Every source GILD analyzed, newest first. Each says who the source is, how it knows, whether it still applies and which findings it counts toward. Open a count to see only its sources.
Source
66 sources in All users, with product documentation Showing all 66 sources
No opinion stated
Why can't we pin our Copilot Studio agent in Microsoft 365?Reddit post, r/copilotstudio
An agent published to SharePoint, Teams and the Microsoft 365 app for an Entra group does not appear in the admin center's pinned agents list, although users can reach it by link.
Negative
Post by @kesslernity on XX post
Backs a rollout gated to a tenth of licensed users and calls credits used by people with no Copilot Studio path the most worrying problem.
Not counted
Its author sells Copilot rollout and governance kits, and the post promotes them. Kept in the record; it takes part in no figure.
No opinion stated
Persistent Memory Across Conversations in Microsoft Copilot StudioReddit post, r/copilotstudio
The agent works, but it keeps no context between conversations, so users re-enter information, and the poster asks whether Dataverse or SharePoint should hold each user's state.
Counts toward
Negative
Why can't we use they A.I itself to create and design the workflow for the Agent?Reddit post, r/copilotstudio
Moved to Copilot Studio for security reasons, but as a non-developer finds designing the agent very difficult, where another chatbot built the same job from plain directions.
Counts toward
Negative
Copilot Studio vs PowerPlatformReddit post, r/PowerPlatform
Says Microsoft rebuilt Power Apps, Power Automate and Virtual Agents inside Copilot Studio and added a runtime charge, with no clear plan for Power Platform, which never charged for opening an app.
Negative
Copilot Studio agent behaves differently in Teams and test paneReddit post, r/copilotstudio
The agent sometimes stops responding in Teams until a debug command clears its state, and a question node that appears in the test pane never appears in Teams.
Mixed
Stand Agent Subagents in TeamsReddit post, r/copilotstudio
The GitHub Copilot harness worked well, but the team's manager balked at its cost, so the poster spent a week rebuilding on the standard harness. The rebuild works in the studio but behaves badly in Teams, where it locks onto one sub-agent.
Negative
Post by @alex_harl on XX post
Admin controls are thin: the GitHub Copilot harness could only be stopped by turning off all publishing, and users with no path to credits still consume them despite cost policies. The surface keeps changing and agent traces expose personal data to admins.
Mixed
Copilot Studio - topic-scoped knowledge vs. tenant graph grounding (cost question)Reddit post, r/copilotstudio
Tenant graph grounding gives good answers but costs 10 credits a message, so the poster plans to split the PDFs into topic folders with their own answer nodes and asks how topic changes are billed.
Negative
Copilot Studio environments keep going over Dataverse file capacity. How do you manage it?Reddit post, r/copilotstudio
File storage sits at about 2.5 GB against a 2 GB limit and keeps growing, even in environments where nobody built tables. The poster suspects agent knowledge files.
Negative
Generative orchestrator interfering with generative answer nodeReddit post, r/copilotstudio
A generative answers node inside a topic sometimes hands the turn to the main orchestrator instead, and orchestration must stay on for the conversation to continue.
Negative
Copilot Studio Inline Agent stops processing uploaded files and generates incomplete Word documentsReddit post, r/copilotstudio
The inline agent appears to receive file data in encoded form, and in asynchronous mode it stops after about 3 minutes, leaving the Word document empty or half filled.
Mixed
Facing DLP errors and publishing issues in Copilot Studio. Any idea how to fix these?Reddit post, r/copilotstudio
A flow tool hit unclear data policy errors, and a published agent worked for the author but not for colleagues. Both were fixed by reading the policy errors in classic mode and moving the Microsoft 365 and Teams connectors into the Business group.
Negative
Is anyone using environment routing and zoned governance?Reddit post, r/copilotstudio
Environment routing gives makers the System Administrator role in their Zone 1 environment, so they can raise their own roles and share with anyone, which the poster calls a large security problem.
Mixed
Copilot Studio, MCP URL path: GPT-5.5 Chat can't look up the board (search cut and 8 required fields, GraphQL variables required); tested fixGitHub issue, mondaycom/mcp
The same monday.com job passed 6 of 6 runs through the certified connector. Through the MCP URL it passed 3 of 3 runs with Claude Sonnet 4.6 and 0 of 3 with GPT-5.5 Chat, which the author traced to Copilot Studio keeping only the first 70 tools.
