Power Automate MCP Server

An MCP (Model Context Protocol) server that connects Claude to Microsoft Power Automate. Create, manage, and deploy Power Automate flows using natural language.

Features

• Create Flows - Build flows from natural language descriptions with guided wizard
• Test & Debug - Automatic testing with intelligent error diagnosis
• Validate - Pre-flight checks with best practices scoring (0-100)
• Manage Flows - List, update, clone, and delete flows
• Expression Help - Interactive Power Automate expression reference
• Connector Intelligence - Full knowledge of 400+ connectors and schemas
• Cross-Platform - Works on Windows, macOS, and Linux

Installation

Prerequisites

• Node.js 20+
• Microsoft 365 work account with Power Automate access
• Azure AD app registration (see below)
• Linux only: libsecret for secure token storage

  # Ubuntu/Debian
  sudo apt-get install libsecret-1-dev gnome-keyring
  
  # Fedora/RHEL
  sudo dnf install libsecret-devel gnome-keyring
  

Install from npm

npm install -g powerautomate-mcp

First-Time Setup

powerautomate-mcp --setup

This interactive wizard will:

1. Sign you in via browser
2. Discover your Power Automate environments
3. Create the configuration file

Register with Claude

Add to your Claude configuration:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json Linux: ~/.config/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "powerautomate": {
      "command": "powerautomate-mcp"
    }
  }
}

Restart Claude. The Power Automate tools will appear automatically.

---

Azure AD App Registration (Required)

Before using this MCP server, an Azure AD app registration must be configured in your tenant. This requires Global Administrator or Application Administrator role.

Who Needs to Do This?

Option 1: PowerShell Script (Recommended)

# Requires: Azure CLI (https://aka.ms/installazurecli)
# Requires: Global Admin or Application Administrator role

az login
./scripts/Register-PublishedApp.ps1

The script will:

1. Create the app registration
2. Configure required permissions
3. Output the admin consent URL

Option 2: Manual Setup

1. Go to Azure Portal > Microsoft Entra ID > App registrations > New registration

2. Configure basic settings:

   • Name: Power Automate MCP
   • Supported account types: Accounts in any organizational directory (multi-tenant)
   • Redirect URI: Select “Public client/native” and enter:

     https://login.microsoftonline.com/common/oauth2/nativeclient
     

3. After creation, go to Authentication and enable:

   • Allow public client flows: Yes

4. Go to API permissions > Add a permission and add:

   API	Permission	Type
   Microsoft Graph	User.Read	Delegated
   Power Automate (Flow Service)	Flows.Read.All	Delegated
   Power Automate (Flow Service)	Flows.Manage.All	Delegated

5. Click Grant admin consent for [Your Tenant] (requires admin role)

Admin Consent

After creating the app, admin consent is required for users to authenticate:

https://login.microsoftonline.com/common/adminconsent?client_id=YOUR_CLIENT_ID

Replace YOUR_CLIENT_ID with the Application (client) ID from your app registration.

---

Usage Examples

Create a flow that sends me an email every morning with the weather forecast

Test my "Daily Report" flow and tell me if there are any errors

What connectors are available for working with SharePoint?

Help me write an expression to format a date as "January 1, 2024"

Available Tools

Core Flow Operations

Testing & Debugging

Planning & Help

Security

This server implements security best practices:

• Secure Token Storage: DPAPI (Windows), Keychain (macOS), libsecret (Linux)
• Input Validation: OData injection protection, query sanitization
• Error Sanitization: PII redacted from logs and error messages
• No Plaintext Secrets: Tokens never stored in plaintext

Architecture

Claude  powerautomate-mcp  Power Automate APIs
                          |
                          +-- MSAL Auth (device code flow)
                          +-- SQLite Schema Cache (400+ connectors)
                          +-- Secure Token Storage (OS keychain)

License

MIT

Support

For issues and feature requests, please open an issue in this repository.