powerautomate-mcp 0.11.1 → 0.12.0

package/README.md

@@ -1,5 +1,7 @@
 # Power Automate MCP Server
 
+[![CI](https://github.com/rcb0727/powerautomate-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/rcb0727/powerautomate-mcp/actions/workflows/ci.yml)
+
 **Docs:** **Overview** · [Installation & Upgrading](https://github.com/rcb0727/powerautomate-mcp-docs/blob/main/INSTALL.md) · [Changelog](https://github.com/rcb0727/powerautomate-mcp-docs/blob/main/CHANGELOG.md) · [Report an issue](https://github.com/rcb0727/powerautomate-mcp-docs/issues)
 
 An MCP (Model Context Protocol) server for Microsoft Power Automate. Create, manage, and deploy Power Automate flows using natural language.
@@ -97,19 +99,23 @@ If you prefer to create the app registration manually:
 3. After creation, go to **Authentication** and enable:
    - **Allow public client flows**: Yes
 
-4. Go to **API permissions** > **Add a permission** and add:
+4. Go to **API permissions** > **Add a permission** and add only the permissions for the tool surfaces you want to enable. The setup wizard offers presets for **All tool surfaces**, **Power Automate only**, **Power Automate + connectors**, **Dataverse**, **Power Pages**, and **Custom**.
 
    | API | Permission | Type | Used For |
    |-----|------------|------|----------|
-   | Microsoft Graph | `User.Read` | Delegated | User profile |
-   | Microsoft Graph | `Sites.ReadWrite.All` | Delegated | SharePoint sites, lists, files |
-   | Microsoft Graph | `Files.ReadWrite.All` | Delegated | OneDrive/SharePoint file operations |
    | Power Automate (Flow Service) | `Flows.Read.All` | Delegated | Read flows |
    | Power Automate (Flow Service) | `Flows.Manage.All` | Delegated | Create/update/delete flows |
    | Power Automate (Flow Service) | `Activity.Read.All` | Delegated | Flow run history |
    | Power Automate (Flow Service) | `Approvals.Manage.All` | Delegated | Approval management |
-   | Dynamics CRM | `user_impersonation` | Delegated | Dataverse table/row CRUD |
-   | Power Platform API | delegated permission | Delegated | Power Pages **site management** (Tier 2 — optional; see note below) |
+   | Microsoft Graph | `User.Read`, `Sites.ReadWrite.All`, `Files.ReadWrite.All` | Delegated | Optional: SharePoint, OneDrive, and Excel helpers |
+   | PowerApps Service | `User` | Delegated | Optional: connections, connector metadata, custom connectors, and Power Apps maker APIs |
+   | BAP Admin API | `user_impersonation` | Delegated | Optional: admin tools, Dataverse URL discovery, and Power Pages configuration |
+   | Dynamics CRM | `user_impersonation` | Delegated | Optional: Dataverse table/row CRUD and Power Pages configuration |
+   | Power Platform API | delegated permission | Delegated | Optional: Power Pages **site management** (Tier 2 — see note below) |
+
+   > **Least privilege:** Power Automate-only setups need only the Flow Service permissions. Skipped feature scopes are saved in `features.enabled`, hidden from the advertised MCP tool list, and skipped by `--doctor` / `--validate`.
+
+   > **Dataverse and admin tools** require the BAP Admin API delegated permission (appId `0e0bf3cc-3078-4fd4-9ef3-cb6dc0245b10`). Without it, the server cannot resolve the real Dataverse org URL and falls back to a guessed `*.crm.dynamics.com` hostname that often fails DNS.
 
    > **Power Pages site-management tools (Tier 2)** call `https://api.powerplatform.com` and need the "Power Platform API" delegated permission (appId `8578e004-a5c6-46e7-913e-12f58912df43`). It is **not** added by the automatic `--setup` app creation because that API exposes only feature-scoped permissions and the auto-creator can't safely guess the scope. Add it manually here if you want Tier 2; the Power Pages **config** tools (Dataverse) work without it. After adding, re-run `--setup` — the wizard reports whether the Power Platform API authorized.
