🚀 106 Tools. One MCP Server. Claude Desktop + Copilot Studio — Microsoft Purview on Full Autopilot

New · Complete Guide · 2026

106 Tools. One MCP Server.
Total Microsoft Purview Control.

The step-by-step guide to building an AI-powered security command center that connects Claude Desktop and Copilot Studio to Microsoft Purview, SharePoint, and the entire M365 security stack.

106

Tools

12

Modules

35

Presets

7,628

Lines

⭐ Download from GitHub →

📋 What You'll Build — 10 Steps

1️⃣ What is MCP? 2️⃣ Architecture Overview 3️⃣ Azure App Registration 4️⃣ API Permissions 5️⃣ Install & Build 6️⃣ Configure Claude Desktop 7️⃣ Your First Audit Search 8️⃣ Deploy to Azure 9️⃣ Connect Copilot Studio 🔟 All 106 Tools

---

1️⃣ What is MCP and Why Should You Care?

Imagine telling an AI assistant: "Search all Copilot interactions from the last 6 months, generate an analytics report, and upload it to SharePoint" — and it just does it. No scripts. No portals. No clicking through 47 tabs.

Model Context Protocol (MCP) is an open standard created by Anthropic that lets AI assistants like Claude and Microsoft Copilot Studio connect to external tools through a standardized interface.

🎯 What This Server Does

🔍 Audit Search
Search any M365 audit log

📁 SharePoint
Sites, lists, files, sharing

🤖 Copilot Tracking
Usage, security, dashboards

📊 Threat Hunting
10 MITRE ATT&CK presets

🏷️ Sensitivity Labels
Apply, remove, scan labels

🛡️ Security
Alerts, eDiscovery, risk

💬 "Run a brute force threat hunt for the last 30 days"

💬 "Apply the Confidential label to all files in HR Documents"

💬 "Run Copilot usage pipeline for last 6 months, upload to SharePoint"

---

2️⃣ Architecture: How It All Connects

🖥️ Mode 1: Claude Desktop (Local)

You type → Claude Desktop → MCP Server (stdio) → Graph API → Purview

☁️ Mode 2: Copilot Studio (Azure)

User asks agent → Copilot Studio → Azure App Service → Graph API → Purview

---

3️⃣ Create Azure App Registration

1Go to portal.azure.com → sign in as admin

2Search App registrations → click + New registration

3Name: Purview MCP Server · Single tenant · No redirect URI → Register

4Copy Application (client) ID and Directory (tenant) ID

🔑 Create Client Secret

1Certificates & secrets → + New client secret → 24 months → Add

!IMMEDIATELY copy the Value — you can only see it once!

---

4️⃣ Add API Permissions (18)

Click API permissions → + Add → Microsoft Graph → Application permissions:

Permission	Purpose	Required
AuditLogsQuery.Read.All	Purview audit search	✅
AuditLog.Read.All	Sign-in + directory logs	✅
Sites.ReadWrite.All	SharePoint	✅
Files.ReadWrite.All	File operations	✅
SecurityAlert.ReadWrite.All	Security alerts	✅
SecurityIncident.ReadWrite.All	Incidents	✅
SecurityEvents.Read.All	Secure Score	✅
IdentityRiskEvent.Read.All	Identity risk	✅
InformationProtectionPolicy.Read.All	Sensitivity labels	✅
Policy.Read.All	Conditional Access	✅
Reports.Read.All	Usage reports	✅
ServiceHealth.Read.All	Service health	✅
Mail.Send	Email notifications	Optional

⚠️ After adding all permissions, click "Grant admin consent". All should show green checkmarks ✅.

---

5️⃣ Download, Install & Build

📦 Download from GitHub

# Option 1: Clone with Git
git clone https://github.com/PowerofAutomation2026/MCP.git
cd MCP/purview-mcp-server

# Option 2: Download ZIP
# https://github.com/PowerofAutomation2026/MCP → Code → Download ZIP

⭐ PowerofAutomation2026/MCP on GitHub

📋 Prerequisites

1. Node.js 20+ — download from nodejs.org

2. Azure CLI — aka.ms/installazurecliwindows (only for Azure deploy)

🚀 Build

cd C:\Projects\purview-mcp-server
npm install
npm run build

✅ No errors = ready! Compiled files in dist/ folder.

