Ever found yourself juggling XrmToolBox, make.powerapps.com, and admin.powerplatform.com, just to check a role privilege or run a FetchXML query? Yeah… same. 🙃 So, I built something that fixes that. Introducing Dataverse DevTools MCP …

Sichere Programmierung dev.to 12.10.2025, 17:14 Uhr 4 Min. Lesezeit KRITIS / Energie Cloud & IT-Enterprise

↗ Quelle (dev.to)

Reagiere als Erste:r — dein Feedback zählt!

Ever found yourself juggling XrmToolBox, make.powerapps.com, and admin.powerplatform.com, just to check a role privilege or run a FetchXML query?

Yeah… same. 🙃

So, I built something that fixes that.

Introducing Dataverse DevTools MCP Server — a fun little .NET-powered Model Context Protocol (MCP) server that brings your favorite Dataverse tools right inside Copilot Chat in VS Code, Visual Studio, or even Claude Desktop.

Now, you can do all your Dataverse admin, data, and troubleshooting tasks without ever leaving your IDE.

No more browser tabs. No more “Where was that environment URL again?”

Just chat with your Copilot — and watch it do the magic. ✨

🧠 What It Actually Does

The Dataverse DevTools MCP Server exposes ready-to-use tools for:

👥 User, Team & Security Administration

🧩 Data Operations (Run FetchXML, Web API & CRUD)

🧱 Entity Metadata Exploration

🪲 Plugin Trace Log Troubleshooting

Think of it as XrmToolBox + Power Platform Admin Center + Power Apps Maker Portal,

but accessible via natural language from your Copilot Chat window.

💡 Why You’ll Love It (Especially If You’re a Dataverse Dev)

🧞‍♂️ 1. Talk to Dataverse in Plain English

Forget the clicks and scripts. Just type what you need.

💬 “Find the user Jane Doe and show her queues and teams.”

💬 “Generate a FetchXML query to get all Opportunities where account type is premium.”

💬 “Get plugin trace logs for correlation ID aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee.”

Copilot talks to Dataverse through the MCP server and executes it instantly.

⚡ 2. No Context Switching

You stay in your flow.

Whether you’re debugging a plugin, checking privileges, or creating test records, you don’t need to switch apps.

Query Dataverse directly from VS Code or Visual Studio

Manage users, roles, and teams

Explore metadata and relationships

Execute and validate Web API or FetchXML calls

🧩 3. Easy Setup (Global Tool FTW)

Install once. Use anywhere.

dotnet tool install --global vignaesh01.dataversedevtoolsmcpserver

Then add it to your MCP client config and you’re good to go.

🔍 What Can It Do? (Hint: A Lot.)

Here are some real things you can ask:

👥 User Management

“Who am I in Dataverse right now?”

“Add user Jane Doe to the Super Squad team.”

“List roles assigned to Jane Doe.”

🔒 Security Administration

“Compare privileges between Basic User and Support User.”

“Which roles have read access to Account entity?”

💾 Data Operations

“Execute this FetchXML query…”

“Create a new Account record using this JSON payload.”

🧱 Metadata Exploration

“Find all entities containing ‘invoice’.”

“List OptionSet values for incident.statuscode.”

🪲 Troubleshooting

“Get plugin trace logs for Contoso.Plugins.AccountPreCreate.”

🧭 Quick Toolset Overview

Category	Tools	Example
👥 User, Team & Queue Management	20+ tools	Assign roles, move users, manage teams
🔐 Security Management	3 tools	Privilege inspection, role comparison
💾 Data Management	6 tools	FetchXML, Web API CRUD, Upsert/Delete
🧱 Entity Metadata	8 tools	Explore schema, OptionSets, relationships
🪲 Troubleshooting	2 tools	Plugin trace logs by name or correlation ID

🛠️ Works Seamlessly With

🖥️ VS Code (GitHub Copilot Chat)

Just update your mcp.json (use Command Palette → MCP: Open User Configuration).

