Usage per User
MCP Guard can keep how often each user's AI assistant called Microsoft Dynamics 365 Business Central. The BC MCP Pro connector reports the calls, and the MCP Guard extension keeps day totals. It keeps no prompt, no action name and no record content. You see the totals on the MCP Guard Usage Overview and MCP Guard Usage pages, and through an API page for reports.
The usage counts calls, not cost. For Microsoft 365 Copilot, the credits are in the Microsoft 365 admin center under Reports > Usage > Copilot.
Before you start
- The connector decides whether it reports. Reporting is off until the connector is told to report. It needs the BC MCP Pro cloud connector, version 0.12.0 or later. Without reporting, the usage stays empty.
- You need the permission set MCP GUARD - ADMIN to see the usage.
What a usage line holds
There is one line per day, user, assistant, kind of call and result.
| Field | Meaning |
|---|---|
| Date | The day the calls were made. |
| User Name | The user whose AI assistant made the calls. |
| Assistant | The AI assistant the user worked in, such as Claude, ChatGPT or Copilot. |
| Kind | What the calls did: Discovery (looking up which actions exist), Read, Modify, Create and Actions or Posting. |
| Result | How the calls ended: Succeeded, Refused or Failed. Refused means the rule of the user did not allow the action. Failed is every other error, Business Central's permission errors included. |
| Calls | The number of calls. |
| Duration (ms) | The total time the calls took, in milliseconds. |
| Last Call At | When the connector last reported calls on this line. |
The lines are shared by all companies of the environment, like the rules.
See the usage per user and assistant
- Choose the search icon (Tell Me), enter MCP Guard Usage Overview, and then choose the related link.
- The page opens on the last 30 days. To change the period, choose Today, Last 7 Days, Last 30 Days or All, or filter on Date Filter.
- To see the days behind a number, choose the number. To see all days of a line, choose Days.
The page has one line per user and assistant with calls in the period.
| Column | Shows |
|---|---|
| Calls | All calls in the period, whatever they did and however they ended. |
| Lookups and Reads | The calls that looked up actions or read data. |
| Changes | The calls that modified, created or posted something, or tried to. |
| Refused | The calls that the rule of the user did not allow. |
| Failed | The calls that ended in an error other than a refusal. |
| Average Duration (ms) | How long a call took on average, in milliseconds. |
| Last Call At | When the connector last reported calls of this user and assistant in the period. |
See the lines per day
Choose the search icon (Tell Me), enter MCP Guard Usage, and then choose the related link. The page shows the usage lines, the newest day first. It is read-only.
Use the usage in a report or a workbook
The mcpUsageTotals API page returns the same lines as the MCP Guard Usage page.
GET https://api.businesscentral.dynamics.com/v2.0/{environment}/api/vangelderSolutions/mcpguard/v1.0/companies({companyId})/mcpUsageTotals
The fields are id, usageDate, userSecurityId, userName, assistant, kind, result, calls, durationMs and lastCallAt. The page is read-only, and only a user with MCP GUARD - ADMIN can read it.
How the usage gets there
The connector sends the calls to the mcpUsageEntries API page with usageDate, assistant, kind, result, calls and durationMs. Each report is added to the day total of the signed-in user. The connector calls Business Central as the user, so a user can report more calls of their own than they made, but never calls of someone else.
The extension refuses a report:
- For a day other than today. One day before or after today is accepted, for time zones.
- With fewer than 1 or more than 10,000 calls.
- With a negative duration.
- Without an assistant.
The licence rule is the same as for reading the rule: a user without a licence can report usage only in a sandbox environment where a rule applies to them. See Assign Licences.
An audit trail
Nobody changes or deletes a usage line by hand. The pages are read-only, and MCP GUARD - ADMIN has no direct delete permission on the lines. Only the retention policy removes them. A user with the SUPER permission set can do anything in Business Central, as always.
How long the usage is kept
The usage is kept for one year. When the extension is installed or upgraded, it adds a retention policy for MCP Guard Usage to Business Central's Retention Policies in every company, switched on. A policy that already exists is left as it is.
The usage lines are shared by the companies, so the policy job of one company is enough. You can choose another period on the policy or switch the policy off. You cannot choose a period shorter than 90 days.
- Choose the search icon (Tell Me), enter MCP Guard Administration, and then choose the related link.
- Choose the Retention Policy action.
- Change the Retention Period, or switch the policy off.
Important
The job that applies the retention policies must run as a user with the permission set MCP GUARD - ADMIN or SUPER. Otherwise the old usage lines are not deleted.
Privacy
Usage per person is personal data. The user name is classified as EndUserIdentifiableInformation and the user's security ID as EndUserPseudonymousIdentifiers.