Zentriq Agent is live on Microsoft AppSourceInstall it free →Microsoft AppSourceInstall it free →
Get started free
ProductsAgentDocument CapturePunchOutClaude & ChatGPTResourcesDocsPricingBlogHow-to GuidesUse CasesGlossaryFAQCustom DevelopmentAboutContactSign in
MCP in Business Central

The Microsoft Business Central MCP server, explained

Last updated August 2026. This guide is refreshed as Microsoft's MCP features evolve.

Microsoft ships an official MCP server for Dynamics 365 Business Central, introduced in the 2025 release wave 2 (Business Central 27.1). It lets AI clients such as Copilot Studio, VS Code with GitHub Copilot, Claude, ChatGPT, and custom agents work with Business Central through the Model Context Protocol. By default the server is read-only over the exposed API pages; administrators can enable write operations per API page.

What the Business Central MCP server is and what it can do

The official MCP server is part of the Business Central platform. It exposes the Business Central API pages you configure to any MCP-compatible AI client, so an agent can query your ERP and, if you allow it, change data through those APIs.

  • Official and included: shipped by Microsoft with the 2025 release wave 2 (Business Central 27.1), no third-party license required.
  • Works with many AI clients: Copilot Studio, VS Code with GitHub Copilot, Claude, ChatGPT, and custom agents. Microsoft clients such as VS Code and Copilot Studio connect through a pre-registered Entra application.
  • Read-only by default: out of the box the server only reads data through the API pages you expose. Nothing can be changed until an administrator opts in.
  • Per-page write configuration: administrators can enable create, modify, delete, and bound actions for each exposed API page. A separate MCP server for the admin center API is also available in preview.

How to set it up, at a high level

Setup happens in Business Central and in your AI client. The authoritative step-by-step instructions live on Microsoft Learn; the path looks like this:

  • Enable the MCP server in your Business Central environment (version 27.1 of the 2025 release wave 2 or later).
  • Configure API pages and operations: choose which API pages are exposed and, per page, whether create, modify, delete, or bound actions are allowed. The default stays read-only.
  • Connect your AI client: Copilot Studio and VS Code use a pre-registered Entra application; other MCP clients such as Claude, ChatGPT, or a custom agent connect as described on Microsoft Learn.

Official MCP server or a curated connector?

Both options are legitimate, and many setups use both. Microsoft's server is official, free with Business Central, and exposes the raw API surface you configure, which makes it a strong developer and integration tool. What it does not provide out of the box is a curated safe-write layer: once writes are enabled, the agent writes through the APIs directly under the configured permissions, with no built-in propose, review, and approve flow for documents. Zentriq Connect is a third-party MCP connector that takes the opposite approach: typed, scoped tools where every write lands as a draft reviewed by a person inside Business Central, plus OAuth consent flows designed for business users rather than admin configuration. Developers and integrators may prefer the official server; finance teams that want approval-gated writes without configuring API permissions may prefer a curated connector. For the full picture, see our detailed MCP connector guide.

Frequently asked questions

Does Microsoft have an official MCP server for Business Central?

Yes. Microsoft ships an official Business Central MCP server with the 2025 release wave 2 (Business Central 27.1). It lets MCP-compatible AI clients such as Copilot Studio, VS Code with GitHub Copilot, Claude, ChatGPT, and custom agents access Business Central through the API pages you expose.

Is the Business Central MCP server read-only?

By default, yes. Out of the box it only reads data through the exposed API pages. Administrators can enable write operations per API page: create, modify, delete, and bound actions. Once enabled, the agent writes through the APIs directly under the configured permissions.

How is Zentriq Connect different from Microsoft's MCP server?

Microsoft's server is official, free with Business Central, and exposes the raw API surface you configure, which suits developers and integrators. Zentriq Connect is a third-party MCP connector with typed, scoped tools where every write lands as a draft that a person reviews inside Business Central, aimed at finance teams that want approval-gated writes without configuring API permissions. Many setups use both.

Which AI clients can connect to the Business Central MCP server?

Copilot Studio, VS Code with GitHub Copilot, Claude, ChatGPT, and custom agents that support the Model Context Protocol. Microsoft clients such as VS Code and Copilot Studio connect through a pre-registered Entra application; see Microsoft Learn for the current client list and setup details.

Related setup guides: connect Claude to Business Central and connect ChatGPT to Business Central.

Want approval-gated writes on top of MCP?

Zentriq Connect adds a curated safe-write layer for Business Central: every write lands as a draft you review inside BC before anything changes. It can run alongside Microsoft's official server.

See Zentriq ConnectRead the connector guide