SharePoint MCP Servers in Copilot Studio

Browsing around the Microsoft’s Frontier preview program i found these new SharePoint MCP servers for Copilot Studio. I was eager to find out where it’s all about. Here’s what I found.

What Even Are These Things?

So Microsoft released these MCP (Model Context Protocol) servers at Ignite 2025. Basically, your Copilot Studio agents can now talk directly to SharePoint. No Power Automate flows. No custom connectors. No spending three hours figuring out why OAuth won’t authenticate.

They give you two servers:

SharePoint Lists MCP Server — Create lists, add items, update stuff, query with filters. The usual CRUD operations but through your agent.

SharePoint and OneDrive MCP Server — Files and folders. Create them, move them (within the same site, more on that later), upload text files, share stuff.

The interesting bit? Everything runs with proper permissions. If you can’t access the Finance site, your agent can’t either. Unless you configure it to run as you (the maker), then everyone gets your permissions. Which can be great or terrible depending on what you’re building.

The Catch (Because There’s Always a Catch)

Before you get excited:

You need a full M365 Copilot license. Not just for you. For every single user who’ll use your agent. Yeah, that adds up fast. I tried testing with someone who didn’t have the license and it just failed. No workaround, no “it works but with limitations” — just nope.

You need to be in the Frontier preview program. So if you’re not already in it, you’re waiting until they open it up wider (supposedly Q2 2026).

File uploads are limited to 5 MB. They literally call it createSmallTextFile which should've been a hint. If you're thinking "I'll build a document management system" - you won't.

A Simple Example That Actually Worked

Setting it up is straightforward. In Copilot Studio, you go to Tools > Add a tool > Model Context Protocol, and you’ll see the catalog:

Where you find the SharePoint MCP servers

I built a task tracker agent. Nothing fancy — just something to manage project tasks in a SharePoint list.

The list had these columns:

• Title
• AssignedTo (person field)
• Status (Not Started / In Progress / Done)
• DueDate
• Priority

I told the agent: “You manage tasks in the Project Tasks list. Users can create tasks, update status, and find their tasks. Site ID is(hostname,siteCollectionId,webId), List ID is (guid)).”

Then you could ask: “Create a task: Renew M365 Copilot Subscriptions, assign to Vera, due date march 28th, High Priority”

The agent calls sharepoint_createListItem, fills in the fields, done. Took me maybe 10 minutes to set up (sharepoint list included). No code.

Or: “What are my open tasks?”

Agent calls sharepoint_listListItems with a filter for the current user and status not equal to Done. Shows the results.

That’s it. Simple, but it works.

The Authentication Thing Nobody Talks About

When you add an MCP server, you choose:

Run as user — Agent uses each person’s permissions. John can only see John’s stuff.

Run as maker — Agent uses YOUR permissions. Everyone can see everything you can see.

I used “run as user” for the task tracker because people shouldn’t see each other’s tasks. But I made a dashboard agent with “run as maker” so everyone could see the same company metrics even if they didn’t have access to the underlying lists.

Pick the wrong one and you either break your agent (users can’t access anything) or break your security model (everyone can access everything). Fun times.

What I Found Annoying

The docs are sparse. It’s Frontier preview so I get it, but I spent a lot of time guessing what parameters do what. The tool descriptions help but they’re not comprehensive.

OData filters are powerful but finicky. You can do complex queries like filter: "Priority eq 'High' and Status ne 'Done' and DueDate lt '2026-03-01'" which is great until you get the syntax wrong and it just fails with a cryptic error.

Moving files only works within the same site. I wanted to move a document from HR to Finance. Nope. Same site only. Why? No idea.

Search has a delay. Site searches need consistencyLevel: "eventual" which is Microsoft speak for "it'll be ready when it's ready." Usually under a minute but still.

What Actually Impressed Me

The agent just… figures stuff out. I asked “Show me high priority tasks due this week” and it built the right OData filter without me teaching it query syntax.

The security model works. DLP policies, sensitivity labels, conditional access — they all still apply. IT can see everything in the audit logs. For once, security isn’t an afterthought.

Setup took 5 to 10 minutes. Add the MCP server, authorize, done. I’ve spent longer trying to configure a single Power Automate connector.

The Real Question: Should You Use This?

If you’re building internal agents where users need to interact with SharePoint in natural language — yeah, this is pretty solid.

If you’re thinking document management — no. File size limits kill that dream.

If you don’t have M365 Copilot licenses for everyone — don’t bother. The licensing requirement is a hard blocker.

If you need this in production next week — you can’t. Frontier preview only. Wait for GA.

I’ll keep using it for internal stuff. It’s legitimately faster than building Power Automate flows for simple SharePoint operations. But I’m not pretending it’s perfect.

The Actual Technical Bits

For those who want specifics:

Available tools in SharePoint Lists MCP:

• Create/update/delete list items
• Create/edit/delete columns
• Query items with OData filters
• Search sites
• Manage list schemas

Available tools in SharePoint Files MCP:

• Create/rename/delete folders
• Upload/download small text files (< 5 MB)
• Move files (same site only)
• Share files with permissions
• Set sensitivity labels
• Search for files and sites

Performance:

• Simple queries: ~1 second
• Creating items: 2–3 seconds
• Site searches: 2–4 seconds

Not instant but fast enough for conversation.

My honest opinion

This is useful but not there yet. It makes SharePoint automation easier if you’re already building Copilot Studio agents. The licensing requirement is annoying but understandable. The file size limits are frustrating. But for simple list operations and task management? It works well.

If you’re in the Frontier program, try it. If you’re not, bookmark this for later.

Resources if you want to dig deeper:

• SharePoint Lists MCP Server docs
• SharePoint Files MCP Server docs
• Join Frontier Program

Have you already used the Sharepoint MCP Servers in Copilot Studio?