Negative
Copilot agent searching ServiceNow knowledgeReddit post, r/copilotstudio
The agent can reach only excerpts of ServiceNow articles, although the same connector works in Microsoft 365 Copilot search.
Negative
Are prompts downs?Reddit post, r/copilotstudio
Since October 1, any prompt with code interpreter on fails to test or save with an internal server error, even a one-line prompt, though prompts saved earlier still run from flows.
Negative
Issue with deploying GitHub Harness agents.Reddit post, r/copilotstudio
Classic agents deploy to Teams and Microsoft 365, but agents built on the GitHub Copilot harness show blank details and cannot be added, even with a billing plan attached.
No opinion stated
Clarification on Copilot Conversation Length Limits and Copilot Studio AgentsReddit post, r/copilotstudio
Hit a message that the conversation had reached its limit and found no documentation of the limit, nor whether it applies to licensed users or to an agent calling a CRM through MCP.
Counts toward
Negative
Comment on: Microsoft abandons personal AI chatbot race with Copilot rebootHacker News comment
Says local government organizations already struggle to tell apart Microsoft 365 Copilot, Copilot Chat, Copilot Studio, Agent Builder, Cowork and the rest, and each rebrand adds another change to manage.
No opinion stated
Best practice for RBAC design in Copilot Studio + MCP server for Active Directory operations?Reddit post, r/sysadmin
The agent calls a custom MCP server for Active Directory tasks, with tools grouped into seven modules to stay under Copilot's tool limit. The poster asks whether to control access with Entra app roles or security groups.
Negative
Comment on: Apple caught off guard by AI demand for Mac Mini and Mac StudioHacker News comment
The commenter's company requires a three-page proposal to get a three-week Copilot Studio trial project, then sign-off on token cost and a security review that takes months, and most projects stop before deployment. The commenter calls it the worst AI builder, kept only because the company bans the others.
Negative
Hosted Tableau MCP (mcp.tableau.com) unusable from Microsoft Copilot Studio - no registration_endpoint and no client secretGitHub issue, tableau/tableau-mcp
Copilot Studio's MCP sign-in wizard supports only dynamic client registration, which Tableau's hosted server does not offer, so sign-in fails with a bare 404 error.
Counts toward
Mixed
Three harnesses, one product name: what actually changed in Copilot Studio pricingPersonal blog post, marlon-koenig.com
On the GitHub Copilot harness, authoring, testing, evaluations and runtime all use Copilot Credits, and a Microsoft 365 Copilot license gives no relief. The author calls the harness better but says the meter makes people test less.
No opinion stated
Reviewing Microsoft Copilot Studio agents: three 2026 CVEs and the DLP gap they shareSecurity research post, Drel
Reviews three Copilot Studio CVEs from 2026 and argues that data policies miss an approved action, such as an Outlook send, used for an unapproved purpose. A patched prompt injection still moved data out through such an action.
Counts toward
Mixed
Sorry, something unexpected happened: Calling a Copilot Studio (New Experience) agent from Power AutomatePersonal blog post, marlon-koenig.com
An agent that worked poorly in classic Copilot Studio worked a lot better in the new experience. Calling it from Power Automate returned an error while the flow still reported success, and the workaround took days.
Positive
Copilot Studio New Agent Experience: Easy Skill-First 2026Personal blog post, wrvishnu.com
The rebuild with four skill files, three flows and connector tools took a fraction of the topic authoring the classic version needed. Routing to a stale tool and vague skill descriptions still cost hours.
No opinion stated
Comment on: Ask HN: Is anyone running AI agents in production reliably - what's your stack?Hacker News comment
At work the commenter has gone no further than Copilot Studio and Copilot Cowork agents, because IT security policy limits the other options.
No opinion stated
Comment on: Ask HN: Is anyone running AI agents in production reliably - what's your stack?Hacker News comment
Asks how anyone gets visibility into what Copilot Studio agents are doing, or whether they are mostly a black box.
Counts toward
Negative
Comment on: Jira Is Turing-CompleteHacker News comment
Setting up logic in Copilot Studio is painful and worse without a high-memory machine. Driving it from Claude also failed: the pac CLI was broken and the web pages responded to clicks about 10 seconds late.
Negative
Comment on: Jira Is Turing-CompleteHacker News comment
Calls it ironic that Microsoft's tool for building AI is so hard to drive with AI, and calls Copilot Studio a hot mess in the commenter's own use.
