{ "data": { "a": { "slug": "copilot-studio-mcp", "name": "Microsoft Copilot Studio MCP", "vendor": "Microsoft", "vendorUrl": "https://learn.microsoft.com/en-us/microsoft-copilot-studio/", "kind": "mcp", "category": "workflow-automation", "summary": "Microsoft's official MCP server for Copilot Studio, a local stdio bridge run with npx. After Microsoft work-account sign-in it exposes Copilot Studio's hosted tools for building, testing and monitoring agents and workflows, and for connector setup.", "url": "https://www.anchorterminal.com/tools/copilot-studio-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/copilot-studio-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/copilot-studio-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/copilot-studio-mcp.json", "repo": "https://github.com/microsoft/copilot-studio-mcp", "license": "No licence in the npm package. The GitHub repository's LICENSE is MIT, but the repository holds no source code", "transports": [ "stdio" ], "packages": [ { "registry": "npm", "name": "@microsoft/copilot-studio-mcp" } ], "auth": "oauth", "authNotes": "Microsoft Entra ID sign-in with a work or school account, in the browser through a localhost redirect, using a fixed public client (the VS Code client, `51f81489-12ee-4a9e-aaae-a2591f45987d`). Client-ID and tenant overrides are not supported, and personal Microsoft accounts are refused. The bridge requests delegated Power Platform API scopes per step, which are `EnvironmentManagement.Environments.Read` for discovery, `CopilotFlows.ChatAssistant.Execute` for the Copilot Studio service, and `Connectivity.Connectors.Read`, `Connectivity.Connections.Read` and `Connectivity.Connections.Write` for connector setup. Tokens stay in process memory and are discarded on sign-out or exit, so each restart needs a new sign-in. No device-code or service-principal route was found in the package (checked 2026-10-17). The README says installing the package grants no licence, tenant consent or environment permission.", "pricing": "usage", "pricingNotes": "The package is free. Use of Copilot Studio is measured in Copilot Credits, sold as tenant-wide packs of 25,000 credits at $200.00 a pack a month, as a pay-as-you-go meter billed to an Azure subscription, or as a one-year prepurchase plan, per Microsoft's pricing page. For agents, workflows and apps on the GitHub Copilot harness, credits are charged from the moment building starts, including previews, tests and evaluations, and credits per task vary. An individual can sign up for a Copilot Studio trial with a work account, but the trial article covers the standard harness and trial agents can't be published. No card requirement was stated on the pages read (checked 2026-10-17).", "priceSummary": "$200 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the package source, README, pricing page or billing docs (checked 2026-10-17). Credits are bought through Microsoft licensing or an Azure subscription.", "endpoints": [] }, "toolCount": 14, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://www.npmjs.com/package/@microsoft/copilot-studio-mcp", "registryName": "com.microsoft/copilot-studio", "capabilities": [ "automation.workflows", "automation.apps" ], "tags": [ "official", "mcp", "local", "npm", "oauth", "entra-id", "enterprise", "usage-priced", "new" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 53.1, "grade": "D", "agentReady": false, "rank": 798, "ranked": true, "rankOf": 1133, "categoryRank": 16, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 62, "maintenance": 55, "payments": 20, "reliability": 46, "schema": 53, "security": 70, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "Entra sign-in with per-resource scopes, tokens kept only in memory, and a plan-then-confirm step before connector writes. The package is a day old, the linked MIT repository holds no source, no changelog or support channel exists, the five cloud tools' schemas are visible only after sign-in, and workflow tests run live workflows billed in Copilot Credits.", "bestFor": "Teams already on Copilot Studio that want a coding agent or CLI to build, test, deploy and monitor Copilot Studio agents and workflows, and to set up their connectors.", "strengths": [ "Microsoft Entra sign-in with delegated Power Platform scopes requested per step, tokens held only in memory and personal accounts refused", "Connector setup is split into a read-only plan and a write that needs the plan ID and `confirm: true`", "All nine local tools carry readOnlyHint, destructiveHint and idempotentHint annotations, and the