What is the Model Context Protocol (MCP) in the Microsoft world?
The Model Context Protocol (MCP) is an open standard that describes how applications provide context and tools to a Large Language Model (LLM). MCP was originally developed as an open-source protocol to uniformly connect AI applications to external systems, rather than implementing a separate integration logic for each use case. In the Microsoft world, MCP is used for exactly this purpose: as a technical bridge between agents and systems such as Dynamics 365, Microsoft 365, or Windows.
In Dynamics 365, this means an agent does not interact directly with the ERP but instead via an MCP server. This server defines which data sources and actions are accessible and under which permissions they may be used. Microsoft positions the MCP server as a kind of “standard connector” for agents which are intended to work productively within the ERP.
The MCP server in practice
MCP with Dynamics 365
The Dynamics 365 ERP MCP server, provided by Microsoft, enables AI agents to access data and business logic in Microsoft Dynamics 365 Finance and Operations. Via this server, AI agents can perform data operations and access business logic within the scope of existing permissions, with auditability across all integrations. You can find an overview of possible use cases for AI agents in our blog article MCP Dynamics 365 Use Cases: Use cases for AI agents in ERP.
Key points from Microsoft’s current MCP classification
Preview status
The Dynamics 365 ERP MCP server is currently in preview status and must be explicitly activated and configured in your Finance and Operations apps (e.g., Dynamics 365 Finance, Dynamics 365 Supply Chain Management).
From static to dynamic server
Microsoft is developing the MCP server from a former “static” approach with a fixed toolset toward a dynamic server that can access a much broader range of ERP functionality. The static server will be phased out in the future. For new scenarios, you should therefore focus directly on the dynamic approach.
MCP for analytics
In addition, Microsoft provides a separate Dynamics 365 ERP MCP Server for Analytics, which applies the same principles to analyses in the included Business Performance Analytics and is currently in private preview.
Integration with Copilot Studio
The ERP MCP server can be integrated into Microsoft Copilot Studio as a tool. This allows you to set up agents that access data and perform actions in your Finance and Operations apps via MCP, controlled by your existing security and permissions model.
- For companies, this means:
MCP is not a theoretical concept, but a concrete – and still growing – building block of the Microsoft ERP platform. Companies that get started today can pilot initial use cases while simultaneously preparing strategically for the next generation of agents in the Dynamics 365 environment.
The six standard agents
In Dynamics 365 ERP and Service
Several preconfigured standard agents are already available in Microsoft Dynamics 365. These include:
- Account Reconciliation Agent for Dynamics 365 Finance: This agent detects exceptions in account reconciliation and provides resolution recommendations.
- Supplier Communications Agent for Dynamics 365 Supply Chain Management: The agent automates supplier communication relating to purchase orders and delivery dates.
- Time Entry Agent for Dynamics 365 Project Operations: The agent proposes time entry records and triggers corresponding flows.
- Expense Agent: This agent supports the processing of receipts and expense reports.
- Approvals Agent: The agent checks time, expense, and material entries against stored policies and prepares them for approval.
- Scheduling Operations Agent in Dynamics 365 Field Service: This agent optimizes field technician schedules.
These agents demonstrate very clearly how Microsoft is anchoring the topic of “Agentic AI” in standard functionality, and they form a solid foundation for developing your own, company-specific agents based on the MCP server.
Security and governance
The difference between "can" and "may"
The closer AI agents get to productive processes, the more important clear guardrails become. With MCP, a great deal is technically possible in Dynamics 365; from a business perspective, however, the key question is what an agent is allowed to do and how well this remains traceable.
The MCP server uses the existing Finance and Operations apps security model. This means that the familiar roles, permissions, and audit functions also apply to agents. Nevertheless, companies should consciously define in which scenarios an agent merely makes suggestions, in which it may independently carry out actions, and where a human-in-the-loop is mandatory.
Our recommendation: start with clearly defined processes, build experience and trust, and then gradually increase automation.
Start your MCP project with us
How we help you get started with MCP and Dynamics 365 in your company
A sensible entry into MCP and Dynamics 365 rarely starts with the technology; it starts with the process. In the first step, we conduct a focused initial assessment: where do teams currently spend a lot of time on recurring ERP tasks? Data research or manual reconciliation? Where is the business framework so clearly defined that an agent can provide effective support?
In the second step, we jointly review the technical prerequisites: the versions and configurations of your Finance and Operations apps, the activation of the ERP MCP server, approval of the desired agent platforms, and security requirements.
In the third step, we jointly tailor a specific use case so that it can be cleanly mapped via the MCP server. For example, we connect the server to Copilot Studio and define the necessary control points. This is followed by a test-and-learn cycle in a clearly defined area, before we discuss scaling with you.
Agentic Readiness Check
Are you ready to use AI agents? In our free Agentic Readiness Check, you can find out whether your company meets the technical and organizational requirements for using agentic AI.
- Fast, well-founded analysis of your status quo.
- Individual assessment: where do AI agents really make sense for you?
- Concrete roadmap from quick wins to long-term measures.
The important points at a glance
What is MCP in one sentence?
MCP stands for Model Context Protocol. In the Microsoft D365 world, it enables AI agents to interact with Dynamics 365 data and functions in a standardized, secure way.
What technical requirements do I need to use MCP with Dynamics 365?
You need a supported version of Dynamics 365 Finance and Operations that can activate and configure the ERP MCP server. In addition, identity and permission concepts should be properly set up, and, if you use Copilot Studio, the generative orchestration and the desired agent platform should be enabled. We review these points together with you as part of an initial or pilot project.
What does MCP with Dynamics 365 cost?
The specific cost structure can change. In principle, it can be assumed that, in addition to your Dynamics 365 licenses, usage-based costs for AI services will be incurred (e.g., for prompts and agent tool calls). For this reason, we deliberately do not make blanket price statements; instead, we help you create a realistic cost estimate based on your scenarios and the current Microsoft terms and conditions.
Is MCP already "ready for production"?
The Dynamics 365 ERP MCP Server is currently classified as a preview. Many use cases are already well-suited for pilot projects or controlled, production-grade operations with clear guardrails – especially if we start with read-only scenarios and human-in-the-loop. We recommend initially gaining experience in low-risk areas before gradually expanding MCP use.
How does MCP differ from classic integrations or Power Automate?
Power Automate and classic integrations primarily serve to map defined data flows and workflows: “If A happens, do B.” MCP is a protocol that is explicitly designed for AI agents. An AI agent can use MCP to dynamically determine which resources and actions it currently needs and address them via the MCP server, always within the ERP security model. Power Automate and MCP therefore complement each other rather than replacing one another.
Specifically, how do I get started with MCP in Dynamics 365?
Our typical entry consists of three steps:
- Selection of use cases: Together, we identify one or two processes that involve a lot of manual routine work, and that can be easily delimited.
- Technical check: We check versions, configurations, security, and the options for integrating the ERP MCP server and, if necessary, Copilot Studio.
- Pilot implementation: We break down the use case into MCP tools and agents, define checkpoints (e.g., approvals by specialist departments), and support you through testing, go-live, and lessons learned.