Counts toward
Negative
Administering end-user Microsoft AI toolsReddit post, r/sysadmin
Asks how to govern Copilot Studio and AI Builder, how to give credits only to specific users, and where the data training and residency terms are. Says the messy product line makes admins hesitate, and that OpenAI's token accounting is clearer.
Negative
Fixing missing Output Parameters in Adaptive CardsReddit post, r/PowerPlatform
An adaptive card in Formula format produced no output parameters. The workaround was to define inputs in JSON, map variables, then switch back, because switching formats wipes the schema.
No opinion stated
ShareLeak: Taking the Wheel of Microsoft's Copilot Studio (CVE-2026-21520)Security research post, Capsule Security
Instructions planted in a form's comments field made the agent read customer data from SharePoint Lists and email it outside the organization, even when Microsoft's safety checks flagged the request. Microsoft fixed it in January 2026 as CVE-2026-21520, rated CVSS 7.5.
Counts toward, pending a recheck
Positive
Comment on: ChatGPT for ExcelHacker News comment
Says Microsoft is moving away from OpenAI and that Copilot Studio agents then switched from GPT-5 to Claude Sonnet 4.6 by default. Microsoft's model page now names GPT Chat Latest as the default.
Counts toward, pending a recheck
Mixed
Comment on: Caveman Mode Save Token?Hacker News comment
Agents hit an 8,000-character instructions limit quickly. Having Copilot compress the instructions to about 5,000 characters kept the agent as consistent as before.
Mixed
Hands On: Getting Started with Microsoft Copilot Studio AgentsHands-on review, Virtualization Review
Creating the agent felt fast and approachable, but retrieval surfaced only one worksheet tab, and the data had to be restructured before the answers worked.
Counts toward, pending a recheck
Positive
Comment on: Wine 11 rewrites how Linux runs Windows games at kernel with massive speed gainsHacker News comment
Built an HR flow in a couple of hours that reads job applications, answers irrelevant ones, creates a Teams site with the right people, and invites the applicant to a first meeting. It works better than the commenter expected, and Entra ID made the access setup easy.
No opinion stated
Microsoft Copilot Studio Security Risk: How Simple Prompt Injection Leaked Credit Cards and Booked a $0 TripSecurity research post, Tenable
A few prompts made the test agent list its actions, return card data for several bookings, and change a US$1,000 trip price to US$0 through its update action.
Counts toward
Negative
Comment on: Microsoft lowers AI software growth targetsHacker News comment
Says Microsoft's platforms move too slowly and limit how reliably teams can integrate business systems, and advises clients to build their own agents with their own guardrails and tools.
Negative
Comment on: Microsoft lowers AI software growth targetsHacker News comment
Lists the roadblocks: poor determinism that forces tools into Power Automate, no secure way to share agents, a laggy studio with no clear source control, and a Calendar MCP that still cannot book a meeting. The commenter says it did not deliver and is looking at other platforms.
Counts toward
Mixed
Comment on: Anthropic invests $50B in US AI infrastructureHacker News comment
The commenter's project loaded tens of thousands of documents into SharePoint and expects Copilot Studio to retrieve from them and give meaningful answers with a four-line prompt, an expectation the commenter doubts.
Mixed
Copilot studio agent keeps asking you to connect to an MCP server even though you are, apparently, connected? Check this settingPersonal blog post, It Ain't Boring
The agent kept asking the author to open the connection manager while the MCP connection showed as connected. Switching the tool to maker-provided credentials fixed it.
No opinion stated
CoPhish: Using Microsoft Copilot Studio as a wrapper for OAuth phishingSecurity research post, Datadog Security Labs
An agent's built-in Login button, shared from a Microsoft-hosted page, can lead users into an OAuth consent attack, and a topic can then send the user's token to an outside URL. Microsoft's consent policy changes in 2025 narrow the risk without closing it for admin roles.
Counts toward, pending a recheck
Mixed
The Good, The Bad, and The Ugly of Copilot Studio: A Brutally Honest Review Going Into Late 2025Personal blog post, ragnarheil.de
The author calls the move from GPT-4o and GPT-4.1 to GPT-5 a large jump and praises MCP with OAuth and quick test cycles. The review criticizes child agents that cannot run their own MCP servers, almost no tool-call logging, and broken lifecycle management in managed solutions.