---

6️⃣ Configure Claude Desktop

Open %APPDATA%\Claude\claude_desktop_config.json and add:

{
  "mcpServers": {
    "purview": {
      "command": "node",
      "args": ["C:\\Projects\\purview-mcp-server\\dist\\index.js"],
      "env": {
        "PURVIEW_TENANT_ID": "ENTER_YOUR_TENANT_ID",
        "PURVIEW_CLIENT_ID": "ENTER_YOUR_CLIENT_ID",
        "PURVIEW_CLIENT_SECRET": "ENTER_YOUR_SECRET",
        "PURVIEW_EXPORT_PATH": "C:\\Projects\\PurviewExports"
      }
    }
  }
}

Save → Create C:\Projects\PurviewExports folder → Fully quit Claude Desktop (system tray → Quit) → Reopen.

---

7️⃣ Your First Audit Search

Test 1: Connection

💬 "List all Purview audit searches"

Test 2: Create Search

💬 "Create audit search for CopilotInteraction events from last 7 days"

Test 3: Full Pipeline

💬 "Run Copilot usage pipeline for last 6 months, upload to SharePoint"

🔍 Search → ⏳ Wait → 📄 CSV → 📊 Dashboard → 📁 SharePoint

---

8️⃣ Deploy to Azure App Service

cd C:\Projects\purview-mcp-server

.\deploy-azure.ps1 `
  -TenantId "YOUR_TENANT_ID" `
  -ClientId "YOUR_CLIENT_ID" `
  -ClientSecret "YOUR_SECRET"

The script handles everything: Azure login, resource creation, build, package with node_modules, deploy, verify health.

🔧 Key Azure Fixes Built In

Fix	Solution
WAM Auth bug	az config set core.enable_broker_on_windows=false
Azure build fails	Skip Oryx build, include node_modules in zip
Startup resets	Re-apply node dist/web.js after env vars + deploy
MCP transport fails	Manual JSON-RPC handler (bypasses SDK)
Free tier quota	Auto-detect + offer B1 upgrade

---

9️⃣ Connect to Copilot Studio

1Go to copilotstudio.microsoft.com

2Open your agent → Tools → Add a tool

3New tool → Model Context Protocol

4URL: https://YOUR-APP.azurewebsites.net/mcp

5Auth: None → Create → Select all 106 tools → Add

6Settings → Generative AI → Turn ON Generative Orchestration

✅ Your Copilot agent now has 106 Purview tools! Try: "Search for Copilot interactions from last 7 days"

---

🔟 All 106 Tools at a Glance

🔍 Audit Search (7)
search · status · list · results · delete · export · full pipeline

📁 SharePoint (28)
upload · sites · lists · CRUD · files · sharing · pages · permissions

📋 Workload Presets (35)
Exchange · SP · OD · Teams · Entra · PP · Copilot · DLP · Compliance

🤖 Copilot (5 + 3 security)
tracking · pipeline · dashboard · trends · agent security scan

📊 Analytics (7)
risk scoring · 10 MITRE hunts · executive summary · timeline

🏷️ Labels (7)
list · apply site · apply library · default · extract · remove

🛡️ Security (17)
alerts · incidents · Secure Score · eDiscovery · risk · KQL · privacy

🏥 Health & Reports (12)
service health · sign-in logs · CA · usage · Teams · SP · email

---

🔧 Troubleshooting

Error	Fix
segment not found	Auto-retries beta endpoint. Check AuditLogsQuery.Read.All permission.
403 Forbidden	Grant admin consent (Step 4)
Search stuck	Normal — takes 2-15 min. Keep polling.
403 Site Disabled	Free tier quota exceeded — upgrade to B1
Copilot no tools	Delete old MCP tool, re-add with correct URL
Not in Claude	Fully quit (system tray → Quit) + restart

Power of Automation

powerofautomation2025.blogspot.com · GitHub: PowerofAutomation2026/MCP

Purview MCP Server v6.0 · 106 Tools · 12 Modules · 7,628 Lines · TypeScript

© 2026 Power of Automation. All credentials shown are placeholders.