MCP Guard

MCP Guard is an extension for Microsoft Dynamics 365 Business Central that governs what an AI assistant does on behalf of each user. In MCP Guard, an administrator decides, per user or per security group, which companies the assistant may use, which MCP configuration the user gets, which access level applies to the extension's own API pages and to the rest of Business Central, and how many calls the assistant may make in a day. MCP Guard works together with the BC MCP Pro connector, which is available separately. The connector links Claude, ChatGPT and Microsoft 365 Copilot to Business Central and applies the rule. The extension's API pages work with any MCP client that connects to the MCP server of Business Central.

The extension also adds API pages that Business Central lacks for writing: production orders with their lines and operations, the planning worksheet and the capacity calendar, assembly orders, and project tasks and project planning lines.

Business Central remains the enforcer. Every call runs with the signed-in user's own permissions, security filters and licence. Nothing the extension returns widens what a user can do.

What you can do

Make a rule per user or per security group on the MCP Guard User Settings page.
Limit the companies an AI assistant may use, and choose the company the connection opens in.
Give each user or group its own MCP configuration.
Set an access level per module (production, planning, assembly, projects): Read, Modify, Create and Actions or Posting.
Set a general access level for everything outside the extension's own API pages.
Set a daily limit on the calls of the AI assistant and on the calls that change something.
See per user and per assistant how many calls were made, refused or failed.
Find every number and page an administrator needs on the MCP Guard Administration page.
Let each user switch the AI assistant off for themselves in a sandbox environment, on the My MCP Guard page.
Let an MCP client ask, with one call, which API pages the signed-in user may read, insert, modify, delete and execute.
Let an AI assistant create, change and delete production orders, calculate a plan, work with assembly orders, and create project tasks and project planning lines.

Before you start

The extension requires Business Central online, 2026 release wave 1 (version 28) or later. It has no dependencies besides the base application.

MCP Guard is licensed per user through Microsoft Marketplace. An administrator assigns the licences in the Microsoft 365 admin center. In a production environment, every user of MCP Guard needs a licence. See Assign Licences.

You assign two permission sets of the app: MCP GUARD - USER to every user of an AI assistant and MCP GUARD - ADMIN to the administrators. They grant access to the extension's objects only and nothing on business data, so each user still needs the Business Central permissions for the data they work with. See Permission Sets.

Get started

To do this	Go here
Install the app and give users access	Install the MCP Guard Extension
Assign licences to users	Assign Licences
Decide who may do what	Set Up Rules per User and Security Group
Limit the companies an assistant may use	Environments and Companies
Give a user a specific MCP configuration	MCP Configurations
Let a planner write and others only read	Access Levels per Module
Limit what the assistant may do on Business Central's standard pages	General Access
Brake an assistant that makes too many calls	Daily Limits
See how often each user's assistant called Business Central	Usage per User
Find the administrator's pages in one place	The MCP Guard Administration Page
Switch the assistant off for yourself in a sandbox	Switch the AI Assistant On or Off in a Sandbox
Connect an AI assistant	Connect with the BC MCP Pro Connector
Solve a problem	Troubleshoot Rules and Licences

The API pages

API group	What it offers	Article
`mcpguard`	The signed-in user's verdicts per API page (`effectivePermissions`), the rule that applies to the user (`mcpUserSettings`), and usage (`mcpUsageEntries`, `mcpUsageTotals`)	Effective Permissions API, Connect with the BC MCP Pro Connector and Usage per User
`production`	Production orders, lines, operations, capacity load, work centers, planning worksheets and planning lines	Production API and Planning and Assembly API
`assembly`	Assembly orders and assembly lines	Planning and Assembly API
`projects`	Project tasks and project planning lines	Projects API

All API pages are published under the API publisher vangelderSolutions. Only a production order can be deleted through them. Nothing else is deleted through any of them.

Supported countries and languages