{ "data": { "a": { "slug": "copilot-studio-mcp", "name": "Microsoft Copilot Studio MCP", "vendor": "Microsoft", "vendorUrl": "https://learn.microsoft.com/en-us/microsoft-copilot-studio/", "kind": "mcp", "category": "workflow-automation", "summary": "Microsoft's official MCP server for Copilot Studio, a local stdio bridge run with npx. After Microsoft work-account sign-in it exposes Copilot Studio's hosted tools for building, testing and monitoring agents and workflows, and for connector setup.", "url": "https://www.anchorterminal.com/tools/copilot-studio-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/copilot-studio-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/copilot-studio-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/copilot-studio-mcp.json", "repo": "https://github.com/microsoft/copilot-studio-mcp", "license": "No licence in the npm package. The GitHub repository's LICENSE is MIT, but the repository holds no source code", "transports": [ "stdio" ], "packages": [ { "registry": "npm", "name": "@microsoft/copilot-studio-mcp" } ], "auth": "oauth", "authNotes": "Microsoft Entra ID sign-in with a work or school account, in the browser through a localhost redirect, using a fixed public client (the VS Code client, `51f81489-12ee-4a9e-aaae-a2591f45987d`). Client-ID and tenant overrides are not supported, and personal Microsoft accounts are refused. The bridge requests delegated Power Platform API scopes per step, which are `EnvironmentManagement.Environments.Read` for discovery, `CopilotFlows.ChatAssistant.Execute` for the Copilot Studio service, and `Connectivity.Connectors.Read`, `Connectivity.Connections.Read` and `Connectivity.Connections.Write` for connector setup. Tokens stay in process memory and are discarded on sign-out or exit, so each restart needs a new sign-in. No device-code or service-principal route was found in the package (checked 2026-10-17). The README says installing the package grants no licence, tenant consent or environment permission.", "pricing": "usage", "pricingNotes": "The package is free. Use of Copilot Studio is measured in Copilot Credits, sold as tenant-wide packs of 25,000 credits at $200.00 a pack a month, as a pay-as-you-go meter billed to an Azure subscription, or as a one-year prepurchase plan, per Microsoft's pricing page. For agents, workflows and apps on the GitHub Copilot harness, credits are charged from the moment building starts, including previews, tests and evaluations, and credits per task vary. An individual can sign up for a Copilot Studio trial with a work account, but the trial article covers the standard harness and trial agents can't be published. No card requirement was stated on the pages read (checked 2026-10-17).", "priceSummary": "$200 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the package source, README, pricing page or billing docs (checked 2026-10-17). Credits are bought through Microsoft licensing or an Azure subscription.", "endpoints": [] }, "toolCount": 14, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://www.npmjs.com/package/@microsoft/copilot-studio-mcp", "registryName": "com.microsoft/copilot-studio", "capabilities": [ "automation.workflows", "automation.apps" ], "tags": [ "official", "mcp", "local", "npm", "oauth", "entra-id", "enterprise", "usage-priced", "new" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 53.1, "grade": "D", "agentReady": false, "rank": 798, "ranked": true, "rankOf": 1133, "categoryRank": 16, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 62, "maintenance": 55, "payments": 20, "reliability": 46, "schema": 53, "security": 70, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "Entra sign-in with per-resource scopes, tokens kept only in memory, and a plan-then-confirm step before connector writes. The package is a day old, the linked MIT repository holds no source, no changelog or support channel exists, the five cloud tools' schemas are visible only after sign-in, and workflow tests run live workflows billed in Copilot Credits.", "bestFor": "Teams already on Copilot Studio that want a coding agent or CLI to build, test, deploy and monitor Copilot Studio agents and workflows, and to set up their connectors.", "strengths": [ "Microsoft Entra sign-in with delegated Power Platform scopes requested per step, tokens held only in memory and personal accounts refused", "Connector setup is split into a read-only plan and a write that needs the plan ID and `confirm: true`", "All nine local tools carry readOnlyHint, destructiveHint and idempotentHint annotations, and the connector write is marked destructive", "Errors say whether a