codeurali/mcp-dataverse

**An MCP server for Microsoft Dataverse.**
100 tools · 4 resources · 5 guided workflows · Three auth modes
**→ Full Documentation**
---
---
Why MCP Dataverse?
AI agents hallucinate schema, guess column names, and build broken OData queries. This server gives them **real-time access** to your Dataverse environment — schema, records, metadata, solutions — through the Model Context Protocol.
- **Three auth modes** — device code (local), client credentials (CI/CD), managed identity (Azure-hosted)
- **Works with any MCP client** — VS Code, Claude, Cursor, Windsurf, Gemini, Codex CLI
- **Atomic tools** — each tool does one thing well; the AI picks the right one
- **Structured outputs** — every response returns {summary, data, suggestions} as both text and MCP structuredContent (with a declared outputSchema on all core tools)
- **Guardrails** — every tool declares read-only or destructive hints, and the riskiest operations require an explicit confirm: true
- **Encrypted token cache** — AES-256-GCM cached credentials, kept out of tool output
---
Install
The interactive wizard configures your environment, registers the server in VS Code, and authenticates your Microsoft account in under 2 minutes.
> Requires Node.js 20+. For other clients (Claude, Cursor, Windsurf…) see Multi-Client Setup.
Update
No re-config required — just checks your existing setup and shows what changed. npx auto-fetches the latest version on each run, so simply restarting your MCP client is enough to get the new tools.
---
Authentication
Three modes — choose based on where the server runs:
| Mode | When to use |
| :------------------------ | :------------------------------------------------------------------------------------------------ |
| **Device Code** (default) | Local development — interactive Microsoft login, token cached on disk |
| **Client Credentials** | Unattended: CI/CD, Docker, Azure services — authMethod: "client-credentials" + App Registration |
| **Managed Identity** | Azure-hosted (App Service, Container Apps) — zero secrets, authMethod: "managed-identity" |
**Device code quick start:** authentication triggers on the first tool call.
1. Open View → Output → MCP — a sign-in code appears
2. Go to https://microsoft.com/devicelogin, enter the code, sign in with your work account
3. Token is cached encrypted — all future starts are silent
For client credentials and managed identity setup, see Authentication docs.
---
Capabilities
| Category | Count | Description |
| ----------------------- | ----- | --------------------------------------------------------------------- |
| **Metadata** | 9 | Tables, schema, relationships, option sets, entity keys |
| **Query** | 3 | OData, FetchXML, paginated retrieval |
| **CRUD** | 6 | Get, create, update, delete, upsert, assign |
| **Relations** | 4 | Associate, associate bulk, disassociate, query associations |
| **Actions & Functions** | 6 | Bound/unbound Dataverse actions and functions |
| **Batch** | 1 | Up to 1000 operations atomically |
| **Solutions** | 2 | Publish customizations, create sitemap |
| **Search** | 1 | Full-text Relevance Search |
| **Users & Teams** | 4 | Users, roles, teams, role assignment |
| **RBAC** | 7 | Role privileges: list, assign, remove, add, replace, get, team |