D365 F&O MCP Server

security_info

Read-only

Explore Dynamics 365 Finance and Operations security by artifact or coverage. Trace role, duty, and privilege hierarchies or discover which security elements grant access to an object.

Instructions

D365FO security lookup. Choose a mode: • artifact → details + full hierarchy of a named privilege/duty/role (Role → Duties → Privileges → Entry Points). • coverage → reverse chain for an object: which privileges/duties/roles grant access (object → menu items → privileges → duties → roles).

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "mode": "<mode>"
    },
    "name": "security_info"
  }
}

Input Schema

Name	Required	Description	Default
`mode`	Yes
`name`	No	[artifact] REQUIRED. Name of the security privilege, duty, or role
`objectName`	No	[coverage] REQUIRED. Name of the form, table, class, or menu item
`objectType`	No	[coverage] Type of the object (default: auto-detect)	auto
`artifactType`	No	[artifact] REQUIRED. Type of security artifact to look up
`includeChain`	No	[artifact] Walk the full hierarchy (default: true)

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedv1.16.2Sep 1, 2026

removedInput schema / properties / mode / description

Removed value: -"artifact = look up a named privilege/duty/role; coverage = who can access an object."

First observedv1.8.0Aug 4, 2026

TDQS

A4.2/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already communicates non-destructive behavior, so the description's additional detail is valuable: it discloses the traversal paths (Role → Duties → Privileges → Entry Points and object → menu items → privileges → duties → roles). This exceeds what the annotations alone provide and helps the called tool behave predictably, though it doesn't cover potential errors or edge cases.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and well structured, using bullet-like mode definitions with clear arrows to show hierarchy. Every sentence and clause contributes practical information, and the most important routing instruction ('Choose a mode') is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although there is no output schema, the description gives a fairly concrete picture of what the caller can expect: full artifact hierarchies for artifact mode and reverse access chains for coverage mode. Combined with the input schema, this is sufficient for most call intentions, though a few details such as exact response shape or limit behavior are absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is high (83%), and the schema already explains each parameter, including mode-specific requiredness, defaults, and enums. The description reinforces the conceptual meaning of the modes and their output chains, but doesn't add significant parameter-level detail beyond what the schema already provides. Thus it earns the baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool as a D365FO security lookup and breaks down two distinct modes: artifact lookup and coverage analysis. Each mode specifies exactly what is returned, including the full hierarchy and reverse chain, making the tool's purpose unambiguous and differentiating it from generic lookup tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context about when to use each mode: 'artifact' for hierarchy details on a security artifact, and 'coverage' for reverse access chains on an object. It does not explicitly name alternative tools or exclusions, so it stops short of a perfect 5, but the mode guidance is strong enough to guide correct invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.