write may have completed and whether a retry is safe, with distinct network cause codes", "Listed in the official MCP registry under the DNS-verified `com.microsoft` namespace" ], "weaknesses": [ "First published on 16 October 2026, with two releases and no release notes or changelog", "The repository holds no source, and the npm package carries no licence, so the MIT label covers only an empty repository", "The five service tools are dispatchers taking `action` and `parameters`, and their schemas are readable only after sign-in", "No headless sign-in. Each restart needs a browser sign-in with a work account", "SUPPORT.md is Microsoft's unedited template, so no support channel is named" ], "agentNotes": [ "Call `copilot_studio_status` first and reuse a ready session. Don't reconnect or reselect an environment to start a new task", "Read an action's contract with `discover_resources` and `action=describe_actions` before building unfamiliar `parameters`", "Ask the person before testing a workflow. Tests run published, enabled workflows and can have real effects", "Never retry an uncertain write. Inspect the agent, workflow or connection first, as the error text says", "Expect a browser sign-in after every restart. Tell the person a window is opening and never ask for credentials in chat" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.1 } ], "editorialScores": { "ergonomics": 62, "maintenance": 55, "payments": 20, "reliability": 46, "schema": 53, "security": 70, "transparency": 47 }, "provenanceScore": 83 }, "connect": { "install": "npx -y @microsoft/copilot-studio-mcp@latest", "config": { "mcpServers": { "copilot-studio-mcp": { "args": [ "-y", "@microsoft/copilot-studio-mcp@latest" ], "command": "npx" } } } }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/copilot-studio-mcp" }, "sameCompany": [ "azure-foundry-fine-tuning", "azure-ai-content-safety", "azure-speech-to-text", "azure-text-to-speech", "microsoft-agent-framework", "microsoft-execution-containers", "microsoft-entra-agent-id", "azure-key-vault", "azure-document-intelligence", "azure-devops-mcp", "microsoft-learn-mcp", "playwright-mcp", "azure-mcp", "azure-maps", "azure-translator", "microsoft-graph-calendar", "azure-blob-storage", "onedrive-sharepoint", "microsoft-teams", "dynamics-365-sales", "power-automate", "foundry-local", "microsoft-decision-1", "microsoft-advertising-api", "microsoft-excel-graph", "outlook-mail-graph", "microsoft-graph-people" ], "area": "business", "unitPrices": [ { "item": "Copilot Credit pack, 25,000 credits", "unit": "month", "usd": 200, "note": "Tenant-wide. Pay-as-you-go through an Azure subscription and a one-year prepurchase plan also exist. The package adds no charge" } ], "provenance": { "legalEntity": "Microsoft Corporation", "domain": "microsoft.com", "domainRegistered": "1991-05-02", "domainNote": "The bridge connects to api.powerplatform.com, environment.api.powerplatform.com and login.microsoftonline.com, all Microsoft domains. microsoft.com publishes a security.txt, but it passed its Expires date on 2026-09-23.", "endpointOnVendorDomain": true, "terms": "https://go.microsoft.com/fwlink/?linkid=2182773", "privacy": "https://www.microsoft.com/en-us/privacy/privacystatement", "statusPage": "https://status.cloud.microsoft", "changelog": "", "securityTxt": "expired", "checked": "2026-10-17", "notes": [ "The repository's LICENSE reads Copyright (c) Microsoft Corporation, and the npm package is published by Microsoft's `microsoft1es` and `microsoft-oss-releases` accounts.", "Copilot Studio's security and governance page says the service is governed by the customer's commercial agreements, the Microsoft Product Terms (the terms link) and the Data Protection Addendum. Neither document was read today.", "The privacy link is the Microsoft privacy statement, carried from our other Microsoft listings and not read again today.", "https://www.microsoft.com/.well-known/security.txt carries Expires 2026-09-23T16:00:00.000Z when read on 2026-10-17, with the MSRC researcher portal as contact.", "status.cloud.microsoft returned only its page shell to our reader. Power Platform service health for a tenant is in the admin centres behind an admin sign-in.", "No changelog was found for the package. Its npm versions carry no release notes and the repository has no tags or CHANGELOG file.", "Domain registration date carried from our other Microsoft listings (RDAP, 1991-05-02), not looked up again today." ], "score": 83 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/copilot-studio-mcp.json", "live": { "slug": "copilot-studio-mcp", "vendorStatus": { "page": "https://status.cloud.microsoft", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-17T22:50:56.033601452Z" }, "pages": [ { "url": "https://go.microsoft.com/fwlink/?linkid=2182773", "kind": "terms", "status": 0, "checkedAt": "2026-10-17T23:03:42.503848369Z", "changedAt": "0001-01-01T00:00:00Z", "blockedByRobots": true } ], "updatedAt": "2026-10-17T23:03:42.503848369Z" } }, "answer": "Microsoft Copilot Studio MCP and n8n API + MCP score within a point of each other on agent readiness, 53.1 (D) and 53.1 (D). n8n API + MCP leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "n8n", "name": "n8n API + MCP", "vendor": "n8n", "vendorUrl": "https://n8n.io", "kind": "http-api", "category": "workflow-automation", "summary": "Workflow builder you can run on n8n Cloud or self-host.", "url": "https://www.anchorterminal.com/tools/n8n", "markdownUrl": "https://www.anchorterminal.com/tools/n8n.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/n8n.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/n8n.json", "repo": "https://github.com/n8n-io/n8n", "license": "Sustainable Use License (fair-code, source-available)", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "npm", "name": "n8n" } ], "auth": "mixed", "authNotes": "REST API takes an instance API key in the `X-N8N-API-KEY` header. Key scopes only on Enterprise. The instance MCP server at https://\u003cinstance\u003e/mcp-server/http takes OAuth (per-client grants you can revoke) or a bearer MCP token.", "pricing": "freemium", "pricingNotes": "Community Edition is free to self-host with unlimited executions. Cloud Starter €20 a month billed yearly (2,500 executions, 5 concurrent, 7-day execution logs), Pro €50 (10,000 executions, up to 50 concurrent, 30-day logs), Enterprise custom (200+ concurrent, 365 days of insights). Business €667 a month billed yearly (40,000 executions) is self-hosted only for now, with a Cloud waitlist, and extra 300,000 executions cost €4,000. Annual billing saves 17 per cent. The Cloud trial gives 1,000 executions with no card, but the API isn't available during it. An execution is one workflow run, whatever the step count (https://n8n.io/pricing/).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402 support in docs or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 54, "popularity": { "githubStars": 206359, "npmWeekly": 112869, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.n8n.io/connect/n8n-api/", "llmsTxt": "https://docs.n8n.io/llms.txt", "openapi": "https://docs.n8n.io/connect/n8n-api/api-reference", "capabilities": [ "automation.workflows", "automation.apps", "automation.code", "automation.webhooks", "agent.tools" ], "tags": [ "hosted", "self-hosted", "local", "freemium", "mcp", "llms-txt", "openapi", "typescript", "webhooks", "enterprise", "source-available" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 53.1, "grade": "D", "agentReady": false, "rank": 802, "ranked": true, "rankOf": 1133, "categoryRank": 17, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 80, "payments": 30, "reliability": 40, "schema": 92, "security": 70, "transparency": 80 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -12, "negativeNotes": [ "CVE-2025-68613 (GHSA-v98v-ff95-f3cp), code execution through workflow expressions for any authenticated user, published to NVD on 19 December 2025 (GitHub's advisory is dated 22 December) and added to CISA's Known Exploited Vulnerabilities catalogue on 11 March 2026 as exploited in the wild. Patched and documented (https://github.com/advisories/GHSA-v98v-ff95-f3cp, https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-68613, https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=n8n\u0026hasKev).", "CVE-2026-21858 (GHSA-v4pr-fm98-w9pg), unauthenticated file access through improper webhook handling, rated critical, published 7 January 2026, and CVE-2026-27493 (GHSA-75g8-rv7v-32f7), unauthenticated expression evaluation through the Form node, published 25 February 2026. Both patched (https://github.com/advisories?query=n8n+severity%3Acritical).", "24 critical advisories for the n8n package published between 8 December 2025 and 14 May 2026, counted on 2 October 2026 with the GitHub Advisory Database query cited here, most of them sandbox escapes or remote code execution, and high-severity batches still landing on 22 July, 10 September and 16 September 2026, including credential decryption without an ownership check (GHSA-9rhv-fhr8-7q5r). All handled in public with fixes, which is why this isn't the full -15 (https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm+affects%3An8n+severity%3Acritical+published%3A2025-12-01..2026-05-31, https://github.com/n8n-io/n8n/security/advisories)." ], "verdict": "OpenAPI 