Dynamics 365 ERP MCP: Dynamic Servers and the 2026 Transition

Fractional CFOs and accounting advisors can use the Model Context Protocol (MCP) with Microsoft Dynamics 365 Finance & Operations to securely access client data with AI assistants. This allows for faster, more efficient analysis without manual report pulling. Microsoft is currently transitioning its MCP architecture to dynamic servers, a change firms using the protocol will need to adapt to before 2026.

The business problem for advisory firms

Fractional CFOs and accounting teams manage multiple clients, many of whom use sophisticated ERP systems like Dynamics 365. The core challenge is accessing specific, timely financial information across these disconnected client instances efficiently and securely. Manually logging into each client's ERP, running standard reports, exporting data, and consolidating it for analysis is time-consuming and prone to error. Furthermore, providing broad ERP access to advisory staff can create security risks.

MCP addresses this by creating a secure, auditable, and specific access layer for AI assistants. An advisor can ask a question in natural language—like "What was the variance between budgeted and actual SG&A for Client X last quarter?"—and receive an answer directly sourced from the client's D365 instance, with a link to the underlying data for verification. This improves response times for client queries, standardizes reporting workflows, and enables deeper analysis without compromising security. For more on managing this across a client base, see our guide to multi-client CFO reporting.

Illustrative example: Reviewing accounts receivable across clients

A fractional CFO is preparing for weekly check-in calls with three clients, all using Dynamics 365 F&O. She needs a quick overview of each company's accounts receivable health.

1. The Prompt: Instead of logging into three different D365 portals, she opens her firm's AI assistant, which is connected via MCP to each client's ERP (with their permission).
2. The Query: She types, "For Client A, B, and C, show me the total AR balance, the amount over 90 days past due, and the largest overdue invoice for each. Present the results in a table."
3. The MCP Action: The AI assistant sends three separate, authorized queries through the respective MCP servers. Each server translates the request into a specific API call to its corresponding D365 instance, retrieving only the requested data points.
4. The Response: The assistant returns a consolidated Markdown table. Each number is traceable, and the CFO can ask follow-up questions like, "For Client B, pull the collection notes for that largest overdue invoice," and the AI will retrieve the relevant text from the D365 record.

This workflow transforms a 30-minute manual data-pulling exercise into a 30-second query, freeing up the CFO to focus on strategic advice for her clients.

Microsoft ERP MCP options compared

Microsoft offers several ways to use MCP with its business applications. Choosing the right one depends on your specific analytical needs. It is important to remember that MCP only provides a way for an AI assistant to access approved information; it does not establish record ownership or grant rights to sell or license data.

Prerequisites and limitations

Implementing MCP for a client's Dynamics 365 instance requires careful planning and an understanding of its limitations.

Prerequisites:

• Client Authorization: You must have explicit, written permission from an authorized decision-maker at the client company.
• System Access: The client's IT team must grant you access to a Dynamics 365 F&O environment with the necessary permissions to configure and operate the MCP server.
• Technical Expertise: Setting up the current version of the D365 ERP MCP server requires developer resources familiar with creating and deploying services in Azure.
• User Roles: All access should be governed by a dedicated, non-admin user role in D365 that is limited to read-only access on specific data entities required for your advisory function. Starting with a read-only MCP server is a critical security measure.

Limitations:

• The 2026 Transition: Microsoft is moving from a model where developers manually define MCP servers to one where they are dynamically generated from ERP metadata. Integrations built today will need to be updated to the new model. Always check the latest Microsoft documentation for timelines and technical requirements.
• Data Rights: MCP is a technical protocol for data access. It does not grant your firm any rights to license, sell, or use client data for any purpose beyond your agreed-upon advisory services. Data licensing is a completely separate legal and commercial process.
• Preview Status: The `Dynamics ERP Analytics MCP` is currently in preview. This means its features may change, and it should not be relied upon for production-critical workflows without acknowledging this risk.
• Customizations: If a client has heavily customized their D365 instance, those custom entities and fields may not be exposed via MCP by default and could require additional development work.
• Cost: Hosting the MCP server and the associated AI usage will incur costs. Be sure to understand the pricing implications for ERP MCP workflows before deployment.

Questions to ask your software provider or implementation team

1. What specific version of Dynamics 365 Finance & Operations is our client running, and does it support the latest MCP capabilities?
2. Who in the client's organization is the authorized approver for creating and configuring application access for a third-party tool like an MCP server?
3. What is our technical plan for migrating our MCP integrations to the new dynamic server model to meet the 2026 transition deadline?
4. Does our client primarily use standard D365 financial modules, or will we need to account for custom entities and reports that require specific configuration?
5. How will we configure user roles in Dynamics 365 to ensure our MCP connection is read-only and strictly limited to the data entities required for our engagement?
6. Have we evaluated whether the `Dynamics ERP Analytics MCP (Preview)` or `Power BI MCP` might be a better fit for our reporting needs than direct transactional data access?
7. What audit logging and access review processes will be in place to comply with our security policies and client agreements, aligning with controls like those found in SOC 2 and ISO 27001?

Next step with SourceX

As you guide clients in making their ERP data AI-ready, you are in a unique position to identify companies with valuable, well-structured operational data. These data assets—which capture real-world business workflows—are often sought after by AI labs and data buyers for training specialized models.

You can use the SourceX Company Fit Checker to quickly assess if a specific client might be a candidate for data licensing. If you have permission to screen several clients in your portfolio, our Portfolio Data Opportunity Scanner is a more efficient tool.

If a company you introduce is a fit, SourceX manages the entire data evaluation and licensing process directly with the company. For each successful introduction, referral partners receive 25% of the platform fees SourceX collects, up to $100,000 per referred company. This reward is your share of SourceX's fee and is entirely separate from the supplier company's own data licensing proceeds.

Related MCP guides

• NetSuite MCP Server: A Guide for CFO Advisory Firms
• MCP for Month-End Close: A Practical Guide for Accounting Advisors
• How to Use MCP for Multi-Client CFO Reporting Without Mixing Data
• All MCP resources

Sources

• Anthropic finance agents (May 5 2026)
• Intuit QuickBooks Online MCP (Current official repository)
• NetSuite AI Connector Service FAQ (Current Oracle docs)
• Dynamics 365 ERP MCP (Current Microsoft docs)
• Dynamics ERP Analytics MCP (Preview)
• Power BI MCP overview (Current Microsoft docs)

Vendor capabilities change. Check current official documentation before relying on any product detail.