{

  "servers": {

    "dvmcp": {

      "type": "stdio",

      "command": "dataversedevtoolsmcpserver",

      "args": [

        "--environmentUrl",

        "https://yourorg.crm.dynamics.com"

      ]

    }

  }

}

🧰 Visual Studio IDE

Create .mcp.json in your profile folder

Add the same config as above

Open Copilot Chat → Select Agent → choose Dataverse DevTools MCP Server

🤖 Claude Desktop

Go to File → Settings → Developer → Edit Config

Update claude_desktop_config.json

{

  "mcpServers": {

    "dvmcp": {

      "type": "stdio",

      "command": "dataversedevtoolsmcpserver",

      "args": [

        "--environmentUrl",

        "https://yourorg.crm.dynamics.com"

      ]

    }

  }

}

Restart Claude and you’re in business.

🖼️ [Placeholder: Screenshot – Claude config JSON]

🌟 Why I Built This

Because Dataverse developers deserve better workflows.

I wanted something that lets me stay in the IDE, keep focus, and still have Dataverse superpowers at my fingertips.

This project combines:

❤️ My love for .NET

💪 My obsession with Dataverse

🧠 My curiosity for AI-powered developer tools

And it turns out… MCP was the perfect bridge.

🧩 Try It Yourself!

👉 GitHub Repo: Dataverse DevTools MCP Server

👉 License: GPL-3.0

💬 Feedback & Stars Welcome!

If you love Dataverse, try it and tell me what you think!

I’d love to hear your ideas — especially for new tools to add.

🛠️ Open an issue

⭐ Star the repo to support it

CTI Threat Relationship Graph2 Knoten / 1 Relationen

CVE / Incident Software MITRE ATT&CK CWE Weakness IoC

IR-PLAYBOOK-VULN-REMEDIATIONMEDIUM

Schritte anzeigen

SOC Incident Playbook: Vulnerability Remediation & Verification

Asset Inventory

Asset-Datenbank nach betroffenen Komponenten, Versionen und exposed Ports abfragen.

nmap -sV --script vuln -p- <target-network>

Exploit MonitoringSofort

SIEM-Regeln und IDS-Signaturen (Snort/Suricata) auf Angriffsversuche schärfen.

tail -f /var/log/suricata/fast.log | grep <cve>

Patch DeploymentSofort

Patch oder offiziellen Workaround gemäß Hersteller-Empfehlung einspielen.

Check Vendor Security Advisory Bulletin

1-Click Detection Engineering: Multi-Dialect SIEM Rules5 Formate

Regeln anzeigen

Syntax validiert (0 Fehler)

title: Detect Exploitation - 🚀Meet Dataverse DevTools MCP Server — Dataverse in Your Copilot 🧠⚡
id: 9b670324-0df0-46fb-9394-053e409c5cfd
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

Syntax validiert (0 Fehler)

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "🚀Meet Dataverse DevTools MCP S" ascii wide
    condition:
        any of them
}

Syntax validiert (0 Fehler)

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Meet Dataverse DevTools MCP Server  Data")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

Syntax validiert (0 Fehler)

message: "*Meet Dataverse DevTools MCP Server  Data*"

Syntax validiert (0 Fehler)

CommonSecurityLog
| where Message has "Meet Dataverse DevTools MCP Server  Data"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

🎯

MITRE ATT&CK Matrix Navigator 14 Taktiken

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

💡 Tipp: Klicken Sie auf eine TTP, um Gegenmaßnahmen und SIEM-Erkennungsregeln anzuzeigen.Enterprise Matrix v14.1

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 1 Min

Es gibt eine neue Nummer 1: Das ist jetzt das beliebteste Auto in Deutschland

IT Nachrichten

NÄCHSTER BEITRAG 1 Min

Glasfaser: Fiber to the home und Fiber to the Building - das sind die wichtigsten Unterschiede

IT NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich 🚀Meet Dataverse DevTools MCP Server — Da.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC

Schnell-Prompts für Analysten

⚠️ DEFANGED SANDBOX VIEW (tsecurity.de): Alle Netzwerkindikatoren und URLs wurden neutralisiert (2 Indikatoren entschärft). Nur zur defensiven Analyse!

Format: python

#!/usr/bin/env python3
# Exploit Title: PoC for Target
import socket, sys
target = '192[.]168[.]1[.]10'
url = 'hxxp://target[.]local/vuln'
s = socket.socket()
s.connect((target, 80))
s.send(b'GET / HTTP/1.1\r\nHost: target.local\r\n\r\n')