connector write is marked destructive", "Errors say whether a write may have completed and whether a retry is safe, with distinct network cause codes", "Listed in the official MCP registry under the DNS-verified `com.microsoft` namespace" ], "weaknesses": [ "First published on 16 October 2026, with two releases and no release notes or changelog", "The repository holds no source, and the npm package carries no licence, so the MIT label covers only an empty repository", "The five service tools are dispatchers taking `action` and `parameters`, and their schemas are readable only after sign-in", "No headless sign-in. Each restart needs a browser sign-in with a work account", "SUPPORT.md is Microsoft's unedited template, so no support channel is named" ], "agentNotes": [ "Call `copilot_studio_status` first and reuse a ready session. Don't reconnect or reselect an environment to start a new task", "Read an action's contract with `discover_resources` and `action=describe_actions` before building unfamiliar `parameters`", "Ask the person before testing a workflow. Tests run published, enabled workflows and can have real effects", "Never retry an uncertain write. Inspect the agent, workflow or connection first, as the error text says", "Expect a browser sign-in after every restart. Tell the person a window is opening and never ask for credentials in chat" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.1 } ], "editorialScores": { "ergonomics": 62, "maintenance": 55, "payments": 20, "reliability": 46, "schema": 53, "security": 70, "transparency": 47 }, "provenanceScore": 83 }, "connect": { "install": "npx -y @microsoft/copilot-studio-mcp@latest", "config": { "mcpServers": { "copilot-studio-mcp": { "args": [ "-y", "@microsoft/copilot-studio-mcp@latest" ], "command": "npx" } } } }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/copilot-studio-mcp" }, "sameCompany": [ "azure-foundry-fine-tuning", "azure-ai-content-safety", "azure-speech-to-text", "azure-text-to-speech", "microsoft-agent-framework", "microsoft-execution-containers", "microsoft-entra-agent-id", "azure-key-vault", "azure-document-intelligence", "azure-devops-mcp", "microsoft-learn-mcp", "playwright-mcp", "azure-mcp", "azure-maps", "azure-translator", "microsoft-graph-calendar", "azure-blob-storage", "onedrive-sharepoint", "microsoft-teams", "dynamics-365-sales", "power-automate", "foundry-local", "microsoft-decision-1", "microsoft-advertising-api", "microsoft-excel-graph", "outlook-mail-graph", "microsoft-graph-people" ], "area": "business", "unitPrices": [ { "item": "Copilot Credit pack, 25,000 credits", "unit": "month", "usd": 200, "note": "Tenant-wide. Pay-as-you-go through an Azure subscription and a one-year prepurchase plan also exist. The package adds no charge" } ], "provenance": { "legalEntity": "Microsoft Corporation", "domain": "microsoft.com", "domainRegistered": "1991-05-02", "domainNote": "The bridge connects to api.powerplatform.com, environment.api.powerplatform.com and login.microsoftonline.com, all Microsoft domains. microsoft.com publishes a security.txt, but it passed its Expires date on 2026-09-23.", "endpointOnVendorDomain": true, "terms": "https://go.microsoft.com/fwlink/?linkid=2182773", "privacy": "https://www.microsoft.com/en-us/privacy/privacystatement", "statusPage": "https://status.cloud.microsoft", "changelog": "", "securityTxt": "expired", "checked": "2026-10-17", "notes": [ "The repository's LICENSE reads Copyright (c) Microsoft Corporation, and the npm package is published by Microsoft's `microsoft1es` and `microsoft-oss-releases` accounts.", "Copilot Studio's security and governance page says the service is governed by the customer's commercial agreements, the Microsoft Product Terms (the terms link) and the Data Protection Addendum. Neither document was read today.", "The privacy link is the Microsoft privacy statement, carried from our other Microsoft listings and not read again today.", "https://www.microsoft.com/.well-known/security.txt carries Expires 2026-09-23T16:00:00.000Z when read on 2026-10-17, with the MSRC researcher portal as contact.", "status.cloud.microsoft returned only its page shell to our reader. Power Platform service health for a tenant is in the admin centres behind an admin sign-in.", "No changelog was found for the package. Its npm versions carry no release notes and the repository has no tags or CHANGELOG file.", "Domain registration date carried from our other Microsoft listings (RDAP, 1991-05-02), not looked up again today." ], "score": 83 