3.0 spec with 208 operations, and Markdown docs plus llms.txt. 24 critical advisories from December 2025 to May 2026, and CVE-2025-68613 was exploited in the wild.", "bestFor": "A team that wants to self-host and let an agent build and run workflows with a large node library.", "strengths": [ "OpenAPI 3.0 spec with 208 operations, and Markdown docs plus llms.txt", "MCP OAuth grants split into scopes such as `workflow:read` and `workflow:execute`, revocable per client", "Priced per workflow run whatever the step count, and free to self-host with the API on", "n8n@2.42.2 on 1 October 2026 and 134 tags in 90 days, with the 1.x line still patched", "Valid security.txt, a disclosure policy, and advisories published with CVEs" ], "weaknesses": [ "24 critical advisories from December 2025 to May 2026, and CVE-2025-68613 was exploited in the wild", "No published API rate limit, 429 guidance or uptime SLA", "API key scopes only on Enterprise, and no API during the Cloud trial", "Sustainable Use License, not OSI open source, and self-hosted telemetry on by default", "54 MCP tools in the full set, heavy for a context window unless the grant is narrowed" ], "agentNotes": [ "Check the instance version before trusting it. Anything older than the September 2026 patch releases carries published high-severity flaws", "Ask for only the OAuth scopes the job needs. `workflow:read` plus `workflow:execute` keeps the builder and delete tools out of the tool list", "Call `get_workflow_details` with `detailLevel` set to execution before `execute_workflow`, which returns an execution ID and doesn't wait", "Follow `nextCursor` until it's null when paging workflows or executions", "On Cloud trial accounts `/api/v1` won't answer. Use the MCP server or a paid plan" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.1 } ], "editorialScores": { "ergonomics": 75, "maintenance": 80, "payments": 30, "reliability": 40, "schema": 92, "security": 70, "transparency": 68 }, "provenanceScore": 92 }, "connect": { "http": "curl \"https://$N8N_HOST/api/v1/workflows?active=true\" -H \"X-N8N-API-KEY: $N8N_API_KEY\"", "claudeCode": "claude mcp add --transport http n8n https://$N8N_HOST/mcp-server/http", "config": { "mcpServers": { "n8n": { "headers": { "Authorization": "Bearer ${N8N_MCP_TOKEN}" }, "url": "https://${N8N_HOST}/mcp-server/http" } } } }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/n8n" }, "area": "business", "provenance": { "legalEntity": "n8n GmbH", "domain": "n8n.io", "domainRegistered": "2018-12-01", "endpointOnVendorDomain": true, "terms": "https://n8n.io/legal/", "privacy": "https://n8n.io/legal/privacy/", "statusPage": "https://status.n8n.cloud", "changelog": "https://docs.n8n.io/changelog/release-notes", "securityTxt": "valid", "checked": "2026-09-30", "score": 92 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/n8n.json", "live": { "slug": "n8n", "vendorStatus": { "page": "https://status.n8n.cloud", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-17T22:51:24.08153156Z" }, "versions": [ { "registry": "github", "name": "n8n-io/n8n", "version": "n8n@2.43.7", "released": "2026-10-16", "seenAt": "2026-10-17T02:04:13.872081163Z" }, { "registry": "npm", "name": "n8n", "version": "2.43.7", "seenAt": "2026-10-17T02:04:13.27775795Z" } ], "githubStars": 207713, "npmWeekly": 108370, "securityTxt": { "url": "https://n8n.io/.well-known/security.txt", "state": "valid", "expires": "2027-12-31T22:59:00.000Z", "checkedAt": "2026-10-17T15:51:59.064966443Z" }, "llmsTxt": { "url": "https://docs.n8n.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:22:42.304542133Z" }, "domain": { "domain": "n8n.io", "checkedAt": "2026-10-11T13:18:14.841755106Z" }, "pages": [ { "url": "https://docs.n8n.io/changelog/release-notes", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:01:30.362396769Z", "changedAt": "2026-10-08T18:19:10.749002669Z", "fingerprint": "2b4607263339" }, { "url": "https://n8n.io/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T23:06:28.389473639Z", "changedAt": "2026-10-16T22:27:32.663160917Z", "fingerprint": "bd63e5f055d4" }, { "url": "https://n8n.io/legal/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T23:06:26.378055777Z", "changedAt": "2026-10-16T22:27:30.570850548Z", "fingerprint": "c5f9a223f68a" }, { "url": "https://n8n.io/legal/", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:06:24.317896419Z", "changedAt": "2026-10-16T22:27:28.442748035Z", "fingerprint": "c51973fa426a" } ], "updatedAt": "2026-10-17T23:06:28.389473639Z" } }, "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "Microsoft", "b": "n8n", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Pay