---
title: "Which environments can run the Dynamics 365 ERP MCP server?"
canonical_url: "https://cognilium.ai/blogs/which-environments-run-the-erp-mcp-server"
slug: "which-environments-run-the-erp-mcp-server"
section: "blogs"
date_published: "2026-09-09"
date_modified: "2026-09-16"
word_count: 1046
reading_time_minutes: 5
author: "Mudassir Marwat"
author_identifier: "0009-0008-1927-2598"
person_same_as:
  - "https://www.linkedin.com/in/mudassir-marwat/"
  - "https://orcid.org/0009-0008-1927-2598"
  - "https://github.com/mudassirmarwat"
  - "https://medium.com/@mudassir-marwat"
  - "https://www.youtube.com/@mudassir-marwat"
  - "https://dev.to/mudassirmarwat"
  - "https://hashnode.com/@mudassirmarwat"
  - "https://huggingface.co/mudassirmarwat"
  - "https://bsky.app/profile/mudassir-marwat.bsky.social"
  - "https://substack.com/@mudassirmarwat"
  - "https://topmate.io/mudassirmarwat"
  - "https://fueler.io/mudassirmarwat"
  - "https://www.instagram.com/mudassirmarwat/"
  - "https://www.facebook.com/mudassir.marwat"
  - "https://www.reddit.com/user/mudassirmarwat/"
  - "https://www.f6s.com/member/mudassir-marwat"
  - "https://cognilium.ai/founder"
entities: []
related:
  - "https://cognilium.ai/blogs/mcp-data-tools-vs-form-tools-vs-action-tools"
  - "https://cognilium.ai/blogs/does-the-erp-mcp-server-truncate-results"
  - "https://cognilium.ai/blogs/which-model-should-an-erp-agent-run-on"
---
# Which environments can run the Dynamics 365 ERP MCP server?

Tier 2 or above, or a Unified Developer Environment, and not a Cloud Hosted Environment. Plus three minimum versions and an allow-list your platform needs.

## Key takeaways

- A sandbox tier at or above the documented minimum, or a Unified Developer Environment, is required — and Cloud Hosted Environments are explicitly excluded, which is the prerequisite that most often forces a plan to change.
- Three version floors satisfy the requirement, and a proactive quality update on an older release qualifies without a full version move.
- The agent platform must be added to an allow-list, and nothing is permitted by default. Treat it as an approval with an owner.
- The server is unavailable during servicing windows and requests made then fail — design the retry behaviour rather than discovering it.
- Two defaults are easy to miss: the feature itself is on by default, so feature management is a check rather than a task — and metadata and guidance are US English only, whatever locale the user runs.
- The in-app Copilot sidecar is not a supported home for an MCP agent yet — the configuration is permitted, unsupported, and outside Microsoft's support guarantee.

**Tier 2 or above, or a Unified Developer Environment — and explicitly not a Cloud Hosted Environment.** That single exclusion is the one that catches teams out, because a Cloud Hosted Environment is often exactly where a developer would try this first.

There are four other prerequisites, all published, and none of them is a licence.

## Which environment tier is required, and which is ruled out?

Microsoft states both halves in one sentence:

> *"Your environment is Tier 2 or above, or a Unified Developer Environment. The MCP server isn't supported on Cloud Hosted Environments (CHE)."*

**Read the exclusion as a hard stop rather than a performance note.** A Cloud Hosted Environment is a legitimate, commonly used development environment, and it will not run this. If your proof-of-concept plan starts on a CHE, it needs to move before it starts.

The practical consequence is a sequencing one. Tier 2 environments are shared, governed and finite in most organisations, so **access to a sandbox becomes a scheduling dependency for an agent project** rather than something a developer arranges on the day.

## Which product versions support it?

Three floors, and any one of them satisfies the requirement:

Microsoft's phrasing is *"The product version of Dynamics 365 finance and operations apps must be at least"* those three — so a proactive quality update on an older release qualifies you without a full version move.

**That is worth checking before anyone schedules an upgrade for this.** A PQU on 10.0.45 or 10.0.46 is a materially smaller change than moving to 10.0.47, and it reaches the same starting line.

One version note points the other way. The retiring static server *"is still available in finance and operations apps environments with version 10.0.2263.17 and greater"* — a different numbering series entirely, and a different server. [What happens to that one on 1 October](/blogs/static-erp-mcp-server-retirement) is its own question.

## Is there anything to switch on?

Almost certainly not, and this is the prerequisite most people over-plan:

> *"Enable the **Dynamics 365 ERP Model Context Protocol server** feature in Feature Management if not already enabled. **The MCP server is enabled by default.**"*

**Enabled by default** means the feature-management step is a verification, not a task. Check it, and expect to change nothing.

Note the feature's full name as Microsoft writes it — *Dynamics 365 ERP Model Context Protocol server*, spelled out, not abbreviated. Feature Management is searched by string, so the abbreviation will not find it.