 
@@ -144,6 +150,7 @@ powerautomate-mcp [options]
 |----------|-------------|
 | `PA_MCP_CLIENT_ID` | Microsoft Entra app client ID (overrides config file) |
 | `PA_CONFIG_PATH` | Custom path to config.json |
+| `PA_MCP_HTTP_TOKEN` | With `--http`: require `Authorization: Bearer <token>` on every MCP request |
 
 ---
 
@@ -209,6 +216,7 @@ What connectors are available for working with SharePoint?
 What parameters does the "Send an email (V2)" action need?
 ```
 
+<!-- TOOLS-TABLE:BEGIN — generated by `npm run docs:tools`, do not edit by hand -->
 ## Available Tools (121 total)
 
 > Every tool the server exposes, grouped by service. All 121 are listed here.
@@ -218,17 +226,17 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_flows` | List Power Automate flows in an environment |
-| `get_flow` | Get the complete definition of a Power Automate flow including triggers, actions, connection refe… |
-| `create_flow` | Create a new Power Automate flow |
-| `update_flow` | Update an existing Power Automate flow |
-| `delete_flow` | Delete a Power Automate flow permanently |
-| `toggle_flow` | Enable or disable a Power Automate flow |
-| `clone_flow` | Clone an existing Power Automate flow to create a copy with a new name |
-| `export_flow` | Export a flow as a package |
-| `share_flow` | Share a flow with users, groups, or service principals |
-| `get_flow_permissions` | Get the list of users, groups, and service principals that have access to a flow |
-| `list_flow_versions` | List all versions of a flow |
+| `list_flows` | List Power Automate flows in an environment. Returns flow names, IDs, state (Started/Stopped), last… |
+| `get_flow` | Get the complete definition of a Power Automate flow including triggers, actions, connection referen… |
+| `create_flow` | Create a new Power Automate flow. Provide a trigger, actions, and connection references. Use search_… |
+| `update_flow` | Update an existing Power Automate flow. Three update modes: (1) full replace — pass 'actions' to rep… |
+| `delete_flow` | Delete a Power Automate flow permanently. This action cannot be undone. You must set confirm=true to… |
+| `toggle_flow` | Enable or disable a Power Automate flow. Use 'start' to enable a stopped flow or 'stop' to disable a… |
+| `clone_flow` | Clone an existing Power Automate flow to create a copy with a new name. Optionally update connection… |
+| `export_flow` | Export a flow as a package. Returns the flow definition and metadata that can be used to import into… |
+| `share_flow` | Share a flow with users, groups, or service principals. Grant them either 'CanEdit' (can modify the… |
+| `get_flow_permissions` | Get the list of users, groups, and service principals that have access to a flow. Shows their role (… |
+| `list_flow_versions` | List all versions of a flow. Each version represents a saved state of the flow definition. Use this… |
 
 </details>
 
@@ -237,15 +245,15 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `test_flow` | Test a Power Automate flow with guided feedback |
-| `run_flow` | Trigger a Power Automate flow to run immediately |
-| `get_runs` | Get the execution history of a Power Automate flow |
-| `get_run_actions` | Get detailed action-level information for a flow run |
-| `get_run_action_repetitions` | Get iteration-level details for a for_each or do_until loop action in a flow run |
-| `diagnose_flow` | Diagnose issues with a Power Automate flow |
-| `validate_flow` | Validate a Power Automate flow definition for errors |
-| `resubmit_run` | Resubmit a failed or cancelled flow run |
-| `cancel_run` | Cancel a currently running flow execution |
+| `test_flow` | Test a Power Automate flow with guided feedback. This tool: 1. Gets the flow's expected input schema… |
+| `run_flow` | Trigger a Power Automate flow to run immediately. Works with any trigger type (manual, scheduled, ev… |
+| `get_runs` | Get the execution history of a Power Automate flow. Shows run times, status (Succeeded/Failed/Runnin… |
+| `get_run_actions` | Get detailed action-level information for a flow run. Shows each action's status, timing, inputs/out… |
+| `get_run_action_repetitions` | Get iteration-level details for a for_each or do_until loop action in a flow run. Shows which iterat… |
+| `diagnose_flow` | Diagnose issues with a Power Automate flow. Analyzes recent runs, identifies failures, and provides… |
+| `validate_flow` | Validate a Power Automate flow definition for errors. Can validate either an existing flow by ID or… |
+| `resubmit_run` | Resubmit a failed or cancelled flow run. This will re-execute the flow with the same trigger inputs.… |
+| `cancel_run` | Cancel a currently running flow execution. Use this to stop a flow that is taking too long or runnin… |
 
 </details>
 
