MCP.Market

Power Automate MCP server

by kaael1·io.github.kaael1/mcp-power-automate·v0.4.1·25 stars
No reviews yet

Local MCP for Power Automate with browser-backed auth, target locking, review diff, and rollback.

B82/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
Growing

25 stars54 downloads/wk

Reviews

Write one

Nobody has reviewed Power Automate yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Power Automate tools (22, 9 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • clone_flow

    Clone an existing flow inside the current environment and optionally make the clone the active target.

  • create_flowwrite action

    Create a new blank flow in the current environment and select it as the active target.

  • get_active_flow

    Return the selected flow target plus the current browser tab flow context.

  • get_flow

    Fetch the selected Power Automate flow target and return a normalized editable payload.

  • get_health

    Return the current flow status plus cached run and update summaries for troubleshooting.

  • get_last_runwrite action

    Return the last run summary cached by the local bridge.

  • get_last_updatewrite action

    Return the last successful flow update recorded by the local bridge, including before/after data, summaries, and a structured review diff.

  • get_latest_runwrite action

    Return the most recent run for the selected flow target.

  • get_runwrite action

    Return details for a specific run of the selected flow target.

  • get_run_actionswrite action

    Return action-level statuses for a specific run of the selected flow target.

  • get_status

    Show whether a Power Automate browser session is captured, which flow is selected, and which flow is open in the current tab.

  • get_trigger_callback_url

    Return the callback URL for the selected flow trigger when the trigger supports manual invocation.

  • invoke_trigger

    Invoke the selected flow trigger using its callback URL when the trigger supports manual execution.

  • list_flows

    List flows from the currently captured environment and optionally filter by name.

  • list_runs

    List recent runs for the selected flow target.

  • refresh_flows

    Refresh the flow catalog for the currently captured environment.

  • revert_last_updatewrite action

    Revert the selected flow target to the last successfully recorded before-state. The target flow must match the last updated flow.

  • set_active_flow

    Select which flow the MCP should operate on inside the current environment.

  • set_active_flow_from_tab

    Set the active flow target from the currently captured browser tab flow.

  • update_flowwrite action

    Update the selected flow using the normalized flow payload returned by get_flow. The existing environment metadata is preserved automatically.

  • validate_flow

    Validate the selected flow definition using the legacy Power Automate validation endpoints when available.

  • wait_for_runwrite action

    Poll the latest run or a specific run until it reaches a terminal status or a timeout is reached.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan23 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 119 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Power Automate compares

Against every graded Scraping and browsing MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 58% of 866 Scraping and browsing servers
Tools
22
the typical Scraping and browsing server has 6
Tools that change things
41%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
25
more than 86% of 583 Scraping and browsing servers
Downloads a week
54
more than 37% of 309 Scraping and browsing servers with a package

What its tools let an agent do: 9 read · 2 create · 10 change · 1 run or deploy

Install Power Automate in Claude Code, Cursor or VS Code

Runs npx -y @kaael1/mcp-power-automate on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-power-automate -- npx -y @kaael1/mcp-power-automate
Add to Cursor

What the publisher says

From the Power Automate repository's README, as published. We do not edit it. Read it on GitHub

MCP Power Automate

Local-first MCP server and Chromium extension for AI-assisted Microsoft Power Automate work.

Use your existing logged-in browser session to let an MCP client inspect, validate, edit, run, review, and revert Power Automate cloud flows. No Microsoft Entra ID app registration, admin consent flow, or custom enterprise application setup is required to get started.

Early public signal: 15,000+ LinkedIn post views and 14 GitHub stars while the project is still small, practical, and moving fast.

Why It Exists

Power Automate is powerful, but AI agents need more than raw convenience before they should touch real flows. This project keeps the workflow visible and reversible:

  • The browser extension captures the active Power Automate context and compatible tokens from your own Chromium session.
  • The MCP server exposes a v1 command surface for targeting, reading, previewing, validating, saving, run inspection, and rollback.
  • The extension stays mostly passive: status, diagnostics, and review surfaces instead of mystery buttons that hide what changed.
  • Local state, snapshots, and backups stay on your machine.

What It Can Do

Write operations are deliberately scoped. The MCP does not expose solution deletion, component deletion, managed-solution modification, environment-variable writes, or blind production edits as the default path.

Quickstart

Register the MCP in Codex:

codex mcp add power-automate-local -- npx -y @kaael1/mcp-power-automate

Find the packaged extension path:

npx -y @kaael1/mcp-power-automate extension-path

Load that folder in Chromium:

  1. Open chrome://extensions or edge://extensions.
  2. Enable Developer Mode.
  3. Choose Load unpacked.
  4. Select the folder printed by extension-path.

Then open or focus a Power Automate flow page. The extension captures the session and target context automatically.

Check readiness:

npx -y @kaael1/mcp-power-automate doctor

Recommended Agent Loop

For a supervised edit, ask your MCP client to follow this loop:

  1. doctor
  2. get_context
  3. connect_flow
  4. get_flow
  5. previewflowupdate
  6. validate_flow
  7. applyflowupdate
  8. getlastupdate
  9. validate_flow again when available

For run inspection and manual/request trigger tests, use listruns, getlatestrun, getrun, getrunactions, waitforrun, gettriggercallbackurl, and invoketrigger.

For Dataverse solution work, use listsolutions, listsolutioncomponents, listenvironmentvariables, addflowtosolution, and createflowin_solution. Solution writes are intentionally limited to adding cloud flows to unmanaged solutions.

Public v1 Tools

get_context
doctor
connect_flow
list_flows
list_solutions
list_solution_components
list_environment_variables
add_flow_to_solution
get_flow
preview_flow_update
validate_flow
apply_flow_update
get_last_update
revert_last_update
list_runs
get_latest_run
get_run
get_run_actions
wait_for_run
get_trigger_callback_url
invoke_trigger
create_flow
create_flow_in_solution
clone_flow

Safety Model

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Power Automate: common questions

Is Power Automate MCP server safe?
Mostly: it is graded B (82/100). Read the Power Automate safety report
How do I install Power Automate?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Power Automate need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Power Automate maintained?
The last commit was 156 days ago (2026-06-01). The latest release is v0.4.1.
What can I use instead of Power Automate?
Servers from other publishers that do the same job: Auth Your Agent MCP server, MCP Browser MCP server and Presio MCP server. Compare all Power Automate alternatives.
How does Power Automate compare with other Scraping and browsing MCP servers?
safety score 82/100 (higher than 58% of 866 Scraping and browsing servers); tools 22 (the typical Scraping and browsing server has 6); tools that change things 41% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Power Automate

Same job from other publishers: the closest match first, then the best rated.

All Power Automate alternatives →
  • Auth Your Agent
    Act for a person on websites: sandboxed browser, phone approvals, saved logins, scheduled plans.
    A
  • MCP Browser
    Browser automation using the user's Chromium session — JS execution, auth, and anti-bot support.
    More from cherchyk →
    A
  • Presio
    Present PDFs from the browser: upload to start a slideshow or validate Presio sidecars. No auth.
    A
  • Hwatu
    Verification browser for coding agents: headless WebKit, DOM eval, screenshots, pixel-diff.
    A
  • GrowBlocks Dev Kit
    Build, play-test with screenshots, and ship three.js browser games on GrowBlocks.
    A