Power Automate MCP Server

An MCP (Model Context Protocol) server for Microsoft Power Automate. Create, manage, and deploy Power Automate flows using natural language.

Works with any MCP-compatible AI client: Claude Desktop, Claude Code, VS Code Copilot, Cursor, Google Gemini CLI, and more.

Features

• Create Flows - Build flows from natural language descriptions with guided wizard
• Test & Debug - Automatic testing with intelligent error diagnosis
• Validate - Pre-flight checks with best practices scoring (0-100)
• Manage Flows - List, update, clone, and delete flows
• Power Apps - Manage canvas and model-driven apps, permissions, versions
• Environment Admin - Create, copy, backup, restore environments
• DLP Policies - Create and manage data loss prevention policies
• Solutions ALM - Export, import, and manage Dataverse solutions
• Dataverse CRUD - Full table/row operations via OData Web API
• SharePoint - Sites, lists, items, and files via Microsoft Graph
• Expression Help - Interactive Power Automate expression reference
• Connector Intelligence - Full knowledge of 400+ connectors and schemas
• Cross-Platform - Works on Windows, macOS, and Linux

Quick Start

npm install -g powerautomate-mcp
powerautomate-mcp --setup

The setup wizard handles everything automatically:

1. Creates the app registration in your tenant via Azure CLI (or prompts you to provide one)
2. Opens your browser to sign in
3. Presents the admin consent URL (auto-opens in browser)
4. Discovers your environments and lets you select one
5. Saves your configuration

Then configure your AI client. See the Installation Guide for platform-specific setup:

Microsoft Entra App Registration

The setup wizard (--setup) creates the app registration automatically if you have Azure CLI installed. No manual steps required for most users.

Who Needs to Do What?

Tip: You can also set PA_MCP_CLIENT_ID as an environment variable to skip the prompt entirely.

Admin Consent

The setup wizard presents the admin consent URL and auto-opens it in your browser. Any of these Entra ID roles can grant consent: Global Administrator, Application Administrator, Cloud Application Administrator, or Privileged Role Administrator. If you don't have one of these roles, share the URL with your admin:

https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id=YOUR_CLIENT_ID

Manual Setup (Optional)

If you prefer to create the app registration manually:

1. Go to Azure Portal > Microsoft Entra ID > App registrations > New registration

2. Configure basic settings:

   • Name: Power Automate MCP
   • Supported account types: Accounts in any organizational directory (multi-tenant)
   • Redirect URI: Select "Public client/native" and enter:

     https://login.microsoftonline.com/common/oauth2/nativeclient
     

3. After creation, go to Authentication and enable:

   • Allow public client flows: Yes

4. Go to API permissions > Add a permission and add:

   API	Permission	Type	Used For
   Microsoft Graph	User.Read	Delegated	User profile
   Microsoft Graph	Sites.ReadWrite.All	Delegated	SharePoint sites, lists, files
   Microsoft Graph	Files.ReadWrite.All	Delegated	OneDrive/SharePoint file operations
   Power Automate (Flow Service)	Flows.Read.All	Delegated	Read flows
   Power Automate (Flow Service)	Flows.Manage.All	Delegated	Create/update/delete flows
   Power Automate (Flow Service)	Activity.Read.All	Delegated	Flow run history
   Power Automate (Flow Service)	Approvals.Manage.All	Delegated	Approval management
   Dynamics CRM	user_impersonation	Delegated	Dataverse table/row CRUD

5. Click Grant admin consent for [Your Tenant] (requires Global Admin, Application Admin, Cloud Application Admin, or Privileged Role Admin)

CLI Reference

powerautomate-mcp [options]

Environment Variables:

Usage Examples

Flows

Create a flow that sends me an email every morning with the weather forecast

Test my "Daily Report" flow and tell me if there are any errors

Help me write an expression to format a date as "January 1, 2024"

