Skip to main content
Glama

Create a service-principal Dataverse connection

cs_create_connection

Create a Dataverse connection with app registration credentials to authenticate automated flows and tools without a personal user.

Instructions

Create a Dataverse connection that authenticates with an app registration (application id + client secret) so flows and tools owned by a pipeline do not depend on a person. This is the only connection kind pac can create; connector connections (SharePoint, Outlook, MCP servers ...) are still authorised in the portal. Runs 'pac connection create' with the active pac auth profile. Mutates a live environment: requires confirm: true (a dry run otherwise).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
cwdNoWorking directory for pac (for project commands: the solution project folder)
nameYesConnection display name
confirmNoRequired to actually perform a change in a live environment. Without it the tool returns a dry run.
profileNopac auth profile to run as: the admin account for tenant commands. Defaults to CPS_ADMIN_PROFILE for admin commands and CPS_PAC_PROFILE otherwise, then the active profile. cs_init lists the profiles.
tenantIdYesEntra tenant id
backgroundNoRun in the background and return a jobId immediately, for a command that takes longer than the client will wait. Poll cs_job_status.
environmentNoEnvironment id or URL; default: the environment of the active pac auth profile
clientSecretYesClient secret; prefer a secret from a vault, it is masked in logs (masked in logs and results)
applicationIdYesApp registration (client) id
timeoutSecondsNoDefault 600

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.5

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since no annotations are provided, the description carries the full burden. It discloses that the tool mutates a live environment and requires confirm: true (otherwise a dry run), which is a critical behavioral trait. It also states the underlying pac command and authentication method. It doesn't describe reversibility or failure modes, but the mutation and confirm requirement are well covered.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences with no filler. It front-loads the core purpose, then adds scope and behavioral notes, and ends with the mutation requirement. Every sentence earns its place and the text is highly efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (10 params, 4 required), the description adequately covers purpose, scope, execution method, and the key mutation behavior. The schema handles parameter details, and there is no output schema, so return values aren't expected. The description is complete for an agent to correctly invoke the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage, so the schema already documents all parameters. The tool description does not add parameter-specific meaning beyond what the schema provides; it reinforces the confirm requirement but that is already in the schema's parameter description. Therefore, a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool creates a Dataverse connection using an app registration (application id + client secret) for service-principal authentication. It explicitly distinguishes this from connector connections (SharePoint, Outlook, MCP servers), which must be created in the portal, thus separating it from sibling tools like cs_update_connection and cs_delete_connection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says 'This is the only connection kind pac can create' and notes connector connections are handled in the portal, giving clear guidance on when to use this tool versus alternatives. It also mentions it runs 'pac connection create' with the active pac auth profile, providing operational context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools