# Dynamics 365 Sales AI connector: IT approval and security

Dynamics 365 Sales' MCP server can read and change data. The vendor's setup notes include an admin or IT step. This page covers what it can reach and change, how it signs in, who approves it and how to turn it off.

Online: https://mcpforgtm.com/toolkit/it-approval/dynamics-365-sales

- Server URL: Not confirmed
- Access: Read + write (Source: https://www.microsoft.com/en-us/dynamics-365/blog/it-professional/2026/10/29/dynamics-365-cx-mcp-server-sales/)
- Sign-in: Microsoft Entra ID OAuth 2.0 through the Agent 365 Tooling Gateway (admin consent required; on-behalf-of exchange to Dataverse) (Source: StackMCP listing, https://mcpforgtm.com/tools/dynamics-365-cx-mcp-server-sales)
- Who approves: A tenant admin grants admin consent first. A System Administrator configures the server.
- Read-only option: Not confirmed
- Admin approval: Yes (Source: https://learn.microsoft.com/en-us/dynamics365/sales/developer/connect-sales-mcp-server-agent365-tooling-gateway)
- Setup: Needs admin or IT (Source: https://learn.microsoft.com/en-us/dynamics365/sales/developer/connect-sales-mcp-server-agent365-tooling-gateway)
- Credits: Not confirmed
- Plan: Not confirmed

## What data can it reach?

Dynamics 365 Sales's docs list these tools for its MCP server:

- Opportunity management (summaries, stages, close, reopen, clone)
- Accounts and contacts
- Lead management (search, qualify, disqualify, assign)
- Activities, notes, email and meetings
- Product and pricing
- Quotes and orders
(Source: https://learn.microsoft.com/en-us/dynamics365/sales/developer/connect-sales-mcp-server-agent365-tooling-gateway)

- A tenant admin has to grant admin consent before a client can connect. A System Administrator configures the server. (Source: https://learn.microsoft.com/en-us/dynamics365/sales/developer/connect-sales-mcp-server-agent365-tooling-gateway)
- Sign-in uses a Microsoft Entra app ID. The gateway performs an on-behalf-of exchange that allows the request to reach Dataverse. (Source: https://learn.microsoft.com/en-us/dynamics365/sales/developer/connect-sales-mcp-server-agent365-tooling-gateway)
- Microsoft gives one server URL per Dataverse environment. There is no single public URL. (Source: https://learn.microsoft.com/en-us/dynamics365/sales/developer/connect-sales-mcp-server-agent365-tooling-gateway)
- Microsoft says connections to services outside Dynamics 365 let data leave the Dynamics 365 FedRAMP High boundary. Data flowing to other services will be processed and stored according to the terms, compliance commitments, and data residency and handling requirements of the destination service. (Source: https://learn.microsoft.com/en-us/dynamics365/sales/developer/connect-sales-mcp-server-agent365-tooling-gateway)

## What can it read, and what can it change?

Read + write. Things it can do in your Dynamics 365 Sales account (Source: https://www.microsoft.com/en-us/dynamics-365/blog/it-professional/2026/10/29/dynamics-365-cx-mcp-server-sales/):

- updates, advances, closes, reopens and clones opportunities
- updates, qualifies, disqualifies and assigns leads
- creates and completes activities and notes
- drafts and sends email
- schedules meetings
- manages product lines and recalculates pricing
- creates quotes, revises or activates them, and converts them to orders
- maintains accounts and contacts

## Which actions should wait for a person's OK?

Have a person approve each change listed above before it runs. Every StackMCP recipe follows this rule: read freely, but create, change or send only after you approve it.

## How does it sign in?

Sign-in method (from the StackMCP listing): Microsoft Entra ID OAuth 2.0 through the Agent 365 Tooling Gateway (admin consent required; on-behalf-of exchange to Dataverse) (Source: StackMCP listing, https://mcpforgtm.com/tools/dynamics-365-cx-mcp-server-sales)

## Does an admin need to approve it?

What Dynamics 365 Sales's docs confirm about admin controls:

- An admin must approve or enable the connection: Yes (Source: https://learn.microsoft.com/en-us/dynamics365/sales/developer/connect-sales-mcp-server-agent365-tooling-gateway)
- Scopes or permissions can limit what it reaches: Yes (Source: https://www.microsoft.com/en-us/dynamics-365/blog/it-professional/2026/10/29/dynamics-365-cx-mcp-server-sales/)
- Individual tools can be turned off: Not confirmed
- MCP activity shows in an audit log: Not confirmed

## How do we turn it off?

### In Dynamics 365 Sales

The Dynamics 365 Sales docs we checked don't say how to revoke MCP access. Ask your Dynamics 365 Sales admin.

### In the AI assistant

- For other assistants, check that assistant's settings or ask your admin.

## Does it use credits or quota?

Not confirmed

## What do Claude and ChatGPT add?

Claude: an Owner or Primary Owner enables directory connectors on Team and Enterprise. Custom connectors on Enterprise can also be added by a custom role with Manage access to Libraries.
Claude Team and Enterprise owners set each tool to Always allow, Needs approval, or Blocked.
Claude commercial plans: inputs and outputs are not used for training by default. Consumer plans exclude raw connector content from the training set described in Anthropic's privacy article, unless it is copied into the chat.
An audit-log export for Claude is not confirmed on this page.
ChatGPT full custom MCP support is for Business and Enterprise or Edu on the web. Pro can connect with read and fetch permissions.
ChatGPT Business: only admins and owners create and publish custom MCP servers.
ChatGPT admins turn read and write actions on. Allow read actions still asks before a change. Allow all is not in the standard workspace-wide selector.
ChatGPT Business, Enterprise, and Edu workspace content, including app data, is not used for training by default.
ChatGPT's Compliance Platform is only for eligible Enterprise and Edu workspaces. The quote does not say it records MCP tool calls.
Sources include https://support.claude.com/en/articles/11176164-use-connectors-to-extend-claude-s-capabilities and https://help.openai.com/en/articles/12584461-connecting-custom-mcp-servers-in-chatgpt. Checked 2026-11-02.

## Send this to IT

Copy this, fill in the parts in [brackets] and send it.

```text
Subject: Request: connect Dynamics 365 Sales to [your AI assistant] for my sales work

Hi [name],

I'd like to connect Dynamics 365 Sales to [your AI assistant] using Dynamics 365 Sales' official MCP connector. I want to use it for [task, for example call prep or pipeline review].

What I'm asking for:
- Approval for a tenant admin to grant admin consent, and for a System Administrator to configure the server, before anyone connects.
- Any admin step Dynamics 365 Sales needs before I can connect.

How I'll use it:
- I'll approve each action that creates, changes or sends something before it runs.
- I'll disconnect it if you ask, or when I stop using it.

Quick facts:
- Access: Read + write
- Sign-in: Microsoft Entra ID OAuth 2.0 through the Agent 365 Tooling Gateway (admin consent required; on-behalf-of exchange to Dataverse)
- Setup: Needs admin or IT
- Who approves: A tenant admin grants admin consent first. A System Administrator configures the server.
- Read-only option: Not confirmed
- How to revoke: Not confirmed
- Credits: Not confirmed

The facts and their sources: https://mcpforgtm.com/toolkit/it-approval/dynamics-365-sales

Thanks,
[your name]
```

_Each fact links to its source: the tool vendor's docs, the AI assistant's docs or the StackMCP listing. Anything without a source says Not confirmed. Vendors change their connectors, so confirm anything important on the linked page. The date beside each source is the day we last found that quote on the page. StackMCP listing facts on this page were checked on Oct 30, 2026._