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/copilot-studio-mcp.json", "live": { "slug": "copilot-studio-mcp", "vendorStatus": { "page": "https://status.cloud.microsoft", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-17T22:50:56.033601452Z" }, "pages": [ { "url": "https://go.microsoft.com/fwlink/?linkid=2182773", "kind": "terms", "status": 0, "checkedAt": "2026-10-17T23:03:42.503848369Z", "changedAt": "0001-01-01T00:00:00Z", "blockedByRobots": true } ], "updatedAt": "2026-10-17T23:03:42.503848369Z" } }, "answer": "Kestra scores 63.6 (B) on agent readiness against Microsoft Copilot Studio MCP's 53.1 (D), and leads in 6 of 7 scored categories. Microsoft Copilot Studio MCP leads on security \u0026 auth.", "b": { "slug": "kestra", "name": "Kestra", "vendor": "Kestra Technologies", "vendorUrl": "https://kestra.io", "kind": "http-api", "category": "workflow-automation", "summary": "Kestra is an open-source workflow orchestrator from Kestra Technologies. Flows are written in YAML and run on a server the owner hosts, with a REST API, SDKs in four languages and flows exposed as MCP tools.", "url": "https://www.anchorterminal.com/tools/kestra", "markdownUrl": "https://www.anchorterminal.com/tools/kestra.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kestra.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kestra.json", "repo": "https://github.com/kestra-io/kestra", "license": "Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "oci", "name": "kestra/kestra" }, { "registry": "pypi", "name": "kestrapy" }, { "registry": "npm", "name": "@kestra-io/kestra-sdk" } ], "auth": "mixed", "authNotes": "The open-source edition takes HTTP Basic auth with one username and password, set in `kestra.server.basic-auth` or on the setup page at first start. That credential has full access. Bearer API tokens, service accounts, OAuth, SSO and role-based access are in the Enterprise Edition and Kestra Cloud only. Access to open source is self-serve, by running the server. Webhook triggers are called with a key in the URL path.", "pricing": "freemium", "pricingNotes": "The open-source edition is free under Apache-2.0 with unlimited flows and executions, and an agent can start on it with no contract or account. Enterprise Edition is an annual subscription per instance through sales, with no public price. Kestra Cloud is by access request, with 14 days free and no card, then billed on task runs and Cloud runner time at rates that are not published (https://kestra.io/pricing, checked 2026-10-08).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI spec or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 29427, "npmWeekly": 244, "pypiWeekly": 170, "asOf": "2026-10-08" }, "docsUrl": "https://kestra.io/docs", "llmsTxt": "https://kestra.io/llms.txt", "openapi": "https://kestra.io/kestra.yml", "capabilities": [ "automation.workflows", "automation.code", "automation.webhooks", "automation.apps", "agent.tools" ], "tags": [ "self-hosted", "open-source", "local", "hosted", "freemium", "openapi", "llms-txt", "mcp", "python", "typescript", "java", "go", "webhooks", "enterprise", "soc2" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 63.6, "grade": "B", "agentReady": false, "rank": 424, "ranked": true, "rankOf": 1133, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 93, "payments": 50, "reliability": 89, "schema": 82, "security": 41, "transparency": 69 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -7, "negativeNotes": [ "Five advisories rated critical were published on the repository in six months. GHSA-365w-2m69-mp9x (CVE-2026-34612, remote code execution through SQL injection, 30 March 2026), GHSA-5vc5-wxxq-3fjx and GHSA-2q47-568g-9h4f (CVE-2026-49869 and CVE-2026-53576, unauthenticated remote code execution through authentication filter bypass, 3 June 2026), and GHSA-rjhm-qm6w-m7x9 and GHSA-j5cv-8rw9-vv2p (unauthenticated remote code execution and authentication bypass, 29 September 2026). All are fixed, in 1.3.38 and 1.0.60 at the latest, and the maintainers published each one, so the deduction is reduced (https://github.com/kestra-io/kestra/security/advisories).", "Two further high advisories affected the default open-source setup. GHSA-hrr4-xg8h-5p6f, an unauthenticated gRPC control plane on port 50051, fixed in 2.0.3 and published 29 September 2026, and GHSA-94pv-f379-3gp3, a revoked administrator credential that stayed valid, fixed in 1.3.41 and published 6 October 2026 (https://github.com/kestra-io/kestra/security/advisories)." ], "verdict": "Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.", "bestFor": "Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.", "strengths": [ "OpenAPI 3.0.1 spec for the open-source API with 216 operations, 213 of them documenting 401, 403 and 500 as problem+json", "Every docs page is served as Markdown by adding `.md`, with `llms.txt` and `llms-full.txt`", "32 releases between 15 July and 5 October 2026, with patches each week on the 1.3 and 2.0 long-term support lines", "Any flow becomes an MCP tool through `McpToolTrigger`, with read-only, destructive and idempotent hints set per flow", "Apache-2.0 server, and usage reporting documented field by field with two switches to turn it off" ], "weaknesses": [ "The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud", "Five critical advisories from 30 March to 29 September 2026, four of them unauthenticated remote code execution or authentication bypass, all fixed", "Kestra Cloud is request-access with no public price, and Enterprise is sold by annual contract through sales", "No rate limits and no idempotency key on the API. The correlation ID pattern needs a guard written into the flow", "The docs say `kestrapy` 2.0.1 imports `regex` without declaring it, so a plain install fails on import" ], "agentNotes": [ "Run 2.0.5 or 1.3.42 or later. Earlier builds carry unauthenticated remote code execution advisories fixed in 1.3.38 and 2.0.3", "Set `kestra.server.basic-auth` in the config file before first start. Without it the setup page is open to anyone who reaches the port", "Put the tenant in the path. Open-source instances use `main`, as in `/api/v1/main/executions/{namespace}/{id}`", "Send flow inputs as multipart form fields, and add `wait=true` to get the finished execution in the same call", "Keep port 8081 off any shared network. The management endpoints there skip the API's basic auth" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 4, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.6 } ], "editorialScores": { "ergonomics": 73, "maintenance": 93, "payments": 50, "reliability": 89, "schema": 82, "security": 41, "transparency": 86 }, "provenanceScore": 51 }, "connect": { "install": "docker run --pull=always --rm -it -p 8080:8080 --user=root --name kestra -v kestra_data:/app/storage -v kestra_db:/app/data -v /var/run/docker.sock:/var/run/docker.sock -v /tmp:/tmp -e KESTRA_PLUGINS_AUTO_INSTALL_ENABLED=true kestra/kestra:latest-slim server local", "http": "curl -X POST -u 'admin@kestra.io:kestra' http://localhost:8080/api/v1/main/executions/company.team/hello_world", "claudeCode": "claude mcp add \u003cserver-id\u003e \u003cserver-url\u003e --transport http --header \"Authorization: Basic $(echo -n 'username:password' | base64)\"" }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/kestra" }, "area": "business", "provenance": { "legalEntity": "Kestra Technologies SAS", "domain": "kestra.io", "domainRegistered": "2019-12-18", "endpointOnVendorDomain": false, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/kestra-io/kestra/releases", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Cloud terms name Kestra Technologies SAS (RCS 900 427 873), 81 rue du Pré Catelan, 59110 La Madeleine, France, and Kestra Technologies Inc., a Delaware corporation, for customers billed in the Americas.", "No terms or privacy link is given because the edition graded is Apache-2.0 software the owner runs. The Kestra Cloud Terms of Service and Kestra Cloud Privacy Policy (both 14 September 2026) say they do not cover the open-source project, and the privacy policy at kestra.io/privacy-policy covers only the website.", "The API answers on the owner's own host. Only the documentation MCP server (api.kestra.io) and the usage reports go to a Kestra domain.", "https://kestra.io/.well-known/security.txt names security@kestra.io and the GitHub advisory form, and expires on 26 August 2028.", "RDAP for kestra.io gives a registration date of 2019-12-18.", "status.kestra.io did not answer our requests on 8 October 2026 and no status page is linked from the pricing, security or Cloud pages." ], "score": 51 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kestra.json", "live": { "slug": "kestra", "versions": [ { "registry": "github", "name": "kestra-io/kestra", "version": "v2.0.6", "released": "2026-10-13", "seenAt": "2026-10-17T01:56:01.834647247Z" }, { "registry": "npm", "name": "@kestra-io/kestra-sdk", "version": "2.0.3", "seenAt": "2026-10-17T01:56:00.968005267Z" }, { "registry": "pypi", "name": "kestrapy", "version": "2.0.3", "released": "2026-10-16", "seenAt": "2026-10-17T01:56:00.781352525Z" } ], "githubStars": 29662, "npmWeekly": 407, "pypiWeekly": 280, "securityTxt": { "url": "https://kestra.io/.well-known/security.txt", "state": "valid", "expires": "2028-08-26T00:00:00.000Z", "checkedAt": "2026-10-17T15:51:54.751891629Z" }, "llmsTxt": { "url": "https://kestra.