Dynamics 365 Business Central MCP

Microsoft ships an MCP server for Dynamics 365 Business Central that exposes the ERP's API surface to an AI agent, so an assistant can work with the business data an organization actually runs on: customers and vendors, items and inventory, sales and purchase orders, invoices, and the general ledger entries behind them. It builds on Business Central's existing web services rather than a parallel interface, which means the same entities, the same fields and the same validation rules apply to an agent call as to a person working in the client. Permissions are the important part. The server operates under an authenticated Business Central user and the permission sets assigned to it, and administrators control which environments and which API pages are reachable, so an agent cannot read a company or post an entry the underlying account is not entitled to. Beyond transactional data, an admin-facing surface covers environments and tenant configuration for the operations side of running Business Central. It is built for partners and internal teams working on Business Central: AL developers who want an agent that understands the tenant's real schema including custom extensions, finance and operations staff asking questions of live ERP data, and administrators managing environments. Turning it on is a deliberate per-environment configuration step rather than a default, which keeps the exposure explicit.