@@ -254,11 +262,11 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `plan_flow` | Interactive flow planning wizard |
-| `build_flow` | Build a Power Automate flow from a description |
-| `get_expression_help` | Get help with Power Automate expressions |
-| `search_connectors` | Search for Power Automate connectors by name, description, or category |
-| `get_action_schema` | Get the schema and parameters for a connector's actions/triggers |
+| `plan_flow` | Interactive flow planning wizard. Call this FIRST when user wants to create or build a flow. IMPORTA… |
+| `build_flow` | Build a Power Automate flow from a description. RECOMMENDED: Use plan_flow FIRST to gather requireme… |
+| `get_expression_help` | Get help with Power Automate expressions. Provides: - Common functions reference by category - Conte… |
+| `search_connectors` | Search for Power Automate connectors by name, description, or category. Returns matching connectors… |
+| `get_action_schema` | Get the schema and parameters for a connector's actions/triggers. Use search_connectors first to fin… |
 
 </details>
 
@@ -267,14 +275,14 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_connections` | List all connections in an environment |
-| `list_custom_connectors` | List all custom connectors in the environment |
-| `get_custom_connector` | Get detailed information about a custom connector including its OpenAPI definition and all operat… |
-| `create_custom_connector` | Create a custom connector for any REST API |
-| `update_custom_connector` | Update a custom connector |
-| `delete_custom_connector` | Delete a custom connector |
-| `plan_custom_connector` | Get guidance on creating a custom connector |
-| `import_openapi_connector` | Create a custom connector by importing an OpenAPI/Swagger specification |
+| `list_connections` | List all connections in an environment. Shows connection names, statuses (Connected/Error), connecto… |
+| `list_custom_connectors` | List all custom connectors in the environment. Shows connector names, IDs, and operation counts. |
+| `get_custom_connector` | Get detailed information about a custom connector including its OpenAPI definition and all operation… |
+| `create_custom_connector` | Create a custom connector for any REST API. Define the base URL, authentication, and operations. Eac… |
+| `update_custom_connector` | Update a custom connector. Add or remove operations, or change the display name and description. |
+| `delete_custom_connector` | Delete a custom connector. Requires confirm=true to proceed. |
+| `plan_custom_connector` | Get guidance on creating a custom connector. Describes what information you need to gather about you… |
+| `import_openapi_connector` | Create a custom connector by importing an OpenAPI/Swagger specification. Provide the full spec and a… |
 
 </details>
 
@@ -283,9 +291,9 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_approvals` | List pending approvals in the environment |
-| `list_approvals_dataverse` | List pending approval requests from Dataverse |
-| `respond_approval` | Respond to a pending approval request |
+| `list_approvals` | List pending approvals in the environment. Shows approval requests that are waiting for a response. |
+| `list_approvals_dataverse` | List pending approval requests from Dataverse. More reliable than the Flow API for approvals. Shows… |
+| `respond_approval` | Respond to a pending approval request. Use 'Approve' to approve or 'Reject' to reject the request. |
 
 </details>
 
@@ -294,13 +302,13 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_dataverse_tables` | List Dataverse tables (entities) in the environment |
-| `get_dataverse_table` | Get detailed metadata for a Dataverse table including all column definitions |
-| `query_dataverse_rows` | Query rows from a Dataverse table with OData filtering, selecting, and ordering |
-| `get_dataverse_row` | Get a single Dataverse row by its ID |
-| `create_dataverse_row` | Create a new row in a Dataverse table |
-| `update_dataverse_row` | Update an existing Dataverse row |
-| `delete_dataverse_row` | Delete a Dataverse row permanently |
+| `list_dataverse_tables` | List Dataverse tables (entities) in the environment. Returns table names, entity set names, and whet… |
+| `get_dataverse_table` | Get detailed metadata for a Dataverse table including all column definitions. Provide the table's lo… |
+| `query_dataverse_rows` | Query rows from a Dataverse table with OData filtering, selecting, and ordering. Use list_dataverse_… |
+| `get_dataverse_row` | Get a single Dataverse row by its ID. Returns all fields or selected fields for the specified row. |
+| `create_dataverse_row` | Create a new row in a Dataverse table. Use get_dataverse_table first to see available columns and re… |
+| `update_dataverse_row` | Update an existing Dataverse row. Only include fields you want to change. The row must exist. |