Not counted
Its author is a Microsoft MVP, a recognition program Microsoft runs. Kept in the record; it takes part in no figure.
Positive
Comment on: Microsoft 365 Copilot's commercial failureHacker News comment
The commenter's organization uses both versions: the lite one reaches SharePoint and Teams data quickly, and the full one reaches any system with a Power Platform connector, REST API, MCP server or Copilot connector, such as SAP, SQL or Databricks.
Negative
Copilot Studio Agent - Poor Results with CSV Knowledge Source (Summarization & Categorization)GitHub issue, microsoft/copilot-camp
With a roughly 40 MB CSV of Jira issues as knowledge, and again after splitting it into PDFs, summarization and categorization answers stayed unsatisfactory. Microsoft 365 Copilot's Analyst and Researcher answered the same questions much better.
Counts toward
Negative
Comment on: Microsoft Introduces 'Copilot Mode' in EdgeHacker News comment
Says building a custom agent in Copilot Studio amounts to building Power Automate flows that an LLM calls.
No opinion stated
A Copilot Studio Story 2: When AIjacking Leads to Full Data ExfiltrationSecurity research post, Zenity Labs
One emailed prompt injection made the replica agent send its whole knowledge file and dozens of Salesforce records to the attacker. Microsoft fixed the reported path in April 2025, and Zenity says prompt injection remains possible.
Counts toward, pending a recheck
Negative
Comment on: Microsoft is struggling to sell Copilot to corporations - employees want ChatGPTHacker News comment
Spent part of several months trying to make a simple project work in Copilot Studio as well as it did as an OpenAI GPT and never managed it. Microsoft staff could barely confirm which model it used.
No opinion stated
PowerPlatform Admin and Copilot StudioReddit post, r/PowerPlatform
Configures data policies first and asks whether agents need separate development and production environments and pipelines, as Power Apps do.
Positive
Comment on: Orbit by MozillaHacker News comment
Calls Copilot Studio, the former Power Virtual Agents, unique among enterprise AI offerings and expects it to become Microsoft's main way for companies to run AI internally.
Pages from Microsoft, used to check facts for every group.
Documents single sign-on (SSO) through Microsoft Entra ID for agents on a custom website, Microsoft Teams, SharePoint, and the Omnichannel live chat channel. SSO isn't supported when an agent is published to Power Pages.
Lists standard connectors such as SharePoint in all Copilot Studio plans, premium connectors in select plans, and custom connectors for any public API that existing connectors do not cover.
States that agents can use MCP tools and resources, that each tool a connected MCP server publishes becomes available automatically, and that MCP requires generative orchestration.
Explains that an agent published at least once can be connected to the Teams and Microsoft Copilot channels, and that Teams applies rate limiting to agents.
Names GPT Chat Latest as the default model for the standard harness and lists Claude Sonnet 4.6 and Claude Opus 4.6 to 4.8 as Anthropic models to choose from. External models from Anthropic, xAI, or Mistral can also be added, and models marked cross-geo might process data outside the region.
States that makers can bring Azure AI Foundry models into the Prompt tool alongside the managed models, in Copilot Studio, Power Apps, and Power Automate.
Sells Copilot Studio as a tenant-wide license with Copilot Credit packs of 25,000 credits at US$200 per pack per month, plus a pay-as-you-go meter, and up to 20% savings on prepurchased Copilot Credit Commit Units.
States that agents moved from messages to Copilot Credits on September 1, 2025, and that pay-as-you-go bills only the credits used each month. Unused prepaid credits do not carry over, and use beyond purchased capacity can lead to service denial.
Lists the Copilot Studio pay-as-you-go meter at US$0.01 per Copilot Credit consumed by agents, billed to an Azure subscription.
Bills a classic answer at 1 Copilot Credit, a generative answer at 2, an agent action at 5, tenant graph grounding at 10, and agent flow actions at 13 per 100, with no charge for Microsoft 365 Copilot licensed users. Admins can set monthly limits per agent, and bring-your-own-model use is billed separately.
Lists the Copilot Studio activities that Microsoft Purview audit logs record, with administrative activities logged by default on all tenants and available through the Office 365 Management API.
States that Copilot Studio is covered by the HIPAA Business Associate Agreement and audited for SOC, ISO 27001 and other ISO standards, PCI DSS, HITRUST CSF, and CSA STAR, with FedRAMP met in Microsoft's government cloud.
