Curso Copilot Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Curso Copilot Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Welcome to the Microsoft Copilot Studio ❤️ MCP lab. In this lab, you will learn how to deploy an MCP Server, and how to add it to Microsoft Copilot Studio.
Model Context Protocol (MCP) is an open protocol that standardizes how applications provide context to LLMs, defined by Anthropic. MCP provides a standardized way to connect AI models to different data sources and tools. MCP allows makers to seamlessly integrate existing knowledge servers and APIs directly into Copilot Studio.
Currently, Copilot Studio only supports Tools. To learn more about current capabilities, see aka.ms/mcsmcp. There are some known issues & planned improvements. These are listed here.
When do you use MCP? And when do you use connectors? Will MCP replace connectors?
MCP servers are made available to Copilot Studio using connector infrastructure, so these questions are not really applicable. The fact that MCP servers use the connector infrastructure means they can employ enterprise security and governance controls such as Virtual Network integration, Data Loss Prevention controls, multiple authentication methods—all of which are available in this release—while supporting real-time data access for AI-powered agents.
So, MCP and connectors are really better together.
To be able to deploy this MCP Server and use it in Microsoft Copilot Studio, you need to go through the following actions:
Use this templateOwnerRepository nameDescriptionPrivateCreate repositoryThis will take a little while. After it's done, you will be directed to the newly created repository.
[!WARNING] After completing the steps in this lab, you will have an MCP Server running on Azure that is publicly available. Ideally, you don't want that. Make sure to delete the Azure Web App after finishing the lab.
portal.azure.comAzure Portal
Resource groups tab and select CreateResource Group
Subscription dropdown and select your subscription from the listSelect Subscription
Resource group name text box and type a resource group name such as "jokesgrp"Resource Group Name
Region dropdown choose the region closest to youResource Group Region
Review + createReview and create
CreateCreate
Go to resource groupGo to resource
CreateCreate
search boxSearch
web appCreate button in the Web App search resultSearch Results
Web AppCreate Web App
Name text input and put in a name for the web app, such as "wegotjokes"Web App Name
Runtime stack dropdown and choose Node 22 LTSWeb App Runtime
Region dropdown and choose the region closest to youRegion
Review + createReview
CreateCreate
Refresh to update your deployment progressRefresh
Go to resourceGo to resource
Deployment tabDeployment tab
Deployment CenterDeployment center
Source dropdown and select GitHubChoose source
AuthorizeAuthorize
ContinueContinue
Authorize AzureAppServiceAuthorize
Organization dropdown and choose your organizationOrg Selection
Repository dropdown and choose the GitHub repository you created earlier from the listRepo Selection
Branch dropdown and choose your branchSelect Branch
SaveSave
Refresh to update the deployment statusRefresh
Deploy done
More in the left menuDiscover all buttonpin icon next to Custom connectors to pin it to the left menuCustom connectors in the left menuNew custom connectorCreate from blankJokesMCP)Continue buttonSwagger editor toggledummyurl.azurewebsites.net with the URL of the web app you created earlier. Make sure to remove https:// and everything after azurewebsites.netCreate connector to create the connectorNow you have an MCP Server running in Azure, and a connector available in the Power Platform. This step is about creating an agent in Microsoft Copilot Studio and adding the MCP Server to the agent.
Create in the left navigationNew agent buttonNew agent
Skip to configure on the top rightSkip to configure
JokesterDescription A humor-focused agent that delivers concise, engaging jokes only upon user request, adapting its style to match the user's tone and preferences. It remains in character, avoids repetition, and filters out offensive content to ensure a consistently appropriate and witty experience.Instructions You are a joke-telling assistant. Your sole purpose is to deliver appropriate, clever, and engaging jokes upon request. Follow these rules:
* Respond only when the user asks for a joke or something related (e.g., "Tell me something funny").
* Match the tone and humor preference of the user based on their input—clean, dark, dry, pun-based, dad jokes, etc.
* Never break character or provide information unrelated to humor.
* Keep jokes concise and clearly formatted.
* Avoid offensive, discriminatory, or NSFW content.
* When unsure about humor preference, default to a clever and universally appropriate joke.
* Do not repeat jokes within the same session.
* Avoid explaining the joke unless explicitly asked.
* Be responsive, witty, and quick.Create on the top rightCreate agent
OrchestrationTurn on orchestration
Knowledge sectionTurn off general knowledge
Actions in the top menuActions
Add an actionAdd an action
jokes) of the connector you created earlier (see number 1 in the screenshot below)Jokes MCP server (see number 2 in the screenshot below)Search for and select the action
Next when it's doneAction and connection
Description for the agent to know when to use this action to the following text: Trigger this action when a user asks for a joke. It can provide Chuck Norris jokes, Dad jokes and Yo Mama jokes.Leave the rest as default, like for instance end user authentication, where you will learn more about in a minute.
Add action to add the action to the agentAdd action
refresh icon in the Test your agent paneRefresh testing pane
Test your agent pane send the following message: Can I get a Chuck Norris joke?This will show you message that additional permissions are required to run this action. This is because of the user authentication in the action wizard.
ConnectAdditional permissions
This will open a new window where you can manage your connections for this agent.
Connect next to the JokesMCPConnect to JokesMCP
SubmitPick a connection
ConnectedStatus connected
Now you should be back in the Jokester agent screen.
refresh icon in the Test your agent paneRefresh testing pane
Test your agent pane send the following message: Can I get a Chuck Norris joke?This will now show a Chuck Norris joke - instead of the additional permissions.
Chuck Norris joke
Test your agent pane send the following message: Can I get a Dad joke?This will now show a Dad joke.
Dad joke
Test your agent pane send the following message: Can I get a Yo Mama joke?This will now show a Yo Mama joke.
Yo Mama joke
And that was the Jokes MCP Server working in Microsoft Copilot Studio. This is also the end of the lab! Hopefully you liked the lab. Please take the time to fill in our feedback form.
This is a MCP server built on the TypeScript SDK.
With this MCP Server, you will able to fetch jokes from the following websites:
If you want to run the server locally, make sure to run npm install in the root of the repository.
After that you can run npm run build to build the server and npm start to start the server.
The following tools are included:
This tool retrieves a random Chuck Norris Joke from chucknorris.io.
This tool retrieves the available categories from chucknorris.io.
This tool retrieves a random Dad Joke from icanhazdadjoke.com.
This tool retrieves a random Yo Mama Joke from yomama-jokes.com.
There are some known issues and planned improvements for MCP in Microsoft Copilot Studio. They are listed in this Microsoft Learn article.
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.
When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.
This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.