How to Set Up Microsoft Copilot Studio
Connect AuditSwarm to Microsoft Copilot Studio for enterprise AI assistance.
Prerequisites
- Microsoft Copilot Studio access
- AuditSwarm account with admin permissions
Quick Setup (5 Steps)
Step 1: Open MCP Configuration
In Copilot Studio, click "Add a Model Context Protocol server (Preview)"
Step 2: Enter Server Details
| Field | Value |
|---|---|
| Server name | auditswarm-mcp |
| Server description | audit management system |
| Server URL | https://auditswarms-mcp-wf4a3tv3ka-uc.a.run.app/mcp |
Step 3: Select Authentication
- Authentication: OAuth 2.0
- Type: Dynamic discovery
Step 4: Create Connection
Click "Create" to save the MCP server configuration.
Step 5: Complete OAuth Login
You'll be redirected to AuditSwarm to authorize the connection. Sign in with your AuditSwarm account.
Critical Configuration Notes
Server URL Requirements
MUST use Cloud Run URL:
https://auditswarms-mcp-wf4a3tv3ka-uc.a.run.app/mcp
MUST include /mcp suffix - this is the JSON-RPC endpoint.
DO NOT use:
- Custom domain URLs (browser access only)
- URLs without
/mcpsuffix
OAuth Configuration
- No client ID or secret required
- Uses Dynamic Client Registration with PKCE
- OAuth endpoints auto-discovered from
/.well-known/oauth-authorization-server
Available Endpoints
| Endpoint | URL | Purpose |
|---|---|---|
| MCP Endpoint | https://auditswarms-mcp-wf4a3tv3ka-uc.a.run.app/mcp | For Copilot connections |
| Health Check | https://auditswarms-mcp-wf4a3tv3ka-uc.a.run.app/mcp/health | Test connectivity |
| OpenAPI Spec | https://auditswarms-mcp-wf4a3tv3ka-uc.a.run.app/openapi.json | API documentation |
| OAuth Metadata | https://demo.auditswarm.com/.well-known/oauth-authorization-server | Auth discovery |
Troubleshooting
Error: "Invalid token"
Cause: MCP server is missing NEXTAUTH_SECRET environment variable.
Solution (for admins):
gcloud run services update auditswarms-mcp \
--region=us-central1 \
--update-secrets=NEXTAUTH_SECRET=nextauth-secret:latest
Error: "Connector request failed"
Cause: Missing /mcp suffix in server URL.
Solution: Use the full URL with /mcp:
https://auditswarms-mcp-wf4a3tv3ka-uc.a.run.app/mcp
Error: "Authentication failed"
Cause: OAuth flow failed or token expired.
Solution:
- Remove the existing MCP server connection
- Re-add with the correct URL
- Complete OAuth login again
Testing the Connection
After setup, test the connection:
- In Copilot Studio, open the MCP server settings
- Click "Test" or ask the copilot to list audits
- Verify you see audit data from AuditSwarm
Available Tools
Once connected, your copilot has access to:
| Tool | Description |
|---|---|
suggest_change | Create, update, delete entities (via suggestions) |
query_data | Query audits, risks, controls, workflows |
get_current_context | Get user's current page context |
help | Get workflow guidance |
See MCP Tools Reference for complete documentation.
Next Steps
- MCP Tools Reference - Learn what your copilot can do
- How to Approve Suggestions - Handle AI suggestions
- Suggestions Pattern - Understand AI safety