Show me all the flows that have been shared with me

Patch the "Compose" action inside the Default case of "If_Recognized_Form" — only that one node, leave the rest alone

SharePoint

List all items in the "Projects" list on our Marketing site

Upload this month's report to the Shared Documents library

Dataverse

Show me all active accounts in Dataverse with revenue over $1M

Create a new contact row for John Smith in the contacts table

Power Apps

List all canvas apps in my environment and who owns them

Share the "Expense Tracker" app with the Finance team

Administration (requires Power Platform Admin, Dynamics 365 Admin, or Global Admin)

Create a new sandbox environment called "Dev Testing"

What DLP policies are applied to my default environment?

Export the "Sales Solution" as a managed solution for deployment

Connectors & Expressions

What connectors are available for working with SharePoint?

What parameters does the "Send an email (V2)" action need?

Available Tools (108 total)

Core Flow Operations

Testing & Debugging

Planning & Help

Dataverse CRUD

SharePoint

Power Apps

Environment Administration

Requires Power Platform Admin, Dynamics 365 Admin, or Global Admin role.

DLP Policies

Requires Power Platform Admin, Dynamics 365 Admin, or Global Admin role.

Solutions ALM

Managed Environments & Capacity

Requires Power Platform Admin, Dynamics 365 Admin, or Global Admin role.

Security

This server implements defense-in-depth security hardened through 3 rounds of penetration testing:

• Secure Token Storage: DPAPI (Windows), Keychain (macOS), libsecret on Linux when available, with a 0o600 file-cache fallback when it is not
• SSRF Prevention: Comprehensive private host detection covering IPv4, IPv6, IPv6-mapped/compatible IPv4, octal/hex/decimal notation, ULA, link-local ranges, domain allowlists
• OData Injection Protection: Tautology detection across all comparison operators, parenthesized forms, arithmetic/function-based bypasses, Unicode NFC normalization, ASCII-only enforcement
• Path Traversal Prevention: NFKC Unicode normalization, bidi control character stripping, zero-width character removal, null byte rejection, URL double-encoding defense
• Input Validation: GUID validation on all IDs, field list validation, environment ID format checks, SharePoint hostname allowlist
• Injection Prevention: Power Automate expression injection blocking (@{/}@), command injection prevention (execFile over exec), prototype pollution defense
• Error Sanitization: Recursive sensitive key redaction (tokens, passwords, secrets), PII removal, stack trace suppression
• Log Redaction: Deep wildcard Pino redaction for auth headers, tokens, API keys
• HTTP Transport Security: Localhost-only binding, session-based Streamable HTTP, timing-safe API key comparison
• Resource Limits: 2MB input size limit, 20-level depth limit, 50MB JSON response limit, 100MB binary download limit
• Config Hardening: File permissions (0o600), symlink rejection, world-readable warnings
• Auth Safety: Token refresh mutex, MSAL PII filtering, MSAL verbose/trace suppression, silent-only mode in server

Architecture

AI Client <--stdio/http--> powerautomate-mcp
(Claude, VS Code,               |
 Cursor, Gemini)                 ├── Power Automate Flow Management API
                                 ├── Power Apps API (canvas/model-driven apps)
                                 ├── Power Platform Admin API (environments, DLP, capacity)
                                 ├── Microsoft Graph API (SharePoint, OneDrive, Excel)
                                 ├── Dataverse Web API (tables, rows, solutions)
                                 ├── MSAL Auth (browser popup / device code)
                                 ├── SQLite Schema Cache (400+ connectors)
                                 └── Secure Token Storage (OS keychain)

License

MIT

A Note of Thanks

Thank you for using this project — it is truly appreciated. Every install, bug report, and suggestion makes this a better tool, and I'm committed to fixing any issue that arises so we have the best Power Automate MCP server possible. If something isn't working for you, please open an issue. I read every one, and a solid reproduction gets a fast fix.

Support

For issues and feature requests, please open an issue in this repository.