MCP Guard
Rules for AI assistants, inside Business Central.
MCP Guard is an extension for Microsoft Dynamics 365 Business Central. An administrator decides per user or security group which companies, which MCP configuration and which access level an AI assistant such as Claude, ChatGPT or Microsoft 365 Copilot gets. It also adds the API pages Business Central lacks for writing production, planning, assembly and project data.
What MCP Guard adds
Rules an administrator sets, and Business Central enforces.
Governance
A rule per user or group
On the page MCP Guard User Settings: the companies allowed, the default company, the MCP configuration and the general access level, for one user or for a security group. A user’s own rule wins; otherwise the group rule with the lowest priority.
Access levels
Read, change, create or post
Four levels per module — Read, Modify, Create and Actions, Posting — for production, planning, assembly and projects. Two users with the same permission sets can get different rights: the planner changes the plan, the others read it.
Effective permissions
The assistant sees only what it may use
One read-only API page reports, for the signed-in user, which API pages they may read, create, modify or delete. A client that asks can hide the rest, so the assistant does not offer what Business Central would refuse.
Production
Production orders, lines and routing
Create and change production orders, refresh them and release them; move an operation and Business Central reschedules the ones that follow. Business Central has no standard API that writes these.
Planning and assembly
The planning worksheet and assembly orders
Calculate a plan and the capacity calendar, read the suggestions and accept, decline or adjust them. Create, release and post assembly orders — posting only at the highest access level.
Projects
Project tasks and planning lines
The standard API reads project tasks and planning lines but cannot write them. MCP Guard adds reading, creating and changing — no deleting, and no posting.
It is a second check, not a replacement: a user still needs Business Central’s own permissions on the data. Nothing is deleted through these pages.
Works with BC MCP Pro
Business Central enforces part of a rule. The connector applies the rest.
In Business Central
Enforced for every client
The access levels on MCP Guard’s own API pages are enforced by Business Central itself, on every create, change and action, whichever Model Context Protocol (MCP) client a user connects with.
In the connector
Applied by BC MCP Pro
The companies, the default company, the MCP configuration, the general access level, the daily limits, the usage records and the sandbox switch are applied by the BC MCP Pro connector for Claude, ChatGPT and Microsoft 365 Copilot. The daily limits and the usage records need its cloud edition.
BC MCP Pro is available separately from Vangelder Solutions, and it works without MCP Guard. Read more on the BC MCP Pro page.
How it works
Four steps, all inside Business Central.
1
Install the extension
From Microsoft AppSource, through Extension Marketplace in Business Central. One package serves both supported versions.
2
Assign the permission sets
MCP GUARD - USER for everyone who connects, MCP GUARD - ADMIN for whoever writes the rules. Neither grants anything on business data.
3
Write the rules
Per user or per security group: companies, MCP configuration, the general access level and an access level per module. A new rule starts at Read everywhere.
4
Connect the assistant
Add MCP Guard’s pages to your MCP Server Configuration and connect Claude, ChatGPT or Microsoft 365 Copilot, for example through the BC MCP Pro connector.
A refusal says which level the rule gives and which one the action needs.
Requirements
What you need before you start.
Version
Business Central online
Business Central 2026 release wave 1 (version 28) or later, online. The production pages need the Premium experience and licence that production itself requires.
Availability
Belgium and the Netherlands
Available for Business Central environments in Belgium and the Netherlands. MCP Guard is in English, Dutch and French.
Licence
A licence per user in production
Licences are bought through Microsoft Marketplace and assigned in the Microsoft 365 admin center. In a sandbox, a user an administrator wrote a rule for can try it without a licence.
Pricing
Per user, through Microsoft Marketplace.
MCP Guard
Price to be announced
Per user, per month
Bought and billed through Microsoft Marketplace, on your Microsoft invoice. The price is published here and on the listing when the offer goes live.
MCP Guard is coming to Microsoft AppSource. Want to use it before the listing is live? Talk to us about early access.
Documentation
Everything MCP Guard does, written down.
Get started
Install and assign
Installing the extension, the permission sets and who needs which one, and the pages to add to your MCP Server Configuration.
Day to day
Rules and access levels
Writing a rule for a user or a security group, how the deciding rule is chosen, and what each access level allows per module.
When something breaks
Error messages, explained
Every message MCP Guard can raise, with what caused it and what to change — searchable by the exact text on your screen.
Full documentation: MCP Guard help. It is also reachable from inside Business Central, through the Learn more links on tooltips.
See it on your own data
Ask your Business Central a question, and watch who may ask what.
In a demo we connect an assistant to a Business Central environment and show the same question asked by two users with different rules. You see what each of them gets, and what Business Central refuses.