+| `delete_dataverse_row` | Delete a Dataverse row permanently. This action cannot be undone. You must set confirm=true to proce… |
 
 </details>
 
@@ -309,17 +317,17 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `search_sharepoint_sites` | Search for SharePoint sites by name or keyword |
-| `get_sharepoint_site` | Get a SharePoint site by its ID or by hostname and path |
-| `list_sharepoint_lists` | List all lists and libraries in a SharePoint site |
-| `get_sharepoint_list_columns` | Get column definitions for a SharePoint list |
-| `list_sharepoint_items` | Get items from a SharePoint list with optional filtering and sorting |
-| `create_sharepoint_item` | Create a new item in a SharePoint list |
-| `update_sharepoint_item` | Update an existing SharePoint list item |
-| `delete_sharepoint_item` | Delete a SharePoint list item permanently |
-| `list_sharepoint_files` | List files in a SharePoint document library |
-| `upload_sharepoint_file` | Upload a file to a SharePoint document library |
-| `get_sharepoint_file_content` | Download a file's content from a SharePoint document library |
+| `search_sharepoint_sites` | Search for SharePoint sites by name or keyword. Returns site IDs, names, and URLs. Use the site ID i… |
+| `get_sharepoint_site` | Get a SharePoint site by its ID or by hostname and path. Returns site details including name, URL, a… |
+| `list_sharepoint_lists` | List all lists and libraries in a SharePoint site. Returns list IDs, names, and types. Use the list… |
+| `get_sharepoint_list_columns` | Get column definitions for a SharePoint list. Shows column names, types, and whether they are requir… |
+| `list_sharepoint_items` | Get items from a SharePoint list with optional filtering and sorting. Returns item IDs, field values… |
+| `create_sharepoint_item` | Create a new item in a SharePoint list. Use get_sharepoint_list_columns first to see available field… |
+| `update_sharepoint_item` | Update an existing SharePoint list item. Only include fields you want to change. |
+| `delete_sharepoint_item` | Delete a SharePoint list item permanently. This action cannot be undone. You must set confirm=true t… |
+| `list_sharepoint_files` | List files in a SharePoint document library. Use list_sharepoint_lists first to find document librar… |
+| `upload_sharepoint_file` | Upload a file to a SharePoint document library. Simple upload supports files up to 4MB. Provide the… |
+| `get_sharepoint_file_content` | Download a file's content from a SharePoint document library. Returns base64-encoded content for tex… |
 
 </details>
 
@@ -328,8 +336,8 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `search_excel_files` | Search for Excel files in OneDrive by name |
-| `inspect_excel_file` | Inspect an Excel file to find tables and columns |
+| `search_excel_files` | Search for Excel files in OneDrive by name. Returns matching files with their IDs and paths. |
+| `inspect_excel_file` | Inspect an Excel file to find tables and columns. Use search_excel_files first to find the file ID. |
 
 </details>
 
@@ -338,19 +346,19 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_powerapps` | List Power Apps canvas apps in an environment |
-| `list_canvas_apps` | List Power Apps canvas apps stored in Dataverse |
-| `get_powerapp` | Get detailed information about a Power App including owner, connections, and app URIs |
-| `list_model_driven_apps` | List model-driven apps from Dataverse |
-| `publish_powerapp` | Publish a Power App to make the latest version available to users |
-| `get_powerapp_versions` | Get version history for a Power App |
-| `restore_powerapp_version` | Restore a Power App to a previous version |
-| `get_powerapp_permissions` | Get the list of users, groups, and service principals that have access to a Power App |
-| `share_powerapp` | Share a Power App with a user, group, or service principal |
-| `unshare_powerapp` | Remove a user or group's access to a Power App |
-| `set_powerapp_owner` | Transfer ownership of a Power App to another user |
-| `set_powerapp_display_name` | Change the display name of a Power App |
-| `delete_powerapp` | Delete a Power App permanently |
+| `list_powerapps` | List Power Apps canvas apps in an environment. Returns app names, IDs, owners, and last modified dat… |
+| `list_canvas_apps` | List Power Apps canvas apps stored in Dataverse. Shows app names, versions, and status. |
+| `get_powerapp` | Get detailed information about a Power App including owner, connections, and app URIs. |
+| `list_model_driven_apps` | List model-driven apps from Dataverse. Requires a Dataverse-enabled environment. |
+| `publish_powerapp` | Publish a Power App to make the latest version available to users. |
+| `get_powerapp_versions` | Get version history for a Power App. Shows all saved versions with dates. |
