Before you start
A Microsoft 365 admin needs to set up:- Office apps: a Microsoft 365 business plan that includes them, such as Business Standard.
- Microsoft 365 Copilot license: assigned to anyone who uses Copilot inside Excel or Word (the Office add-on, such as Microsoft 365 Copilot Business). Separate from Copilot Studio. Without it, Excel stays on Copilot Chat (Basic).
- Copilot Studio license: a paid license or the trial, assigned to whoever builds the agent (Microsoft 365 admin center > Users > Active users > the user > Licenses and apps).
- Dataverse: turned on for the environment Copilot Studio uses (Power Platform admin center > Manage > Environments > the environment > Add Dataverse).
- Copilot Credits: available to that environment, from the trial, a credit pack, or Microsoft 365 Copilot licenses. A pay-as-you-go plan alone isn’t enough.
Add Ultra to an agent
1
Create the agent
In Copilot Studio, go to Agents > New agent and give it a name, such as “Ultra”.
2
Add Ultra as a tool
On the agent’s Tools tab, select Add a tool > New tool > Model Context Protocol and fill in:
For authentication, select OAuth 2.0, then Dynamic discovery. Copilot Studio registers itself with Ultra, so there’s no client ID or secret to enter.
3
Connect
Select Create, create a new connection, and sign in to Ultra when prompted. Then select Add to agent.
4
Test it
On the Preview tab, ask something that uses one of your connectors, such as “Using Ultra, list the Linear issues created today.”
Use it in Copilot Chat and Teams
1
Publish
Select Publish. Then go to Channels > Teams and Microsoft 365 Copilot, check Make agent available in Microsoft Copilot, and select Add channel. Share the agent with the people who need it.
2
Approve, if required
If your organization requires approval, an admin approves the agent in the Microsoft 365 admin center under Agents.
Use it in Excel
Copilot Studio custom engine agents don’t appear in Excel. Microsoft doesn’t support them in Excel, Word, PowerPoint, Outlook, or Edge (known issues). Create a declarative agent with an MCP plugin in Microsoft 365 Agents Toolkit, with an action from an MCP server:
Pin the authorization server URL. Ultra’s registration endpoint is on
hub.ultra.security, the same reason Copilot Studio needs Dynamic discovery.
Sign in to your Microsoft 365 tenant and provision the app. An admin may need to allow uploading custom apps. In Excel on the web, save the workbook to OneDrive or SharePoint, open Copilot, and pick the agent. It appears and is usable in Excel’s Copilot pane, and in Copilot Chat. Governance, connectors, and Ultra Hub logging still apply. Word should follow the same pattern: a Microsoft 365 Copilot license, the file saved to OneDrive or SharePoint, and this plugin.
Troubleshooting
GetDynamicClientRegistrationResultAsync failed ... NotFound (404)
GetDynamicClientRegistrationResultAsync failed ... NotFound (404)
The tool uses Dynamic OAuth instead of Dynamic discovery. Edit the tool, switch to Dynamic discovery, and recreate the connection.
Couldn't load MCP tools (HTTP 400) right after connecting
Couldn't load MCP tools (HTTP 400) right after connecting
Close the tool and reopen it to retry.
Dataverse isn't set up in this environment
Dataverse isn't set up in this environment
Add Dataverse to the environment in the Power Platform admin center.
EnforcementUsageCredits or 'You need credits to continue'
EnforcementUsageCredits or 'You need credits to continue'
The environment has no Copilot Credits. Assign credits in the Power Platform admin center under Licensing > Copilot Studio.
Publish is blocked
Publish is blocked
Some Copilot Studio trial licenses can’t publish. Use a paid Copilot Studio license.
Ultra doesn't show up in Excel
Ultra doesn't show up in Excel
The Copilot Studio agent will not appear there. Use the declarative MCP plugin above. Also save the workbook to OneDrive or SharePoint, and confirm a Microsoft 365 Copilot license (Excel should show Microsoft 365 Copilot or Premium, not only Copilot Chat Basic).
Dynamic client registration fails
Dynamic client registration fails
Set the authorization server metadata to
https://oauth.ultra.security/.well-known/oauth-authorization-server.