States that customer data stays in the chosen Azure geography with some exceptions, that a tenant in an unlisted location stores data in the United States, and that conversation logs sit in the region of the user's Exchange mailbox.
Sets generative AI quotas per Dataverse environment from 50 requests a minute and 1,000 an hour at the lowest capacity tier, a five-minute timeout per model response, 25 SharePoint sites per agent with generative orchestration, and 5 MB connector payloads (450 KB on GCC).
Source index
Every source GILD read, with the original address and the context used to count it. Open a finding to filter the full cards above. On smaller screens the index lists each source once by name, cohort and date; its full record above carries the address, context and findings.
| Source | Original URL | Author and context | Who | Published | Review date | Applies | Findings |
|---|---|---|---|---|---|---|---|
| Why can't we pin our Copilot Studio agent in Microsoft 365?ID s-51 | Communities & Admin Forums | www.reddit.com/ | Diligent_Banana9903, Reddit userself-described: Organization with AI and Global Administrators publishing an agent to an Entra group | Department | Published Oct 27, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Post by @kesslernity on XID s-52 | Communities & Admin Forums | x.com/ | Kesslernity, seller of enterprise AI rollout kitsself-described: Reply on a Copilot Studio rollout thread | Individual user | Published Oct 27, 2026 | Assessment reviewed Oct 28, 2026 | Current | Not counted. Its author sells Copilot rollout and governance kits, and the post promotes them. |
| Persistent Memory Across Conversations in Microsoft Copilot StudioID s-50 | Communities & Admin Forums | www.reddit.com/ | Spare_Accountant8794, Reddit userself-described: Agent guiding users through a multi-step process | Individual user | Published Oct 24, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Why can't we use they A.I itself to create and design the workflow for the Agent?ID s-48 | Communities & Admin Forums | www.reddit.com/ | amkamdar, non-developer business ownerself-described: Small business turning PDF sales orders from a mailbox into ERP entries | Individual user | Published Oct 23, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Copilot Studio vs PowerPlatformID s-49 | Communities & Admin Forums | www.reddit.com/ | davidcottondev, Reddit userself-described: Power Platform maker comparing Copilot Studio with Power Apps and Power Automate | Individual user | Published Oct 23, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Copilot Studio agent behaves differently in Teams and test paneID s-47 | Communities & Admin Forums | www.reddit.com/ | PAARTHPATEL, Reddit userself-described: Team running a topic-based agent with SharePoint knowledge in Teams | Department | Published Oct 22, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Stand Agent Subagents in TeamsID s-45 | Communities & Admin Forums | www.reddit.com/ | redsaeok, Reddit userself-described: Team whose manager reviews agent running costs | Department | Published Oct 20, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Post by @alex_harl on XID s-46 | Communities & Admin Forums | x.com/ | alex_harl, IT practitionerself-described: Organization rolling out Copilot Studio agent creation to about 10% of licensed users | Organization-wide | Published Oct 20, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Copilot Studio - topic-scoped knowledge vs. tenant graph grounding (cost question)ID s-44 | Communities & Admin Forums | www.reddit.com/ | Firm_Pin4840, Reddit userself-described: Builds internal agents over large SharePoint PDFs | Individual user | Published Oct 18, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Copilot Studio environments keep going over Dataverse file capacity. How do you manage it?ID s-43 | Communities & Admin Forums | www.reddit.com/ | EnvironmentalAir36, Reddit userself-described: Admin of the organization's Copilot Studio environments | Department | Published Oct 17, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Generative orchestrator interfering with generative answer nodeID s-42 | Communities & Admin Forums | www.reddit.com/ | No-Supermarket8134, Reddit userself-described: Standard harness agent with topic-level generative answers | Individual user | Published Oct 14, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Copilot Studio Inline Agent stops processing uploaded files and generates incomplete Word documentsID s-41 | Communities & Admin Forums | www.reddit.com/ | Freggel1995, Reddit userself-described: Flow that passes uploaded files to an inline agent to fill a Word template | Individual user | Published Oct 9, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Facing DLP errors and publishing issues in Copilot Studio. Any idea how to fix these?ID s-40 | Communities & Admin Forums | www.reddit.com/ | Ill_Combination_3520, Reddit userself-described: Building agents on both the standard and GitHub Copilot harnesses | Individual user | Published Oct 8, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Is anyone using environment routing and zoned governance?ID s-39 | Communities & Admin Forums | www.reddit.com/ | DevelopmentVast819, Reddit userself-described: Admin team that set up environment routing and zoned governance | Department | Published Oct 7, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