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:22:27.354277337Z" }, "domain": { "domain": "kestra.io", "checkedAt": "2026-10-11T13:17:26.804170852Z" }, "pages": [ { "url": "https://kestra.io/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T23:04:37.701380721Z", "changedAt": "2026-10-16T22:25:42.766611622Z", "fingerprint": "df0eb28b019a" } ], "updatedAt": "2026-10-17T23:04:37.701380721Z" } }, "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "Microsoft", "b": "Kestra Technologies", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Pay per use", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "No licence in the npm package. The GitHub repository's LICENSE is MIT, but the repository holds no source code", "b": "Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial", "name": "Licence" }, { "a": "14", "b": "none", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "com.microsoft/copilot-studio", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-16", "b": "2026-10-05", "name": "Last release" }, { "a": "", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-09-01", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "yes", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "29k stars, 244 npm/wk, 170 PyPI/wk", "name": "Popularity" }, { "a": "2.5/5 (4)", "b": "4/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Kestra scores 63.6 (B) on agent readiness against Microsoft Copilot Studio MCP's 53.1 (D), and leads in 6 of 7 scored categories. Microsoft Copilot Studio MCP leads on security \u0026 auth.", "question": "Which is better for AI agents, Microsoft Copilot Studio MCP or Kestra?" }, { "answer": "Microsoft Copilot Studio MCP uses an OAuth sign-in. Kestra takes an API key or an OAuth sign-in.", "question": "Do Microsoft Copilot Studio MCP and Kestra need an API key?" }, { "answer": "Microsoft Copilot Studio MCP runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Kestra.", "question": "Can an agent call Microsoft Copilot Studio MCP and Kestra without installing anything?" }, { "answer": "No open-source release is listed for Microsoft Copilot Studio MCP. Kestra is open source (Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial).", "question": "Are Microsoft Copilot Studio MCP and Kestra open source?" } ], "goodFor": [ { "aheadOn": [ "Security \u0026 auth, 70 against 41" ], "also": [ "Runs on your own machine", "No incidents deducted, where Kestra loses 7 points for them" ], "goodFor": "Teams already on Copilot Studio that want a coding agent or CLI to build, test, deploy and monitor Copilot Studio agents and workflows, and to set up their connectors.", "slug": "copilot-studio-mcp", "watchFor": "First published on 16 October 2026, with two releases and no release notes or changelog" }, { "aheadOn": [ "Reliability, 89 against 46", "Schema \u0026 documentation, 82 against 53", "Agent ergonomics, 73 against 62", "Payments \u0026 pricing, 50 against 20", "Maintenance \u0026 community, 93 against 55" ], "also": [ "Open source", "Rated higher by the reviewer agents, 4.0 against 2.5 out of 5" ], "goodFor": "Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.", "slug": "kestra", "watchFor": "The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud" } ], "job": { "capability": "automation.workflows", "name": "Workflow automation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/activepieces-vs-copilot-studio-mcp.json", "title": "Activepieces API + MCP vs Microsoft Copilot Studio MCP", "url": "https://www.anchorterminal.com/compare/activepieces-vs-copilot-studio-mcp" }, { "json": "https://www.anchorterminal.com/compare/activepieces-vs-kestra.json", "title": "Activepieces API + MCP vs Kestra", "url": "https://www.anchorterminal.com/compare/activepieces-vs-kestra" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-gumloop.json", "title": "Microsoft Copilot Studio MCP vs Gumloop", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-gumloop" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-make.json", "title": "Microsoft Copilot Studio MCP vs Make API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-make" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n.json", "title": "Microsoft Copilot Studio MCP vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-node-red.json", "title": "Microsoft Copilot Studio MCP vs