community postCopilot & Agentscommunity - not Microsoftreviewed - checked by Opus

Exploring Model Context Protocol (MCP) for Business Automation in Business Central

Model Context Protocol (MCP) servers enable AI agents to interact with Business Central data and perform actions like querying, creating, and modifying records. The post explains MCP concepts, demonstrates setting up an MCP server for the sales quote process, configuring it in Copilot Studio, and highlights security considerations such as limiting data exposure through custom APIs.

post Aardvark Labs

Marcel Chabot · 2026-03-13 · 1,113 words · about 5 min

"MCP standardizes actions, data, and reasoning surfaces for agents."

Key points

  • The post presents MCP as the next step after the Common Data Model, standardizing actions, data and reasoning surfaces for AI agents
  • An MCP server configuration in Business Central should have a clear goal and scope, with read, create, modify, delete and bound action permissions set per API
  • Copilot Studio offers a ready-made Business Central MCP tool that connects to an environment, a server configuration and a company, so an agent can create sales quotes through conversation
  • The Agent Tasks view in Copilot Studio shows the agent finding the operations and schemas the MCP server exposes
  • Anything exposed through MCP becomes reachable from outside, so purpose-built custom APIs should be used to limit which fields are shared

Quotes

  • “MCP standardizes actions, data, and reasoning surfaces for agents.” (Explains how MCP extends beyond CDM to enable AI agents to interact with business systems in a standardized way)
  • “If you expose it to the MCP server it is available to the world!” (Highlights the critical security implication that exposed APIs become accessible externally, requiring careful configuration)
  • “By creating a purpose build API we can choose the field and functions available and limit the risk of unintended data exposure.” (Provides the security solution of using custom APIs instead of standard APIs to control what data agents can access)

AL objects mentioned

As named in the post. A name that matches one object page by exact type and name links to it; the others stay as named.

  • page “Model Context Protocol (MCP) Server Configuration”
  • api “Business Central 2.0 API”

Not found in BC28-30: page “Model Context Protocol (MCP) Server Configuration”.

Context

  • Features: Model Context Protocol server, MCP server configuration, Copilot Studio integration, Custom API creation, Agent task logging, Bound actions, Data access controls

Source: Aardvark Labs, community blog. Summary, key points and quotes are derived (CONTENT-NOTICE.md); read the original for the full text.