Copilot Studio, MCP URL path: GPT-5.5 Chat can't look up the board (search cut and 8 required fields, GraphQL variables required); tested fixID s-38 | Communities & Admin Forums | github.com/ | Eugene Levitin (evgeni4i4), founder of Dockaself-described: Testing whether agents finish a monday.com job through Copilot Studio | IT & leadership | Published Oct 5, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Copilot agent searching ServiceNow knowledgeID s-36 | Communities & Admin Forums | www.reddit.com/ | Flangipan, Reddit userself-described: Teams agent over a ServiceNow knowledge base | Individual user | Published Oct 2, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Are prompts downs?ID s-37 | Communities & Admin Forums | www.reddit.com/ | Rockeygamer, Reddit userself-described: Prompts with code interpreter used from flows, in Europe | Individual user | Published Oct 2, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Issue with deploying GitHub Harness agents.ID s-35 | Communities & Admin Forums | www.reddit.com/ | SuperDaddio, Reddit userself-described: Organization moving managed solutions from development to user acceptance testing | Department | Published Sep 30, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Clarification on Copilot Conversation Length Limits and Copilot Studio AgentsID s-34 | Communities & Admin Forums | www.reddit.com/ | ImportantPudding1570, Reddit userself-described: Building a declarative agent for a client on Microsoft 365 Copilot Chat | Department | Published Sep 28, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Comment on: Microsoft abandons personal AI chatbot race with Copilot rebootID s-33 | Communities & Admin Forums | news.ycombinator.com/ | mugenjin23, local government staff, Australiaself-described: State and local government organizations in Australia | Department | Published Sep 26, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Best practice for RBAC design in Copilot Studio + MCP server for Active Directory operations?ID s-32 | Communities & Admin Forums | www.reddit.com/ | Fabulous_Squash_7049, Reddit userself-described: Production design for an agent that runs Active Directory operations | Department | Published Sep 9, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Comment on: Apple caught off guard by AI demand for Mac Mini and Mac StudioID s-31 | Communities & Admin Forums | news.ycombinator.com/ | wolvoleo, Hacker News commenterself-described: Large company where every AI project needs sponsorship, cost sign-off and security review | Organization-wide | Published Sep 1, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Hosted Tableau MCP (mcp.tableau.com) unusable from Microsoft Copilot Studio - no registration_endpoint and no client secretID s-30 | Communities & Admin Forums | github.com/ | MarcoLema1, GitHub userself-described: Connecting a Copilot Studio agent to Tableau's hosted MCP server | Individual user | Published Aug 14, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Three harnesses, one product name: what actually changed in Copilot Studio pricingID s-11 | Business Blogs & Security Research | marlon-koenig.com/ | Marlon König, Power Platform practitioner and conference speakerself-described: Advising customers on Copilot Studio licensing | Individual user | Published Aug 13, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Reviewing Microsoft Copilot Studio agents: three 2026 CVEs and the DLP gap they shareID s-10 | Business Blogs & Security Research | drel.ai/ | Drel Research, AI security review companyself-described: Review of published Copilot Studio vulnerabilities | Department | Published Aug 10, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Sorry, something unexpected happened: Calling a Copilot Studio (New Experience) agent from Power AutomateID s-09 | Business Blogs & Security Research | marlon-koenig.com/ | Marlon König, Power Platform practitioner and conference speakerself-described: A business agent from a customer project | Individual user | Published Jul 30, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Copilot Studio New Agent Experience: Easy Skill-First 2026ID s-08 | Business Blogs & Security Research | www.wrvishnu.com/ | W.R. Vishnu, independent Microsoft 365 consultantself-described: Rebuilding the author's HR Leave Assistant agent in the new agent experience | Individual user | Published Jul 22, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Comment on: Ask HN: Is anyone running AI agents in production reliably - what's your stack?ID s-28 | Communities & Admin Forums | news.ycombinator.com/ | wendell_labs, Hacker News commenterself-described: Workplace where IT security policy limits the AI tools allowed | Individual user | Published Jun 12, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Comment on: Ask HN: Is anyone running AI agents in production reliably - what's your stack?ID s-29 | Communities & Admin Forums | news.ycombinator.com/ | nehpets, Hacker News commenterself-described: Runs agents in production for their own SaaS product | Individual user | Published Jun 12, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Comment on: Jira Is Turing-CompleteID s-26 | Communities & Admin Forums | news.ycombinator.com/ | NoMoreNicksLeft, Hacker News commenterself-described: Building agent logic in Copilot Studio at work | Individual user | Published May 25, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Comment on: Jira Is Turing-CompleteID s-27 | Communities & Admin Forums | news.ycombinator.com/ | Atiscant, Hacker News commenterself-described: Building agents in Copilot Studio | Individual user | Published May 25, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Administering end-user Microsoft AI toolsID s-25 | Communities & Admin Forums | www.reddit.com/ | kayhai, admin at an enterprise on Microsoft 365 E5self-described: Enterprise on Microsoft 365 E5 governing Copilot Studio and AI Builder use | Organization-wide | Published May 20, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Fixing missing Output Parameters in Adaptive CardsID s-24 | Communities & Admin Forums | www.reddit.com/ | Impossible-Chain5416, Reddit userself-described: Building topics with adaptive cards | Individual user | Published Apr 29, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| ShareLeak: Taking the Wheel of Microsoft's Copilot Studio (CVE-2026-21520)ID s-07 | Business Blogs & Security Research | www.capsulesecurity.io/ | Bar Kaduri, Capsule Securityself-described: Security researchers attacking an agent triggered by a public SharePoint form | Department | Published Apr 15, 2026 | Assessment reviewed Oct 28, 2026 | Needs a recheck | |
| Comment on: ChatGPT for ExcelID s-23 | Communities & Admin Forums | news.ycombinator.com/ | p_ing, Hacker News commenterself-described: Organization running Copilot Studio agents on Microsoft 365 Copilot licenses | Individual user | Published Apr 15, 2026 | Assessment reviewed Oct 28, 2026 | Needs a recheck | |
| Comment on: Caveman Mode Save Token?ID s-22 | Communities & Admin Forums | news.ycombinator.com/ | illwrks, Hacker News commenterself-described: Trying out Copilot Studio agents | Individual user | Published Apr 4, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Hands On: Getting Started with Microsoft Copilot Studio AgentsID s-06 | Business Blogs & Security Research | virtualizationreview.com/ | David Ramel, editor and writer at Converge 360self-described: A personal agent over a SharePoint-hosted Excel tracker of the author's own articles | Individual user | Published Mar 26, 2026 | Assessment reviewed Oct 28, 2026 | Needs a recheck | |
| Comment on: Wine 11 rewrites how Linux runs Windows games at kernel with massive speed gainsID s-21 | Communities & Admin Forums | news.ycombinator.com/ | Quothling, enterprise IT at a European energy companyself-described: Energy sector company's IT department building HR automation | Department | Published Mar 25, 2026 | Assessment reviewed Oct 28, 2026 | Current | |
| Microsoft Copilot Studio Security Risk: How Simple Prompt Injection Leaked Credit Cards and Booked a $0 TripID s-05 | Business Blogs & Security Research | www.tenable.com/ | Guy Zetland and Keren Katz, Tenable AI Researchself-described: Security researchers testing a travel booking agent built on a SharePoint list of test data | Department | Published Dec 11, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| Comment on: Microsoft lowers AI software growth targetsID s-19 | Communities & Admin Forums | news.ycombinator.com/ | ramoz, adviser to enterprise clientsself-described: Meets enterprise clients who evaluate Copilot Studio | Department | Published Dec 3, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| Comment on: Microsoft lowers AI software growth targetsID s-20 | Communities & Admin Forums | news.ycombinator.com/ | pbronez, Hacker News commenterself-described: Deploying Copilot Studio and Power Platform for an enterprise on Microsoft's US Government Community Cloud | Organization-wide | Published Dec 3, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | Overall signalConnectors & MCP: Mixed or negativeEase of Building: Mixed or negativeAgent Flows & Automation: Mixed or negativeReliability & Bugs: Raised as a concernAdmin Controls & Governance: Raised as a concernThe test pane is not productionShould an organization build its agents in Copilot Studio or somewhere else?: Build elsewhere |