And **Feature Management itself is one of the pages the server cannot reach**, which is a deliberate boundary rather than an oversight — [an agent cannot turn its own features on](/blogs/can-an-erp-agent-escalate-its-own-permissions).

## Does the agent platform need registering?

Yes, and this is the step with no default:

> *"Add the agent platform on which you're building your agent in the **Allowed MCP Clients** page."*

**An allow-list is an explicit, per-client decision.** Copilot Studio, Microsoft Foundry and non-Microsoft clients each have to be added; nothing arrives permitted. It is also the natural governance point — the list of platforms that may reach your ERP is a short, reviewable artefact, which is a rare thing in an integration story.

Plan for it as an approval with an owner, not as a checkbox during a build sprint.

## Can you put it behind the in-app Copilot?

Not yet — and the wording of this limit matters more than most, because nothing stops you trying:

> *"Adding the Dynamics 365 ERP MCP server as a tool in the Copilot for finance and operations apps agent, enabling it for use with the sidecar chat panel in the client, isn't yet supported. Although you're not blocked from adding the MCP server to the agent, you might experience errors in the execution."*

**Read the last clause twice.** The platform permits the configuration and the documentation says it is unsupported, which is the most expensive combination available: it will appear to work in a demo and it carries no commitment.

Microsoft closes the door explicitly: *"Microsoft support doesn't guarantee assistance for resolving errors or problems for these scenarios."*

**So the in-app sidecar is not a delivery target for an MCP agent today.** If the requirement is a chat experience inside the client, [that is a different architecture decision](/blogs/copilot-sidecar-vs-mcp-agent) — and the honest answer is to make it deliberately rather than discover it after a build.

## When is the server unavailable?

During servicing, and the failure is not graceful. It is limitation nine of ten:

> *"The MCP server is unavailable during environment downtime, such as servicing windows. Any MCP requests that agents make during these servicing windows fail."*

**"Fail" is the published word** — not queue, not retry, not degrade. An autonomous agent running on a schedule will meet this eventually, so the retry and alerting behaviour belongs in the design rather than in a later hardening pass.

One more environmental constraint is worth knowing before you promise a rollout: the server *"supports only US English (en-us)"*, and while form labels and values follow the authenticated user's locale, *"the MCP responses always provide metadata and guidance in English."*

**About Cognilium** Cognilium builds AI optimization apps for Microsoft Dynamics 365 — companion apps that optimize the pricing, inventory, warehouse and planning decisions your ERP manages but can't optimize. Dynamics is your system of record. Cognilium is your system of intelligence. https://cognilium.ai · https://www.linkedin.com/company/37180269/

**Agentic ERP.** We build turnkey AI optimization apps for Dynamics 365 — sidecar applications that run in your own Azure tenancy and solve the calculations a standard ERP is not built to compute. Built on **Azure OpenAI, Microsoft Fabric and Copilot Studio**. We build these on request, against your data and your environment.

**More on the boundary between what Copilot does and what you build:** [Agentic ERP on Dynamics 365](/erp-ai).

If you are checking whether your environments can carry an agent project, that is a 15-minute call with a definite answer. Bring your tier and version.

## Sources

- [Use Model Context Protocol for finance and operations apps](https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/copilot/copilot-mcp)
- [Build an agent with Dynamics 365 ERP MCP](https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/copilot/build-agent-mcp)

## Fact-check

**Tier summary:** 11 × T1 (10 verbatim, 1 read off a list), 3 × T2 — **0 × T4.**

**Absence claims:** none. Every constraint here is a published positive — a supported tier, a version floor, a default state, an allow-list, a failure mode. **Nothing is asserted about what Microsoft has not documented.**

## Frequently asked questions

### Which environment tier is required, and which is ruled out?

Read the exclusion as a hard stop rather than a performance note. A Cloud Hosted Environment is a legitimate, commonly used development environment, and it will not run this. If your proof-of-concept plan starts on a CHE, it needs to move before it starts.

### Which product versions support it?

Microsoft's phrasing is "The product version of Dynamics 365 finance and operations apps must be at least" those three — so a proactive quality update on an older release qualifies you without a full version move.

### Is there anything to switch on?

Almost certainly not, and this is the prerequisite most people over-plan:

### Does the agent platform need registering?

An allow-list is an explicit, per-client decision. Copilot Studio, Microsoft Foundry and non-Microsoft clients each have to be added; nothing arrives permitted. It is also the natural governance point — the list of platforms that may reach your ERP is a short, reviewable artefact, which is a rare thing in an integration story.

### Can you put it behind the in-app Copilot?

Not yet — and the wording of this limit matters more than most, because nothing stops you trying:

### When is the server unavailable?

During servicing, and the failure is not graceful. It is limitation nine of ten:

---

Canonical HTML: https://cognilium.ai/blogs/which-environments-run-the-erp-mcp-server
