# copilotconnectorledger-mcp

A paid remote MCP server that audits Copilot Studio connector permissions: drift scans, owner signoffs and compliance export packs.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: clauxel
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/clauxel/copilot-connector-ledger-mcp
- Updated: 2026-05-19
- HTML: https://affpapa.org/en/nevibecode/mcp/copilotconnectorledger-mcp

## What it does

The server answers one question before it becomes a problem: which permissions will agents inherit? Five tools cover the workflow. `check_connector_permission_risk` scores a connector, `scan_connector_drift` looks for changes, `request_owner_signoff` asks the owner to confirm, and `generate_audit_pack` plus `export_connector_receipt` produce the paperwork.

Nothing runs locally. Production calls carry a bearer token issued on the product site, and requests to `/mcp` without one are rejected. Any MCP client that speaks Streamable HTTP remote servers can connect — Claude, Codex, Cursor, GitHub Copilot, Windsurf, Cline, Zed, Gemini CLI.

The repository holds documentation and a directory listing, not the production source. So you judge the tools by what the service returns, not by reading code. If your Copilot Studio agents reach outside systems, this is how you record who approved what.

## Requirements
- Remote server: `https://copilotconnectorledger.clauxel.com/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http copilotconnectorledger-mcp https://copilotconnectorledger.clauxel.com/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add copilotconnectorledger-mcp --url https://copilotconnectorledger.clauxel.com/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "copilotconnectorledger-mcp": {
            "url": "https://copilotconnectorledger.clauxel.com/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "copilotconnectorledger-mcp": {
            "type": "http",
            "url": "https://copilotconnectorledger.clauxel.com/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http copilotconnectorledger-mcp https://copilotconnectorledger.clauxel.com/mcp
```

## When to use it
- check inherited permissions before an agent goes live
- spot permission drift between environments
- collect a written signoff from a connector owner
- assemble an audit pack for a compliance review
- export a receipt for one connector

## Example prompts
- Check the permission risk on the `sales-dataverse` connector before the agent inherits it
- Scan connector drift for the past week
- Request owner signoff and generate the audit pack

## Similar
- [permission-auditor](https://affpapa.org/en/nevibecode/skills/permission-auditor.md) — skill · 476 installs
- [config-hardener](https://affpapa.org/en/nevibecode/skills/config-hardener.md) — skill · 468 installs
- [play-policy-insights](https://affpapa.org/en/nevibecode/skills/play-policy-insights.md) — skill · 1300 installs
- [soc2-compliance](https://affpapa.org/en/nevibecode/skills/devops-skills-soc2-compliance.md) — skill · 344 installs
- [azure-monitor-audit](https://affpapa.org/en/nevibecode/skills/azure-monitor-audit.md) — skill · 313 installs
- [intended-vs-implemented](https://affpapa.org/en/nevibecode/skills/intended-vs-implemented.md) — skill · 1800 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md