdio/http--> powerautomate-mcp
(Claude, VS Code,               |
 Cursor, Gemini)                 ├── Power Automate Flow Management API
                                 ├── Power Apps API (canvas/model-driven apps)
                                 ├── Power Platform Admin API (environments, DLP, capacity)
                                 ├── Microsoft Graph API (SharePoint, OneDrive, Excel)
                                 ├── Dataverse Web API (tables, rows, solutions)
                                 ├── MSAL Auth (browser popup / device code)
                                 ├── SQLite Schema Cache (400+ connectors)
                                 └── Secure Token Storage (OS keychain)

License

MIT

A Note of Thanks

Thank you for using this project — it is truly appreciated. Every install, bug report, and suggestion makes this a better tool, and I'm committed to fixing any issue that arises so we have the best Power Automate MCP server possible. If something isn't working for you, please open an issue. I read every one, and a solid reproduction gets a fast fix.

Support

For issues and feature requests, please open an issue in this repository. Upgrading? See Updating safely and the Changelog.