+| `restore_powerapp_version` | Restore a Power App to a previous version. |
+| `get_powerapp_permissions` | Get the list of users, groups, and service principals that have access to a Power App. |
+| `share_powerapp` | Share a Power App with a user, group, or service principal. Grant CanEdit or CanView permissions. |
+| `unshare_powerapp` | Remove a user or group's access to a Power App. |
+| `set_powerapp_owner` | Transfer ownership of a Power App to another user. Requires Power Platform admin role. |
+| `set_powerapp_display_name` | Change the display name of a Power App. |
+| `delete_powerapp` | Delete a Power App permanently. This action cannot be undone. Set confirm=true to proceed. |
 
 </details>
 
@@ -359,10 +367,10 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_powerapps_admin` | List all Power Apps in an environment as admin |
-| `get_powerapp_admin` | Get Power App details as admin |
-| `delete_powerapp_admin` | Delete a Power App as admin |
-| `quarantine_powerapp` | Quarantine or unquarantine a Power App |
+| `list_powerapps_admin` | List all Power Apps in an environment as admin. Requires Power Platform admin role. |
+| `get_powerapp_admin` | Get Power App details as admin. Requires Power Platform admin role. |
+| `delete_powerapp_admin` | Delete a Power App as admin. Requires Power Platform admin role. Set confirm=true to proceed. |
+| `quarantine_powerapp` | Quarantine or unquarantine a Power App. Quarantined apps cannot be launched. Requires admin role. |
 
 </details>
 
@@ -371,13 +379,13 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_powerpages_sites` | List Power Pages sites as stored in Dataverse (the configuration plane) |
-| `get_powerpages_site` | Get a Power Pages site's Dataverse record and detected data model (standard vs enhanced) by its s… |
-| `list_powerpages_components` | List configuration components of a Power Pages site (web pages, web roles, table permissions, con… |
-| `get_powerpages_component` | Get a single Power Pages configuration component row by its record id. siteId selects the data model |
-| `create_powerpages_component` | Create a Power Pages configuration component (e.g. a web page or content snippet) |
-| `update_powerpages_component` | Update a Power Pages configuration component row |
-| `delete_powerpages_component` | Delete a Power Pages configuration component row permanently |
+| `list_powerpages_sites` | List Power Pages sites as stored in Dataverse (the configuration plane). Returns enhanced-model site… |
+| `get_powerpages_site` | Get a Power Pages site's Dataverse record and detected data model (standard vs enhanced) by its site… |
+| `list_powerpages_components` | List configuration components of a Power Pages site (web pages, web roles, table permissions, conten… |
+| `get_powerpages_component` | Get a single Power Pages configuration component row by its record id. siteId selects the data model… |
+| `create_powerpages_component` | Create a Power Pages configuration component (e.g. a web page or content snippet). The site associat… |
+| `update_powerpages_component` | Update a Power Pages configuration component row. Only include columns you want to change in `data`. |
+| `delete_powerpages_component` | Delete a Power Pages configuration component row permanently. Set confirm=true to proceed. |
 
 </details>
 
@@ -386,47 +394,43 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_powerpages_websites` | List Power Pages websites in an environment via the Power Platform management API |
-| `get_powerpages_website` | Get a Power Pages website's hosting details (status, URL, data model) by id, via the management API |
-| `create_powerpages_website` | Provision a new Power Pages website (management API) |
-| `delete_powerpages_website` | Delete a Power Pages website (management API) |
-| `restart_powerpages_website` | Restart a Power Pages website (management API) |
+| `list_powerpages_websites` | List Power Pages websites in an environment via the Power Platform management API. Returns hosting i… |
+| `get_powerpages_website` | Get a Power Pages website's hosting details (status, URL, data model) by id, via the management API. |
+| `create_powerpages_website` | Provision a new Power Pages website (management API). Asynchronous — returns a tracking URL; provisi… |
+| `delete_powerpages_website` | Delete a Power Pages website (management API). This cannot be undone. Set confirm=true to proceed. |
+| `restart_powerpages_website` | Restart a Power Pages website (management API). Recycles the site so it picks up Dataverse config ch… |
 
 </details>
 
 <details>
 <summary><strong>Environment Administration</strong> (10 tools)</summary>
 
-> Requires **Power Platform Admin**, **Dynamics 365 Admin**, or **Global Admin** role.
