configure-canvas-mcp
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill executes shell commands (such as
claude mcp add) and performs file system operations (reading and writing configuration files likemcp.json) to register the MCP server. These operations are necessary to integrate the server with the user's local development environment. - External Dependencies: The skill utilizes the .NET tool runner to download and execute the
Microsoft.PowerApps.CanvasAuthoring.McpServerpackage from the official NuGet registry (api.nuget.org). Fetching packages from established, official registries is a standard method for distributing and updating software tools. - Dynamic Configuration: The skill processes user-provided URLs to extract specific identifiers, such as environment and application IDs, which are then used to populate the configuration. While this process involves interpolating user input into commands, it is used here to ensure the MCP server is correctly scoped to the user's specific Power Platform environment.
Audit Metadata