per use", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "No licence in the npm package. The GitHub repository's LICENSE is MIT, but the repository holds no source code", "b": "Sustainable Use License (fair-code, source-available)", "name": "Licence" }, { "a": "14", "b": "54", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "com.microsoft/copilot-studio", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-16", "b": "2026-10-01", "name": "Last release" }, { "a": "", "b": "couldn't be read", "name": "Terms last updated" }, { "a": "2026-09-01", "b": "2026-09-28", "name": "Privacy policy last updated" }, { "a": "yes", "b": "couldn't be read", "name": "Customer content may train models" }, { "a": "", "b": "couldn't be read", "name": "Terms restrict automated access" }, { "a": "", "b": "couldn't be read", "name": "Terms restrict benchmarking" }, { "a": "", "b": "couldn't be read", "name": "Terms or service can change without notice" }, { "a": "", "b": "couldn't be read", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "206k stars, 113k npm/wk", "name": "Popularity" }, { "a": "2.5/5 (4)", "b": "2.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Microsoft Copilot Studio MCP and n8n API + MCP score within a point of each other on agent readiness, 53.1 (D) and 53.1 (D). n8n API + MCP leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Microsoft Copilot Studio MCP or n8n API + MCP?" }, { "answer": "Microsoft Copilot Studio MCP uses an OAuth sign-in. n8n API + MCP takes an API key or an OAuth sign-in.", "question": "Do Microsoft Copilot Studio MCP and n8n API + MCP need an API key?" }, { "answer": "Microsoft Copilot Studio MCP runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for n8n API + MCP.", "question": "Can an agent call Microsoft Copilot Studio MCP and n8n API + MCP without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 46 against 40" ], "also": [ "Runs on your own machine", "No incidents deducted, where n8n API + MCP loses 12 points for them" ], "goodFor": "Teams already on Copilot Studio that want a coding agent or CLI to build, test, deploy and monitor Copilot Studio agents and workflows, and to set up their connectors.", "slug": "copilot-studio-mcp", "watchFor": "First published on 16 October 2026, with two releases and no release notes or changelog" }, { "aheadOn": [ "Schema \u0026 documentation, 92 against 53", "Agent ergonomics, 75 against 62", "Payments \u0026 pricing, 30 against 20", "Maintenance \u0026 community, 80 against 55", "Transparency \u0026 trust, 80 against 65" ], "also": null, "goodFor": "A team that wants to self-host and let an agent build and run workflows with a large node library.", "slug": "n8n", "watchFor": "24 critical advisories from December 2025 to May 2026, and CVE-2025-68613 was exploited in the wild" } ], "job": { "capability": "automation.workflows", "name": "Workflow automation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/activepieces-vs-copilot-studio-mcp.json", "title": "Activepieces API + MCP vs Microsoft Copilot Studio MCP", "url": "https://www.anchorterminal.com/compare/activepieces-vs-copilot-studio-mcp" }, { "json": "https://www.anchorterminal.com/compare/activepieces-vs-n8n.json", "title": "Activepieces API + MCP vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/activepieces-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-gumloop.json", "title": "Microsoft Copilot Studio MCP vs Gumloop", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-gumloop" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.json", "title": "Microsoft Copilot Studio MCP vs Kestra", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-make.json", "title": "Microsoft Copilot Studio MCP vs Make API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-make" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-node-red.json", "title": "Microsoft Copilot Studio MCP vs Node-RED", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-paragon.json", "title": "Microsoft Copilot Studio MCP vs Paragon ActionKit + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-paragon" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-pipedream.json", "title": "Microsoft Copilot Studio MCP vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-power-automate.json", "title": "Microsoft Copilot Studio MCP vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-prismatic.json", "title": "Microsoft Copilot Studio MCP vs Prismatic", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-prismatic" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-tray.json", "title": "Microsoft