MCP Configurations
An MCP configuration in Microsoft Dynamics 365 Business Central decides which tools an AI assistant gets and whether it may write. An MCP configuration cannot be restricted per user. With MCP Guard you name a configuration on the rule of a user or a security group, so that one group gets a read-only configuration and another a configuration with edit tools.
Before you start
- Create the configurations on the MCP Server Configurations page in each environment users work in, and switch Active on. It is off by default.
- You need the permission set MCP GUARD - ADMIN and an MCP Guard licence to change a rule.
Give a user or group a configuration
- Choose the search icon (Tell Me), enter MCP Guard User Settings, and then choose the related link.
- On the line of the user or security group, enter the name of the configuration in the MCP Configuration field.
- To see the configurations of the environment, choose the value in the field. The list of MCP configurations opens.
Leave the MCP Configuration field empty to use the default configuration of the environment. Business Central checks the name when you enter it. A name that does not exist is refused.
Add the API pages of the extension to a configuration
An MCP client only gets a tool for an API page that the configuration exposes.
| Page or query | Number | Operations it supports |
|---|---|---|
| MCP Guard Eff. Permissions | 73633175 | Read |
| MCP Guard Prod. Orders API | 73633181 | Read, Create, Modify, Delete, Actions |
| MCP Guard Prod. Lines API | 73633182 | Read, Modify |
| MCP Guard Prod. Routing API | 73633183 | Read, Modify |
| MCP Guard Capacity Loads (query) | 73633175 | Read |
| MCP Guard Work Centers API | 73633184 | Read, Actions |
| MCP Guard Planning Wksh. API | 73633185 | Read, Actions |
| MCP Guard Planning Lines API | 73633186 | Read, Modify |
| MCP Guard Asm. Orders API | 73633187 | Read, Create, Modify, Actions |
| MCP Guard Asm. Lines API | 73633188 | Read, Modify |
| MCP Guard Project Tasks API | 73633189 | Read, Create, Modify |
| MCP Guard Proj. Plan Lines API | 73633190 | Read, Create, Modify |
Four settings decide what works.
- Allow Read on the page MCP Guard Eff. Permissions lets the MCP client read the user's effective permissions. As an alternative, turn on Discover Additional Objects for dynamic tool mode.
- Unblock Edit Tools must be turned on in the configuration before anything can be written. Without it, only Read works.
- Delete is offered only on the page MCP Guard Prod. Orders API. Turn it on there to let an AI assistant delete production orders. See Production API.
- Allow Actions is set per page. All actions of a page go on or off together. For assembly orders that means release, reopen and post. To let an AI assistant prepare assembly orders without posting them, use a configuration without Allow Actions on the assembly orders page.
A configuration is a menu, not a permission
What a configuration exposes is only what the AI assistant is offered. Business Central permission sets still decide what each user may read or change, and the access level of the user's MCP Guard rule decides what the user may do through the extension's own API pages. For the other pages, the rule's General Access limits what the AI assistant may do. See General Access.
The configuration that a rule names is applied by the connector. A user who connects with another MCP client can choose another configuration. To keep a user away from data, use permission sets, not a configuration alone.