-
 | Tool | Description |
 |------|-------------|
-| `list_environments` | List all Power Platform environments accessible to the current user |
-| `get_environment` | Get detailed information about a Power Platform environment including Dataverse URL, region, and SKU |
-| `create_environment` | Create a new Power Platform environment |
-| `delete_environment` | Delete a Power Platform environment permanently |
-| `copy_environment` | Copy a Power Platform environment to create a new one |
-| `reset_environment` | Reset a Power Platform environment to its initial state |
-| `backup_environment` | Create a backup of a Power Platform environment |
-| `restore_environment` | Restore a Power Platform environment from a backup |
-| `list_environment_backups` | List available backups for a Power Platform environment |
-| `get_environment_capacity` | Get capacity consumption for a specific environment |
+| `list_environments` | List all Power Platform environments accessible to the current user. Shows environment names, IDs, r… |
+| `get_environment` | Get detailed information about a Power Platform environment including Dataverse URL, region, and SKU… |
+| `create_environment` | Create a new Power Platform environment. Requires admin role. |
+| `delete_environment` | Delete a Power Platform environment permanently. This action cannot be undone. Set confirm=true. |
+| `copy_environment` | Copy a Power Platform environment to create a new one. Set confirm=true. |
+| `reset_environment` | Reset a Power Platform environment to its initial state. THIS DELETES ALL DATA. Set confirm=true. |
+| `backup_environment` | Create a backup of a Power Platform environment. |
+| `restore_environment` | Restore a Power Platform environment from a backup. Set confirm=true. |
+| `list_environment_backups` | List available backups for a Power Platform environment. |
+| `get_environment_capacity` | Get capacity consumption for a specific environment. |
 
 </details>
 
 <details>
 <summary><strong>DLP Policies</strong> (6 tools)</summary>
 
-> Requires **Power Platform Admin**, **Dynamics 365 Admin**, or **Global Admin** role.