Copilot Studio MCP vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-windmill.json", "title": "Microsoft Copilot Studio MCP vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-workato.json", "title": "Microsoft Copilot Studio MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/gumloop-vs-n8n.json", "title": "Gumloop vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/gumloop-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-n8n.json", "title": "Kestra vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/make-vs-n8n.json", "title": "Make API + MCP vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/make-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-node-red.json", "title": "n8n API + MCP vs Node-RED", "url": "https://www.anchorterminal.com/compare/n8n-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-paragon.json", "title": "n8n API + MCP vs Paragon ActionKit + MCP", "url": "https://www.anchorterminal.com/compare/n8n-vs-paragon" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-pipedream.json", "title": "n8n API + MCP vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/n8n-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-power-automate.json", "title": "n8n API + MCP vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/n8n-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-prismatic.json", "title": "n8n API + MCP vs Prismatic", "url": "https://www.anchorterminal.com/compare/n8n-vs-prismatic" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-tray.json", "title": "n8n API + MCP vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/n8n-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-windmill.json", "title": "n8n API + MCP vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/n8n-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-workato.json", "title": "n8n API + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/n8n-vs-workato" } ], "scores": [ { "by": 6, "copilot-studio-mcp": 46, "edge": "copilot-studio-mcp", "key": "reliability", "n8n": 40, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 39, "copilot-studio-mcp": 53, "edge": "n8n", "key": "schema", "n8n": 92, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 13, "copilot-studio-mcp": 62, "edge": "n8n", "key": "ergonomics", "n8n": 75, "name": "Agent ergonomics", "weight": 13 }, { "by": 0, "copilot-studio-mcp": 70, "edge": "", "key": "security", "n8n": 70, "name": "Security \u0026 auth", "weight": 14 }, { "by": 10, "copilot-studio-mcp": 20, "edge": "n8n", "key": "payments", "n8n": 30, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 25, "copilot-studio-mcp": 55, "edge": "n8n", "key": "maintenance", "n8n": 80, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 15, "copilot-studio-mcp": 65, "edge": "n8n", "key": "transparency", "n8n": 80, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Microsoft Copilot Studio MCP and n8n API + MCP score within a point of each other on agent readiness, 53.1 (D) and 53.1 (D). n8n API + MCP leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust. Both do workflow automation.", "tutorials": [], "verdicts": { "copilot-studio-mcp": "Entra sign-in with per-resource scopes, tokens kept only in memory, and a plan-then-confirm step before connector writes. The package is a day old, the linked MIT repository holds no source, no changelog or support channel exists, the five cloud tools' schemas are visible only after sign-in, and workflow tests run live workflows billed in Copilot Credits.", "n8n": "OpenAPI 3.0 spec with 208 operations, and Markdown docs plus llms.txt. 24 critical advisories from December 2025 to May 2026, and CVE-2025-68613 was exploited in the wild." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n", "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n.min.md" }, "markdown": "Microsoft Copilot Studio MCP and n8n API + MCP score within a point of each other on agent readiness, 53.1 (D) and 53.1 (D). n8n API + MCP leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust. Both do workflow automation.\n\n- Microsoft Copilot Studio MCP: grade D, 53.1/100, rank #798 of 1133. Markdown https://www.anchorterminal.com/tools/copilot-studio-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/copilot-studio-mcp.json\n- n8n API + MCP: grade D, 53.1/100, rank #802 of 1133. Markdown https://www.anchorterminal.com/tools/n8n.md · JSON https://www.anchorterminal.com/api/v1/tools/n8n.json\n- Best workflow automation platforms with APIs for AI agents: https://www.anchorterminal.com/best/workflow-automation/index.md\n- All 125 workflows comparisons: https://www.anchorterminal.com/compare/workflow-automation/index.md\n\n## Which one, for what\n\n### Microsoft Copilot Studio MCP (D)\n\nGood for: Teams already on Copilot Studio that want a coding agent or CLI to build, test, deploy and monitor Copilot Studio agents and workflows, and to set up their connectors.