BC MCP Pro
AI assistants in Business Central, on your terms.
BC MCP Pro connects Claude and ChatGPT to Microsoft Dynamics 365 Business Central: every user signs in with their own Microsoft account and gets exactly the permissions Business Central already gives them. Its Business Central extension goes one step further — an administrator decides per user or group which companies, which configuration and which access level an assistant gets.
Two steps
Start with the connector. Add the extension when you need rules.
Step one
Available now
The connector
The connector between your AI assistant and Business Central, running in your own Azure subscription. Users sign in with Microsoft; Business Central enforces their permission sets, security filters and licence on every call. Nothing is installed in Business Central.
Claude · ChatGPT · your own Azure
Step two
Coming to Microsoft AppSource
MCP Guard, the Business Central extension
An extension for Business Central. An administrator writes rules per user or security group: the companies an assistant may work in, the MCP configuration it uses, and an access level per module. It also adds API pages for writing production, planning, assembly and project data.
Business Central · Microsoft Marketplace
The connector works without the extension. Where the extension is installed, the connector follows its rules; where it is not, the environment and companies follow from the installation and from the user’s own permissions. More on the MCP Guard page.
What MCP Guard adds
Rules an administrator sets, and Business Central enforces.
Governance
A rule per user or group
On the page MCP Guard User Settings: the companies allowed, the default company and the MCP configuration, for one user or for a security group. A user’s own rule wins; otherwise the group rule with the lowest priority.
Access levels
Read, change, create or post
Four levels per module — Read, Modify, Create and Actions, Posting — for production, planning, assembly and projects. Two users with the same permission sets can get different rights: the planner changes the plan, the others read it.
Effective permissions
The assistant sees only what it may use
One read-only API page reports, for the signed-in user, which API pages they may read, create, modify or delete. The connector hides the rest, so the assistant does not offer what Business Central would refuse.
Production
Production orders, lines and routing
Create and change production orders, refresh them and release them; move an operation and Business Central reschedules the ones that follow. Business Central has no standard API that writes these.
Planning and assembly
The planning worksheet and assembly orders
Calculate a plan and the capacity calendar, read the suggestions and accept, decline or adjust them. Create, release and post assembly orders — posting only at the highest access level.
Projects
Project tasks and planning lines
The standard API reads project tasks and planning lines but cannot write them. The extension adds reading, creating and changing — no deleting, and no posting.
It is a second check, not a replacement: a user still needs Business Central’s own permissions on the data. Nothing is deleted through these pages.
What we build on it
A production planning board, live on Business Central.
Production orders and operations per work center, the load per day, and an ideal scenario calculated against the capacity you actually have. Changes stay in draft until a planner writes them to Business Central. It is one example of what the write pages make possible; we build boards like it around your own process.
We built this board entirely in Claude.ai. Get in touch to hear how we built it, and how you can keep shaping a board like this to your own wishes with AI.
In a demo you try the board yourself on a Business Central environment. Once a board fits your process, we can turn it into a standalone web app in your own Azure: users sign in with Microsoft, and the app talks to Business Central directly. The voice-over in the video is in Dutch.
How it works
Four steps, all inside Business Central.
1
Install the extension
From Microsoft AppSource, through Extension Marketplace in Business Central. One package serves both supported versions.
2
Assign the permission sets
MCP GUARD - USER for everyone who connects, MCP GUARD - ADMIN for whoever writes the rules. Neither grants anything on business data.
3
Write the rules
Per user or per security group: companies, MCP configuration, and an access level per module. A new rule starts at Read everywhere.
4
Connect the assistant
Add the extension’s pages to your MCP Server Configuration and connect Claude or ChatGPT, for example through the BC MCP Pro connector. The rules apply whichever client a user connects with.
Business Central enforces the access level in the pages themselves, on every create, change and action. A refusal says which level the rule gives and which one the action needs.
Requirements
What you need before you start.
Version
Business Central online
Business Central 2026 release wave 1 (version 28) or later, online. The production pages need the Premium experience and licence that production itself requires.
Availability
Belgium and the Netherlands
Available for Business Central environments in Belgium and the Netherlands. The extension is in English, Dutch and French.
Licence
A seat per user in production
Licences are bought through Microsoft Marketplace and assigned in the Microsoft 365 admin center. In a sandbox, a user an administrator wrote a rule for can try it without a seat.
Pricing
Per user, through Microsoft Marketplace.
MCP Guard
Price to be announced
Per user, per month
Bought and billed through Microsoft Marketplace, on your Microsoft invoice. The price is published here and on the listing when the offer goes live.
The connector
On request
Installed in your own Azure
We install the connector in your Azure subscription in one session. The Azure resources it runs on are billed to you by Microsoft, not by us.
The extension is coming to Microsoft AppSource. Want to use it before the listing is live? Talk to us about early access.
Documentation
Everything the extension does, written down.
Get started
Install and assign
Installing the extension, the permission sets and who needs which one, and the pages to add to your MCP Server Configuration.
Day to day
Rules and access levels
Writing a rule for a user or a security group, how the deciding rule is chosen, and what each access level allows per module.
When something breaks
Error messages, explained
Every message the extension can raise, with what caused it and what to change — searchable by the exact text on your screen.
Full documentation: MCP Guard help. It is also reachable from inside Business Central, through the Learn more links on tooltips.
See it on your own data
Ask your Business Central a question, and watch who may ask what.
In a demo we connect an assistant to a Business Central environment and show the same question asked by two users with different rules. You see what each of them gets, and what Business Central refuses.