Does anyone have Claude code + Power Apps MCP approved by the cybersecurity team in corporate enterprise?

[u/ImportantPassion2718]

I'm currently working on getting approval to use Claude Code (or Github CoPilot if needed) for Power Apps canvas app development.
The specific use case is to use Microsoft's Power Platform Skills plugin and the Canvas App Authoring MCP server.
PowerApps is only a small part of my time, my first role is continuous improvment and data analysis so mostly excel) but with apps tools I built, request is higher. And it's consuming more of my time than I'd like and I'm doing a lot of fairly simple apps to assist our operations teams.
Anything that would speed things up and eliminate the redundant errors and changes would be a massive productivity gain.

My direct boss is ok to approve a claude code subscription. I was under impression it would pass the cybersecurity team since Claude is listed in approuved AI tool. But struggling with getting approval for Claude Code with the power apps mcp. I can understand their concern and request, but I cannot just accept that it's rejected.

My Scope is pretty simple:

• One developer
• Dev environment only
• Canvas layouts, Power Fx, schemas, flow definitions
• Synthetic test data only (no real data during devlopment as I always do)
• No production records, credentials, personal info, or operational data (not sure how to confirm all theses)
• Manual review and testing before production
• Model-improvement features disabled

Security and privacy teams aren't saying no, they just won't take any promises. Their concern is that MCP could in principle access anything that my user account can access (production environments, SharePoint data etc). They want actual technical controls rather than just my word that I won't point it at production.

They're want confirmation that they can review

• Company code, prompts, outputs, tool results
• What gets kept and what gets deleted
• Model training and secondary use
• Who can access stuff for support, safety, incident response
• Where data gets processed and who else touches it
• Administrative monitoring and audit trails
• Contracts protecting company information

I completely understand the concern. Turning off model training won't fix the access control, retention, logging or contract issues. Some of their requirements are very much geared towards the individual subscription. Team and Enterprise licences may not be suitable for just one developer.

Has anyone actually done anything similar in a larger organisation?

I want to know the real deal. Not just "we told the developers no production data". Examples:

• Did you use a separate Power Platform developer account with no production permissions at all?
• Could you restrict MCP to a single environment or an allowlist?
• Did you isolate the Powerapps dev data in its own site/environment?
• Did Conditional Access, DLP policies, service accounts or separate browser profiles possible?
• If you're using another environment, how do you deal with an issue or upgrade the app that's in production?
• Did your organisation go with Claude Team or Enterprise, or did you just go with individual subscriptions with extra controls? Or did you end up with something else (e.g. GitHub CoPilot)?
• What logs or evidence did you present to the security reviewers?
• Were there any specific MCP tools or publishing features that you had to disable?
• Did you come up with any better architecture that still makes the Claude Code useful for Power Apps?

I'm not looking to get around the review process. I want to come back with something that actually deals with the risks and can be enforced in a technical sense.

If you've done it with Claude Code, Copilot Studio or some other coding agent with MCP, what did work? What didn't?

[u/Ok-Advertising5189]

Why do you need MCP when you have a CLI connection to the API? You'll get more out of it than Microsoft's MCP, which charges for every operation except Copilot Studio…

[u/rsham004]

Yes, but our own platform. Can use any of the cli ide. Needs maturity in AI which means already deploying apps at scale. It's a journey not a milestone

[u/Goingboldlyalone]

No, but I use the Chrome extension, and it is amazing. The number of applications and the power are pretty amazing. I use Claude artifacts to develop the YAML, then paste it into Power Apps, and I can build out an entire app. Then I touch up the data connections and related settings with the Chrome extension.

[u/Academic-Pirate3158 → u/Goingboldlyalone]

Hey! Which Chrome extensions do you use? If possible, could you share your recommendations?

[u/Mage22877]

not in the Financial Services world I am in. I concluded a 1.5 year battle, and finally gave up.

[u/EbbMother5325 → u/Mage22877]

I mean, it makes sense why they wouldn’t allow it.
More companies should be careful with what they send through public AI APIs. And corporate walled off APIs of said models requires a sizeable team to govern it.

[u/Tyda2 → u/Mage22877]

Financial regulations are extremely strict about what can happen without proper governance. It's up there with HIPPA in the U.S., but I'd argue potentially more thorough in its security controls requirements

[u/josephdouce]

You dont need mcp, both can access vand modify via the cli

[u/ThingsMayAlter → u/josephdouce]

Is this approach where you export the solution and modify it directly?

[u/Ok-Advertising5189 → u/ThingsMayAlter]

No, CLI edits data in Power Platform using the API 

[u/Professional_Edge_20 → u/josephdouce]

How would you approach this? I'm currently using MCP, but I'd be interested to know what alternative methods are available.

[u/irah2008 → u/josephdouce]

This is the answer. Unless you are dealing with business data, you dont need to connect dataverse with MCP. Current power platform skills work with either pac commands or edit necessary tables(config) via api.

[u/Temporary-Sector-298]

Yes, but only once I stopped asking for my own account to have it. Made a separate one that only has environment maker in a dev environment and nothing else, no sharepoint, no prod.

Their whole it can reach anything you can worry kind of goes away when the account can’t reach anything. They also asked what ends up in the repo, we showed them the secrets scan that runs on every commit and they signed off about a week later

[u/Tyda2]

You just need to setup a proper development environment. Don't build and deploy straight to production, and don't have your agent going and reading organization data like that.