| Comment on: Anthropic invests $50B in US AI infrastructureID s-18 | Communities & Admin Forums | news.ycombinator.com/ | KaiserPro, Hacker News commenterself-described: Work project grounding an agent on SharePoint documents | Department | Published Nov 12, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| Copilot studio agent keeps asking you to connect to an MCP server even though you are, apparently, connected? Check this settingID s-04 | Business Blogs & Security Research | www.itaintboring.com/ | Alex Shlega, Power Platform bloggerself-described: The author's own agent calling an MCP server | Individual user | Published Nov 8, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| CoPhish: Using Microsoft Copilot Studio as a wrapper for OAuth phishingID s-03 | Business Blogs & Security Research | securitylabs.datadoghq.com/ | Katie Knowles, Datadog Security Labsself-described: Security researcher testing a malicious agent from an attacker's own tenant | Department | Published Oct 20, 2025 | Assessment reviewed Oct 28, 2026 | Needs a recheck | |
| The Good, The Bad, and The Ugly of Copilot Studio: A Brutally Honest Review Going Into Late 2025ID s-02 | Business Blogs & Security Research | ragnarheil.de/ | Ragnar Heil, Microsoft MVP designing agentsself-described: Agent design work for the author's own projects and clients | Individual user | Published Oct 18, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | Not counted. Its author is a Microsoft MVP, a recognition program Microsoft runs. |
| Comment on: Microsoft 365 Copilot's commercial failureID s-17 | Communities & Admin Forums | news.ycombinator.com/ | p_ing, Hacker News commenterself-described: Organization making heavy use of Copilot Studio lite and full | Department | Published Oct 5, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| Copilot Studio Agent - Poor Results with CSV Knowledge Source (Summarization & Categorization)ID s-16 | Communities & Admin Forums | github.com/ | ashokganjireddy, GitHub userself-described: Agent built over a Jira extract as its knowledge source | Individual user | Published Sep 19, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| Comment on: Microsoft Introduces 'Copilot Mode' in EdgeID s-15 | Communities & Admin Forums | news.ycombinator.com/ | moi2388, Hacker News commenterself-described: Building custom agents in Copilot and Copilot Studio | Individual user | Published Jul 30, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| A Copilot Studio Story 2: When AIjacking Leads to Full Data ExfiltrationID s-01 | Business Blogs & Security Research | labs.zenity.io/ | Tamir Ishay Sharbat, Zenity Labsself-described: Security researchers attacking a replica of a McKinsey customer service agent built in Copilot Studio | Department | Published Jul 7, 2025 | Assessment reviewed Oct 28, 2026 | Needs a recheck | |
| Comment on: Microsoft is struggling to sell Copilot to corporations - employees want ChatGPTID s-14 | Communities & Admin Forums | news.ycombinator.com/ | CharlesW, Hacker News commenterself-described: A work project built on prompts and knowledge files | Individual user | Published Jun 26, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| PowerPlatform Admin and Copilot StudioID s-13 | Communities & Admin Forums | www.reddit.com/ | minisvlad, Power Platform adminself-described: Company starting to evaluate Copilot Studio for a Teams bot over SharePoint libraries | Department | Published Mar 21, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| Comment on: Orbit by MozillaID s-12 | Communities & Admin Forums | news.ycombinator.com/ | ajcp, Hacker News commenterself-described: Enterprise AI tools compared from work | Individual user | Published Jan 3, 2025 | Assessment reviewed Oct 28, 2026 | Still applicable | |
| Configure single sign-on with Microsoft Entra IDID pd-01 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Use Power Platform connectors as tools in Copilot Studio agentsID pd-02 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Extend your agent with Model Context ProtocolID pd-03 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Connect and configure an agent for Teams and Microsoft 365ID pd-04 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Select a primary AI model for your agentID pd-05 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Bring your own model for your promptsID pd-06 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Copilot Studio pricingID pd-07 | Product Documentation | www.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Licensing for agents powered by the standard harnessID pd-08 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Pay-as-you-go metersID pd-09 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Billing rates and managementID pd-10 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Audit Copilot Studio activities in Microsoft PurviewID pd-11 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Ensure compliance with Copilot StudioID pd-12 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Data locations in Copilot StudioID pd-13 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
| Quotas and limitsID pd-14 | Product Documentation | learn.microsoft.com/ | MicrosoftOfficial Microsoft pricing page and Microsoft Learn documentation | Not counted (documentation) | No date stated | Documentation checked Oct 28, 2026 | Current | Verification only |