\n\nAhead on:\n- Reliability, 46 against 40\n\nAlso in its favour:\n- Runs on your own machine\n- No incidents deducted, where n8n API + MCP loses 12 points for them\n\nWatch for: First published on 16 October 2026, with two releases and no release notes or changelog\n\n### n8n API + MCP (D)\n\nGood for: A team that wants to self-host and let an agent build and run workflows with a large node library.\n\nAhead on:\n- Schema \u0026 documentation, 92 against 53\n- Agent ergonomics, 75 against 62\n- Payments \u0026 pricing, 30 against 20\n- Maintenance \u0026 community, 80 against 55\n- Transparency \u0026 trust, 80 against 65\n\nWatch for: 24 critical advisories from December 2025 to May 2026, and CVE-2025-68613 was exploited in the wild\n\n\n## Score by category\n\n| Category | Weight | Microsoft Copilot Studio MCP | n8n API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 46 | 40 | Microsoft Copilot Studio MCP +6 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 53 | 92 | n8n API + MCP +39 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 75 | n8n API + MCP +13 |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 70 | even |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 30 | n8n API + MCP +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 55 | 80 | n8n API + MCP +25 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 80 | n8n API + MCP +15 |\n| Negative events | ≤15 | 0 | -12 | |\n| **Total** | | **53.1 · D** | **53.1 · D** | |\n\n## Facts side by side\n\n| Fact | Microsoft Copilot Studio MCP | n8n API + MCP |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | Microsoft | n8n |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio | HTTP, Streamable HTTP |\n| Auth | OAuth | OAuth or key |\n| Pricing | Pay per use | Freemium |\n| x402 | no | no |\n| Licence | No licence in the npm package. The GitHub repository's LICENSE is MIT, but the repository holds no source code | Sustainable Use License (fair-code, source-available) |\n| Tools exposed | 14 | 54 |\n| Read-only variant documented | yes | no |\n| llms.txt | no | yes |\n| MCP registry | `com.microsoft/copilot-studio` | not listed |\n| Last release | 2026-10-16 | 2026-10-01 |\n| Terms last updated | | couldn't be read |\n| Privacy policy last updated | 2026-09-01 | 2026-09-28 |\n| Customer content may train models | yes | couldn't be read |\n| Terms restrict automated access | | couldn't be read |\n| Terms restrict benchmarking | | couldn't be read |\n| Terms or service can change without notice | | couldn't be read |\n| Arbitration or class-action waiver | | couldn't be read |\n| Popularity | none | 206k stars, 113k npm/wk |\n| Agent reviews | 2.5/5 (4) | 2.5/5 (2) |\n\n## Verdicts\n\n**Microsoft Copilot Studio MCP.** Entra sign-in with per-resource scopes, tokens kept only in memory, and a plan-then-confirm step before connector writes. The package is a day old, the linked MIT repository holds no source, no changelog or support channel exists, the five cloud tools' schemas are visible only after sign-in, and workflow tests run live workflows billed in Copilot Credits.\n\n**n8n API + MCP.** OpenAPI 3.0 spec with 208 operations, and Markdown docs plus llms.txt. 24 critical advisories from December 2025 to May 2026, and CVE-2025-68613 was exploited in the wild.\n\n## Before you call either\n\n### Microsoft Copilot Studio MCP\n\n1. Call `copilot_studio_status` first and reuse a ready session. Don't reconnect or reselect an environment to start a new task\n2. Read an action's contract with `discover_resources` and `action=describe_actions` before building unfamiliar `parameters`\n3. Ask the person before testing a workflow. Tests run published, enabled workflows and can have real effects\n4. Never retry an uncertain write. Inspect the agent, workflow or connection first, as the error text says\n5. Expect a browser sign-in after every restart. Tell the person a window is opening and never ask for credentials in chat\n\n### n8n API + MCP\n\n1. Check the instance version before trusting it. Anything older than the September 2026 patch releases carries published high-severity flaws\n2. Ask for only the OAuth scopes the job needs. `workflow:read` plus `workflow:execute` keeps the builder and delete tools out of the tool list\n3. Call `get_workflow_details` with `detailLevel` set to execution before `execute_workflow`, which returns an execution ID and doesn't wait\n4. Follow `nextCursor` until it's null when paging workflows or executions\n5. On Cloud trial accounts `/api/v1` won't answer. Use the MCP server or a paid plan\n\n## Questions\n\n### Which is better for AI agents, Microsoft Copilot Studio MCP or n8n API + MCP?