> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ultra.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft 365 Copilot

> Use Ultra's connectors from Copilot Chat, Teams, and Excel

Office apps can't connect to an MCP server directly. For Microsoft 365 Copilot Chat and Teams, build a Copilot Studio agent that uses the remote [Ultra Connector](https://docs.ultra.security/getting-started/ultra-connector) as a tool. To set up Ultra in Excel, you need to set up a declarative agent with an MCP plugin. Each organization builds its own agent in its own Microsoft tenant; a sideloaded plugin from another tenant won't appear.

## Before you start

A Microsoft 365 admin needs to set up:

* **Office apps:** a Microsoft 365 business plan that includes them, such as Business Standard.
* **Microsoft 365 Copilot license:** assigned to anyone who uses Copilot inside Excel or Word (the Office add-on, such as Microsoft 365 Copilot Business). Separate from Copilot Studio. Without it, Excel stays on Copilot Chat (Basic).
* **Copilot Studio license:** a paid license or the trial, assigned to whoever builds the agent (**Microsoft 365 admin center > Users > Active users >** the user **> Licenses and apps**).
* **Dataverse:** turned on for the environment Copilot Studio uses (**Power Platform admin center > Manage > Environments >** the environment **> Add Dataverse**).
* **Copilot Credits:** available to that environment, from the trial, a credit pack, or Microsoft 365 Copilot licenses. A pay-as-you-go plan alone isn't enough.

## Add Ultra to an agent

**1. Create the agent**

In Copilot Studio, go to **Agents > New agent** and give it a name, such as "Ultra".

**2. Add Ultra as a tool**

On the agent's **Tools** tab, select **Add a tool > New tool > Model Context Protocol** and fill in:

| Field | Value |
| - | - |
| **Server name** | Ultra |
| **Server description** | Access your connected tools and data through Ultra. |
| **Server URL** | `https://mcp.ultra.security/mcp` |

For authentication, select **OAuth 2.0**, then **Dynamic discovery**. Copilot Studio registers itself with Ultra, so there's no client ID or secret to enter.

**3. Connect**

Select **Create**, create a new connection, and sign in to Ultra when prompted. Then select **Add to agent**.

**4. Test it**

On the **Preview** tab, ask something that uses one of your connectors, such as "Using Ultra, list the Linear issues created today."

## Use it in Copilot Chat and Teams

**1. Publish**

Select **Publish**. Then go to **Channels > Teams and Microsoft 365 Copilot**, check **Make agent available in Microsoft Copilot**, and select **Add channel**. Share the agent with the people who need it.

**2. Approve, if required**

If your organization requires approval, an admin approves the agent in the Microsoft 365 admin center under **Agents**.

## Use it in Excel

Copilot Studio custom engine agents don't appear in Excel. Microsoft doesn't support them in Excel, Word, PowerPoint, Outlook, or Edge ([known issues](https://learn.microsoft.com/en-us/microsoft-365/copilot/extensibility/known-issues)).

Create a [declarative agent with an MCP plugin](https://learn.microsoft.com/en-us/microsoft-365/copilot/extensibility/build-mcp-plugins) in Microsoft 365 Agents Toolkit, with an action from an MCP server:

| Field | Value |
| - | - |
| **Server URL** | `https://mcp.ultra.security/mcp` |
| **Auth** | OAuth with dynamic client registration (no client ID or secret) |
| **Authorization server metadata** | `https://oauth.ultra.security/.well-known/oauth-authorization-server` |
| **Resource** | `https://mcp.ultra.security/mcp` |

Pin the authorization server URL. Ultra's registration endpoint is on `hub.ultra.security`, the same reason Copilot Studio needs **Dynamic discovery**.

Sign in to your Microsoft 365 tenant and provision the app. An admin may need to allow uploading custom apps. In Excel on the web, save the workbook to OneDrive or SharePoint, open **Copilot**, and pick the agent. It appears and is usable in Excel's Copilot pane, and in Copilot Chat. Governance, connectors, and [Ultra Hub](https://hub.ultra.security) logging still apply. Word should follow the same pattern: a Microsoft 365 Copilot license, the file saved to OneDrive or SharePoint, and this plugin.

## Troubleshooting

> [accordion] GetDynamicClientRegistrationResultAsync failed ... NotFound (404)
>
> The tool uses **Dynamic** OAuth instead of **Dynamic discovery**. Edit the tool, switch to **Dynamic discovery**, and recreate the connection.

> [accordion] Couldn't load MCP tools (HTTP 400) right after connecting
>
> Close the tool and reopen it to retry.

> [accordion] Dataverse isn't set up in this environment
>
> Add Dataverse to the environment in the Power Platform admin center.

> [accordion] EnforcementUsageCredits or 'You need credits to continue'
>
> The environment has no Copilot Credits. Assign credits in the Power Platform admin center under **Licensing > Copilot Studio**.

> [accordion] Publish is blocked
>
> Some Copilot Studio trial licenses can't publish. Use a paid Copilot Studio license.

> [accordion] Ultra doesn't show up in Excel
>
> The Copilot Studio agent will not appear there. Use the declarative MCP plugin above. Also save the workbook to OneDrive or SharePoint, and confirm a Microsoft 365 Copilot license (Excel should show Microsoft 365 Copilot or Premium, not only Copilot Chat Basic).

> [accordion] Dynamic client registration fails
>
> Set the authorization server metadata to `https://oauth.ultra.security/.well-known/oauth-authorization-server`.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.