MCP Dataverse Server

MCP server that exposes the Microsoft Dataverse Web API as 50 AI-callable tools — enabling GitHub Copilot, Claude, and other MCP clients to query, create, and manage Dataverse records without hallucinating schema.

Install

One-click (VS Code)

VS Code will prompt for your Dataverse URL, auth mode, and PAC profile during installation.

Command line

# VS Code
code --add-mcp '{"name":"dataverse","type":"stdio","command":"npx","args":["-y","mcp-dataverse"],"env":{"DATAVERSE_ENV_URL":"https://yourorg.crm.dynamics.com","AUTH_MODE":"pac"}}'

# VS Code Insiders
code-insiders --add-mcp '{"name":"dataverse","type":"stdio","command":"npx","args":["-y","mcp-dataverse"],"env":{"DATAVERSE_ENV_URL":"https://yourorg.crm.dynamics.com","AUTH_MODE":"pac"}}'

Replace https://yourorg.crm.dynamics.com with your actual Dataverse environment URL.

Manual (mcp.json)

Add to your .vscode/mcp.json (or user settings):

{
  "servers": {
    "dataverse": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "mcp-dataverse"],
      "env": {
        "DATAVERSE_ENV_URL": "https://yourorg.crm.dynamics.com",
        "AUTH_MODE": "pac"
      }
    }
  }
}

Prerequisites

• Node.js 20+
• PAC CLI installed & authenticated → aka.ms/PowerAppsCLI
• VS Code + GitHub Copilot (Agent mode)

Quick Start (< 5 min)

1. Clone & install

git clone <repo-url> mcp-dataverse && cd mcp-dataverse
npm install

2. Configure

cp config.example.json config.json

Edit config.json:

3. Authenticate

npm run auth:setup

Runs device code authentication. Follow the URL printed to the terminal — sign in with your Power Platform account. Token is cached in .msal-cache.json for silent reuse.

Only required for authMode: "pac". Skip if PAC CLI (pac auth create) is already authenticated.

4. Build

npm run build

5. Verify the connection

npx tsx tests/live/test-whoami.ts

Expected output:

WhoAmI result: { UserId: 'xxxxxxxx-...', BusinessUnitId: 'xxxxxxxx-...', OrganizationId: 'xxxxxxxx-...' }

6. Configure VS Code

.vscode/mcp.json is already present in this repo. If you need to add it manually:

{
  "servers": {
    "dataverse": {
      "type": "stdio",
      "command": "node",
      "args": ["${workspaceFolder}/dist/server.js"],
      "env": {}
    }
  }
}

1. Restart VS Code
2. Open GitHub Copilot chat → switch to Agent mode (⚡)
3. Test: "List the Dataverse tables in my environment"

Tools (50)

Advanced Configuration (MSAL)

For service-principal auth (CI/CD, unattended), set authMode: "msal" in config.json:

{
  "environmentUrl": "https://yourorg.crm.dynamics.com",
  "authMode": "msal",
  "tenantId": "<azure-ad-tenant-id>",
  "clientId": "<app-registration-client-id>",
  "clientSecret": "<client-secret>"
}

The app registration must have the Dynamics CRM → user_impersonation API permission and the corresponding Dataverse security role.

Scripts

Architecture

TypeScript MCP server over stdio transport. An AuthProvider (PAC CLI or MSAL) injects Bearer tokens into a native-fetch-based HttpClient wrapped by DataverseClient. Each tool module registers handlers with the MCP Server instance.

GitHub Copilot → stdio → MCP Server → Tool Router → DataverseClient → Dataverse Web API v9.2
                                                           └── AuthProvider (PAC CLI | MSAL)

Security

• Never commit config.json or .msal-cache.json — both are in .gitignore
• Tokens are never logged; only diagnostic messages are written to stderr
• PAC CLI tokens are scoped to the authenticated user — no privilege escalation
• Service principal (msal) should be assigned the least-privilege Dataverse security role

Troubleshooting