-
 | Tool | Description |
 |------|-------------|
-| `list_dlp_policies` | List all Data Loss Prevention (DLP) policies in the tenant |
-| `get_dlp_policy` | Get details of a DLP policy including connector group assignments |
-| `create_dlp_policy` | Create a new DLP policy |
-| `update_dlp_policy` | Update an existing DLP policy |
-| `delete_dlp_policy` | Delete a DLP policy |
-| `get_dlp_connector_configs` | Get connector-level configurations for a DLP policy (endpoint filtering, etc.) |
+| `list_dlp_policies` | List all Data Loss Prevention (DLP) policies in the tenant. Requires admin role. |
+| `get_dlp_policy` | Get details of a DLP policy including connector group assignments. |
+| `create_dlp_policy` | Create a new DLP policy. Requires admin role. |
+| `update_dlp_policy` | Update an existing DLP policy. Requires admin role. |
+| `delete_dlp_policy` | Delete a DLP policy. Set confirm=true to proceed. Requires admin role. |
+| `get_dlp_connector_configs` | Get connector-level configurations for a DLP policy (endpoint filtering, etc.). |
 
 </details>
 
@@ -435,30 +439,28 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_solutions` | List Dataverse solutions in the environment |
-| `export_solution` | Export a Dataverse solution as a zip file (base64-encoded) |
-| `import_solution` | Import a Dataverse solution from a base64-encoded zip file |
-| `clone_solution` | Clone an unmanaged Dataverse solution to create a new version |
-| `add_solution_component` | Add a component (table, flow, etc.) to an unmanaged Dataverse solution |
-| `remove_solution_component` | Remove a component from an unmanaged Dataverse solution |
-| `list_solution_flows` | List flows stored in Dataverse solutions |
-| `publish_all_customizations` | Publish all pending customizations in Dataverse |
+| `list_solutions` | List Dataverse solutions in the environment. Solutions are containers for flows, apps, and other com… |
+| `export_solution` | Export a Dataverse solution as a zip file (base64-encoded). Requires Dataverse. |
+| `import_solution` | Import a Dataverse solution from a base64-encoded zip file. Requires Dataverse. |
+| `clone_solution` | Clone an unmanaged Dataverse solution to create a new version. |
+| `add_solution_component` | Add a component (table, flow, etc.) to an unmanaged Dataverse solution. |
+| `remove_solution_component` | Remove a component from an unmanaged Dataverse solution. |
+| `list_solution_flows` | List flows stored in Dataverse solutions. These are 'solution-aware' flows that can be exported and… |
+| `publish_all_customizations` | Publish all pending customizations in Dataverse. Requires Dataverse. |
 
 </details>
 
 <details>
 <summary><strong>Managed Environments & Capacity</strong> (6 tools)</summary>
 
-> Requires **Power Platform Admin**, **Dynamics 365 Admin**, or **Global Admin** role.
-
 | Tool | Description |
 |------|-------------|
-| `enable_managed_environment` | Enable managed environment features |
-| `disable_managed_environment` | Disable managed environment features |
-| `get_managed_environment_settings` | Get the governance configuration for a managed environment |
-| `update_managed_environment_settings` | Update governance settings for a managed environment |
-| `get_tenant_capacity` | Get storage and API capacity usage for the tenant |
-| `get_api_request_summary` | Get API request consumption summary for the tenant |
+| `enable_managed_environment` | Enable managed environment features. Set confirm=true. Requires admin role. |
+| `disable_managed_environment` | Disable managed environment features. Set confirm=true. Requires admin role. |
+| `get_managed_environment_settings` | Get the governance configuration for a managed environment. |
+| `update_managed_environment_settings` | Update governance settings for a managed environment. Requires admin role. |
+| `get_tenant_capacity` | Get storage and API capacity usage for the tenant. Requires admin role. |
+| `get_api_request_summary` | Get API request consumption summary for the tenant. Requires admin role. |
 
 </details>
 
@@ -467,9 +469,9 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_desktop_flows` | List desktop flows (UI flows) in the environment |
-| `list_machines` | List registered machines for desktop flows (RPA) |
-| `list_machine_groups` | List machine groups for desktop flows |
+| `list_desktop_flows` | List desktop flows (UI flows) in the environment. Desktop flows automate tasks on Windows or web app… |
+| `list_machines` | List registered machines for desktop flows (RPA). Shows machine names, status, and group memberships… |
+| `list_machine_groups` | List machine groups for desktop flows. Machine groups allow load balancing of desktop flow runs acro… |
 
 </details>
 
@@ -478,14 +480,12 @@ What parameters does the "Send an email (V2)" action need?
 
 | Tool | Description |
 |------|-------------|
-| `list_billing_policies` | List pay-as-you-go billing policies for the tenant |
-| `get_billing_policy` | Get details of a specific billing policy |
-| `list_ai_models` | List AI Builder models in the environment |
+| `list_billing_policies` | List pay-as-you-go billing policies for the tenant. Requires admin role. |
+| `get_billing_policy` | Get details of a specific billing policy. |
+| `list_ai_models` | List AI Builder models in the environment. Shows model names, types, and status. |
 
 </details>
-
-<p align="right"><a href="#power-automate-mcp-server">↑ Back to top</a></p>
-
+<!-- TOOLS-TABLE:END -->
 
 ## Security