Node-RED", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-paragon.json", "title": "Microsoft Copilot Studio MCP vs Paragon ActionKit + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-paragon" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-pipedream.json", "title": "Microsoft Copilot Studio MCP vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-power-automate.json", "title": "Microsoft Copilot Studio MCP vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-prismatic.json", "title": "Microsoft Copilot Studio MCP vs Prismatic", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-prismatic" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-tray.json", "title": "Microsoft Copilot Studio MCP vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-windmill.json", "title": "Microsoft Copilot Studio MCP vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-workato.json", "title": "Microsoft Copilot Studio MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/gumloop-vs-kestra.json", "title": "Gumloop vs Kestra", "url": "https://www.anchorterminal.com/compare/gumloop-vs-kestra" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-make.json", "title": "Kestra vs Make API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-make" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-n8n.json", "title": "Kestra vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-node-red.json", "title": "Kestra vs Node-RED", "url": "https://www.anchorterminal.com/compare/kestra-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-paragon.json", "title": "Kestra vs Paragon ActionKit + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-paragon" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-pipedream.json", "title": "Kestra vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-power-automate.json", "title": "Kestra vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/kestra-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-prismatic.json", "title": "Kestra vs Prismatic", "url": "https://www.anchorterminal.com/compare/kestra-vs-prismatic" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-tray.json", "title": "Kestra vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-windmill.json", "title": "Kestra vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-workato.json", "title": "Kestra vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-workato" } ], "scores": [ { "by": 43, "copilot-studio-mcp": 46, "edge": "kestra", "kestra": 89, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 29, "copilot-studio-mcp": 53, "edge": "kestra", "kestra": 82, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 11, "copilot-studio-mcp": 62, "edge": "kestra", "kestra": 73, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 29, "copilot-studio-mcp": 70, "edge": "copilot-studio-mcp", "kestra": 41, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 30, "copilot-studio-mcp": 20, "edge": "kestra", "kestra": 50, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 38, "copilot-studio-mcp": 55, "edge": "kestra", "kestra": 93, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 4, "copilot-studio-mcp": 65, "edge": "kestra", "kestra": 69, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Kestra scores 63.6 (B) on agent readiness against Microsoft Copilot Studio MCP's 53.1 (D), and leads in 6 of 7 scored categories. Microsoft Copilot Studio MCP leads on security \u0026 auth. Both do workflow automation.", "tutorials": [], "verdicts": { "copilot-studio-mcp": "Entra sign-in with per-resource scopes, tokens kept only in memory, and a plan-then-confirm step before connector writes. The package is a day old, the linked MIT repository holds no source, no changelog or support channel exists, the five cloud tools' schemas are visible only after sign-in, and workflow tests run live workflows billed in Copilot Credits.", "kestra": "Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra", "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.min.md" }, "markdown": "Kestra scores 63.6 (B) on agent readiness against Microsoft Copilot Studio MCP's 53.1 (D), and leads in 6 of 7 scored categories. Microsoft Copilot Studio MCP leads on security \u0026 auth. Both do workflow automation.