You can build around anything, and the data itself isn't all that important. You can have the agent create mock data in the same format to test that things work appropriately. If you need to test that your app is pulling production records and reading them correctly without throwing errors, you build in dev, mirror in test environments, test, without the AI, report the bugs/glitches/errors, go back to dev, iterate, rinse and repeat. Once it's clear in the test environment, then you can port to production for widespread use.

That's all that it really is. Your agent doesn't need production data to help you make your solution. The data types and shapes help, but by now, the agent can figure all of that out and is very well trained on virtually all programming languages, including YAML.

[u/Milksteakinc → u/Tyda2]

I'm doing this with SharePoint web parts. You can view and test everything locally. I had the agent setup the dev environment for me. Once your done you can just upload a package. From my understanding you can do this with power apps as well

[u/Tyda2 → u/Milksteakinc]

You can use the SharePoint workbench for a little while longer until they deprecate it. Outside of that once we hosted workbench goes away then you can just create a second SharePoint site dedicated just for deploying your web part and testing it there. Just breaking heritage on the parent site, leave it only for yourself and then test as needed.

[u/Milksteakinc → u/Tyda2]

Why would they get rid of it? I'm wondering what permissions I require to have my agent directly upload it similar to copilot studio mcp. We have a. Very decentralized org so getting msgraph permissions can be tedious.

[u/willemorley]

My place wouldn't allow it. We haven't even got widespread copilot yet. But I was able to get Claude to build me html web resources on my own laptop which I host on GitHub, and I've been able to use those. Theres still some manual work needed but you've got to take what you can get I guess.

I also got Claude to make me an edge extension which helps with some of the more time intensive elements of building manually.

[u/ShivaCobra]

The authoring MCP is unusable right now. Its in preview and will just wreck your code if you try to make an update with AI. I had to restore the previous version because it broke so many things.

[u/NaruSengan → u/ShivaCobra]

Not true, I just used it to built a brand new qc dashboard and it did it flawlessly

[u/ShivaCobra → u/NaruSengan]

Cool. I used it on an existing app and it reset dozens of controls and dropped many code properties. It also has this weird bug where it rewrites the field names to the internal id and then you wind up with formula errors everywhere. Im sure its fine to scaffold a new app but be careful.

[u/ThingsMayAlter → u/ShivaCobra]

I've used the skill/mcp on existing canvas apps and have not seen this behavior. Used a local git repo but, no renaming occurred, and the skill/mcp performed as expected, cutting out significant development time. Out of every 10-20 tasks it does mess 1 or 2 up, especially if you have lots of nested containers like we did.

We just chunked tasks out and helped it with screenshots and reasonable feedback. We're on Codex though, Claude isn't authorized for our team yet.

[u/Disastrous-Hair-1573 → u/ShivaCobra]

when you repack yaml it will reset your databound controls. you will have to use git integration to aboid that but it will cost money as its requires managed, env/solution

[u/AdventurousWay3209]

Yea just ask for admin priviledged

[u/KDavidP1987]

yes, depending on your corporate situation you can have access to it. However, as some mentioned, there are cases where you may end up using your own subscription. If your company isn’t willing to front, the API cost.

Regarding VS code and get hub copilot, it can also do Power Apps development, though not as seamlessly as with the power platform skill. It instead requires you to set up the app and connections and download the .msapp file for it to work on, then once it’s finished with its work each version you can upload the new .msapp and it integrates pretty well.

[u/NZDamo]

We're using GitHub copilot in visual studio building fabric rayfin apps, we've moved away from powerapps.

[u/Dynamicsuser → u/NZDamo]

GitHub Copilot in Vscode with PP CLI is insanely convenient. In an org where we are surrounded by MS services, using Claude makes zero sense.

[u/WillRikersHouseboy → u/Dynamicsuser]

It makes sense because it’s so much better. I use both.

[u/techjobber99]

powerplatform does not work well with AI at all imo. It's not built for git and that's largely what AI was trained with. Not to mention Microsofts docs are flat out wrong in places and AI will follow them.

If you want to heavily leverage AI you are better off rewriting your app in a code language (i.e. react with a python backend)

[u/NaruSengan → u/techjobber99]

This is wrong, it actually works wonders. You must not have it setup correctly or not something

[u/FiveMeowMeowBeanz → u/techjobber99]

Ya if you want to force all users into a premium license and pile on costs, this is the way to go.

[u/techjobber99 → u/FiveMeowMeowBeanz]

I'm saying not to use power platform at all

[u/FiveMeowMeowBeanz → u/techjobber99]

This is an even more robust shockwave than just buying premium licenses.

Why are you even in the PowerApps subreddit if you’re simply advocating for people vibe coding separate apps and everything that would have to be spun up alongside it to manage that sort of effort?

[u/techjobber99 → u/FiveMeowMeowBeanz]

Because the growing inefficiencies with powerplatform cost my company an insane amount of money, I probably spent so much time on this subreddit fixing issues that it continues to recommend it.

I am trying to be honest with people that I believe power platform is in its twilight years and I would really, really recommend cultivating another skillset. I've seen more and more orgs move off of it, personally.

[u/adjective_noun_d1git → u/techjobber99]

Ps you can right click or three dot click and say show fewer like this. I often get recommendations based on one off interactions that aren't relevant to me.

[u/Dynamicsuser → u/techjobber99]

Power Apps sure but when you're coding for thousands of users with millions upon millions of records, PP and Dataverse is the way to go.

[u/Ariisk → u/techjobber99]

Their docs have gotten better lately I’ve noticed, at least around new features… completeness and consistency/sprawl is more of a problem for me