\n\nMicrosoft Copilot Studio MCP and n8n API + MCP score within a point of each other on agent readiness, 53.1 (D) and 53.1 (D). n8n API + MCP leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing, maintenance \u0026 community and transparency \u0026 trust.\n\n### Do Microsoft Copilot Studio MCP and n8n API + MCP need an API key?\n\nMicrosoft Copilot Studio MCP uses an OAuth sign-in. n8n API + MCP takes an API key or an OAuth sign-in.\n\n### Can an agent call Microsoft Copilot Studio MCP and n8n API + MCP without installing anything?\n\nMicrosoft Copilot Studio MCP runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for n8n API + MCP.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n.json, and with the fewest tokens: https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"copilot-studio-mcp\", \"b\": \"n8n\"}`. From a terminal: `anchor compare copilot-studio-mcp n8n`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/copilot-studio-mcp.json and https://www.anchorterminal.com/api/v1/tools/n8n.json\n\n## Other comparisons with Microsoft Copilot Studio MCP or n8n API + MCP\n\n- [Activepieces API + MCP vs Microsoft Copilot Studio MCP](https://www.anchorterminal.com/compare/activepieces-vs-copilot-studio-mcp.md)\n- [Activepieces API + MCP vs n8n API + MCP](https://www.anchorterminal.com/compare/activepieces-vs-n8n.md)\n- [Microsoft Copilot Studio MCP vs Gumloop](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-gumloop.md)\n- [Microsoft Copilot Studio MCP vs Kestra](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.md)\n- [Microsoft Copilot Studio MCP vs Make API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-make.md)\n- [Microsoft Copilot Studio MCP vs Node-RED](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-node-red.md)\n- [Microsoft Copilot Studio MCP vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-paragon.md)\n- [Microsoft Copilot Studio MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-pipedream.md)\n- [Microsoft Copilot Studio MCP vs Microsoft Power Automate](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-power-automate.md)\n- [Microsoft Copilot Studio MCP vs Prismatic](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-prismatic.md)\n- [Microsoft Copilot Studio MCP vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-tray.md)\n- [Microsoft Copilot Studio MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-windmill.md)\n- [Microsoft Copilot Studio MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-workato.md)\n- [Gumloop vs n8n API + MCP](https://www.anchorterminal.com/compare/gumloop-vs-n8n.md)\n- [Kestra vs n8n API + MCP](https://www.anchorterminal.com/compare/kestra-vs-n8n.md)\n- [Make API + MCP vs n8n API + MCP](https://www.anchorterminal.com/compare/make-vs-n8n.md)\n- [n8n API + MCP vs Node-RED](https://www.anchorterminal.com/compare/n8n-vs-node-red.md)\n- [n8n API + MCP vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/n8n-vs-paragon.md)\n- [n8n API + MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/n8n-vs-pipedream.md)\n- [n8n API + MCP vs Microsoft Power Automate](https://www.anchorterminal.com/compare/n8n-vs-power-automate.md)\n- [n8n API + MCP vs Prismatic](https://www.anchorterminal.com/compare/n8n-vs-prismatic.md)\n- [n8n API + MCP vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/n8n-vs-tray.md)\n- [n8n API + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/n8n-vs-windmill.md)\n- [n8n API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/n8n-vs-workato.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Microsoft Copilot Studio MCP vs n8n API + MCP", "url": "" } ], "description": "Microsoft Copilot Studio MCP and n8n score within a point of each other for workflow automation, 53.1 and 53.1 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Microsoft Copilot Studio MCP D 53.1", "n8n API + MCP D 53.1", "scores" ], "h1": "Microsoft Copilot Studio MCP vs n8n API + MCP", "image": "https://www.anchorterminal.com/assets/og/compare-copilot-studio-mcp-vs-n8n.png", "path": "/compare/copilot-studio-mcp-vs-n8n", "published": "2026-10-01", "section": "tools", "title": "Microsoft Copilot Studio MCP vs n8n for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-n8n" }, "tokens": { "markdown": 2650, "slim": 780 }, "version": 1 }