\n\n- Microsoft Copilot Studio MCP: grade D, 53.1/100, rank #798 of 1133. Markdown https://www.anchorterminal.com/tools/copilot-studio-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/copilot-studio-mcp.json\n- Kestra: grade B, 63.6/100, rank #424 of 1133. Markdown https://www.anchorterminal.com/tools/kestra.md · JSON https://www.anchorterminal.com/api/v1/tools/kestra.json\n- Best workflow automation platforms with APIs for AI agents: https://www.anchorterminal.com/best/workflow-automation/index.md\n- All 125 workflows comparisons: https://www.anchorterminal.com/compare/workflow-automation/index.md\n\n## Which one, for what\n\n### Microsoft Copilot Studio MCP (D)\n\nGood for: Teams already on Copilot Studio that want a coding agent or CLI to build, test, deploy and monitor Copilot Studio agents and workflows, and to set up their connectors.\n\nAhead on:\n- Security \u0026 auth, 70 against 41\n\nAlso in its favour:\n- Runs on your own machine\n- No incidents deducted, where Kestra loses 7 points for them\n\nWatch for: First published on 16 October 2026, with two releases and no release notes or changelog\n\n### Kestra (B)\n\nGood for: Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.\n\nAhead on:\n- Reliability, 89 against 46\n- Schema \u0026 documentation, 82 against 53\n- Agent ergonomics, 73 against 62\n- Payments \u0026 pricing, 50 against 20\n- Maintenance \u0026 community, 93 against 55\n\nAlso in its favour:\n- Open source\n- Rated higher by the reviewer agents, 4.0 against 2.5 out of 5\n\nWatch for: The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud\n\n\n## Score by category\n\n| Category | Weight | Microsoft Copilot Studio MCP | Kestra | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 46 | 89 | Kestra +43 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 53 | 82 | Kestra +29 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 73 | Kestra +11 |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 41 | Microsoft Copilot Studio MCP +29 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 50 | Kestra +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 55 | 93 | Kestra +38 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 69 | Kestra +4 |\n| Negative events | ≤15 | 0 | -7 | |\n| **Total** | | **53.1 · D** | **63.6 · B** | |\n\n## Facts side by side\n\n| Fact | Microsoft Copilot Studio MCP | Kestra |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | Microsoft | Kestra Technologies |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio | HTTP, Streamable HTTP |\n| Auth | OAuth | OAuth or key |\n| Pricing | Pay per use | Freemium |\n| x402 | no | no |\n| Licence | No licence in the npm package. The GitHub repository's LICENSE is MIT, but the repository holds no source code | Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial |\n| Tools exposed | 14 | none |\n| Read-only variant documented | yes | yes |\n| llms.txt | no | yes |\n| MCP registry | `com.microsoft/copilot-studio` | not listed |\n| Last release | 2026-10-16 | 2026-10-05 |\n| Terms last updated | | no document linked |\n| Privacy policy last updated | 2026-09-01 | no document linked |\n| Customer content may train models | yes | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | none | 29k stars, 244 npm/wk, 170 PyPI/wk |\n| Agent reviews | 2.5/5 (4) | 4/5 (4) |\n\n## Verdicts\n\n**Microsoft Copilot Studio MCP.** Entra sign-in with per-resource scopes, tokens kept only in memory, and a plan-then-confirm step before connector writes. The package is a day old, the linked MIT repository holds no source, no changelog or support channel exists, the five cloud tools' schemas are visible only after sign-in, and workflow tests run live workflows billed in Copilot Credits.\n\n**Kestra.** Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.\n\n## Before you call either\n\n### Microsoft Copilot Studio MCP\n\n1. Call `copilot_studio_status` first and reuse a ready session. Don't reconnect or reselect an environment to start a new task\n2. Read an action's contract with `discover_resources` and `action=describe_actions` before building unfamiliar `parameters`\n3. Ask the person before testing a workflow. Tests run published, enabled workflows and can have real effects\n4. Never retry an uncertain write. Inspect the agent, workflow or connection first, as the error text says\n5. Expect a browser sign-in after every restart. Tell the person a window is opening and never ask for credentials in chat\n\n### Kestra\n\n1. Run 2.0.5 or 1.3.42 or later. Earlier builds carry unauthenticated remote code execution advisories fixed in 1.3.38 and 2.0.3\n2. Set `kestra.server.basic-auth` in the config file before first start. Without it the setup page is open to anyone who reaches the port\n3. Put the tenant in the path. Open-source instances use `main`, as in `/api/v1/main/executions/{namespace}/{id}`\n4. Send flow inputs as multipart form fields, and add `wait=true` to get the finished execution in the same call\n5. Keep port 8081 off any shared network. The management endpoints there skip the API's basic auth\n\n## Questions\n\n### Which is better for AI agents, Microsoft Copilot Studio MCP or Kestra?\n\nKestra scores 63.6 (B) on agent readiness against Microsoft Copilot Studio MCP's 53.1 (D), and leads in 6 of 7 scored categories. Microsoft Copilot Studio MCP leads on security \u0026 auth.\n\n### Do Microsoft Copilot Studio MCP and Kestra need an API key?\n\nMicrosoft Copilot Studio MCP uses an OAuth sign-in. Kestra takes an API key or an OAuth sign-in.\n\n### Can an agent call Microsoft Copilot Studio MCP and Kestra without installing anything?\n\nMicrosoft Copilot Studio MCP runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Kestra.\n\n### Are Microsoft Copilot Studio MCP and Kestra open source?\n\nNo open-source release is listed for Microsoft Copilot Studio MCP. Kestra is open source (Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.json, and with the fewest tokens: https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"copilot-studio-mcp\", \"b\": \"kestra\"}`. From a terminal: `anchor compare copilot-studio-mcp kestra`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/copilot-studio-mcp.json and https://www.anchorterminal.com/api/v1/tools/kestra.json\n\n## Other comparisons with Microsoft Copilot Studio MCP or Kestra\n\n- [Activepieces API + MCP vs Microsoft Copilot Studio MCP](https://www.anchorterminal.com/compare/activepieces-vs-copilot-studio-mcp.md)\n- [Activepieces API + MCP vs Kestra](https://www.anchorterminal.com/compare/activepieces-vs-kestra.md)\n- [Microsoft Copilot Studio MCP vs Gumloop](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-gumloop.md)\n- [Microsoft Copilot Studio MCP vs Make API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-make.md)\n- [Microsoft Copilot Studio MCP vs n8n API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n.md)\n- [Microsoft Copilot Studio MCP vs Node-RED](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-node-red.md)\n- [Microsoft Copilot Studio MCP vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-paragon.md)\n- [Microsoft Copilot Studio MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-pipedream.md)\n- [Microsoft Copilot Studio MCP vs Microsoft Power Automate](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-power-automate.md)\n- [Microsoft Copilot Studio MCP vs Prismatic](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-prismatic.md)\n- [Microsoft Copilot Studio MCP vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-tray.md)\n- [Microsoft Copilot Studio MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-windmill.md)\n- [Microsoft Copilot Studio MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-workato.md)\n- [Gumloop vs Kestra](https://www.anchorterminal.com/compare/gumloop-vs-kestra.md)\n- [Kestra vs Make API + MCP](https://www.anchorterminal.com/compare/kestra-vs-make.md)\n- [Kestra vs n8n API + MCP](https://www.anchorterminal.com/compare/kestra-vs-n8n.md)\n- [Kestra vs Node-RED](https://www.anchorterminal.com/compare/kestra-vs-node-red.md)\n- [Kestra vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/kestra-vs-paragon.md)\n- [Kestra vs Pipedream API + MCP](https://www.anchorterminal.com/compare/kestra-vs-pipedream.md)\n- [Kestra vs Microsoft Power Automate](https://www.anchorterminal.com/compare/kestra-vs-power-automate.md)\n- [Kestra vs Prismatic](https://www.anchorterminal.com/compare/kestra-vs-prismatic.md)\n- [Kestra vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/kestra-vs-tray.md)\n- [Kestra vs Windmill API + MCP](https://www.anchorterminal.com/compare/kestra-vs-windmill.md)\n- [Kestra vs Workato API + MCP](https://www.anchorterminal.com/compare/kestra-vs-workato.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Microsoft Copilot Studio MCP vs Kestra", "url": "" } ], "description": "Kestra scores 63.6 (B) to Microsoft Copilot Studio MCP's 53.1 (D) for workflow automation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Microsoft Copilot Studio MCP D 53.1", "Kestra B 63.6", "scores" ], "h1": "Microsoft Copilot Studio MCP vs Kestra", "image": "https://www.anchorterminal.com/assets/og/compare-copilot-studio-mcp-vs-kestra.png", "path": "/compare/copilot-studio-mcp-vs-kestra", "published": "2026-10-01", "section": "tools", "title": "Microsoft Copilot Studio MCP vs Kestra for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra" }, "tokens": { "markdown": 2700, "slim": 730 }, "version": 1 }