bc-webclient-mcp-server

The system uses environment variables for sensitive credentials (BC_USERNAME, BC_PASSWORD, etc.), which is good practice. It also implements a consent and audit logging mechanism for high-sensitivity operations, improving transparency and accountability. However, the core functionality relies on a .NET runtime patch (CopilotPatcher.dll) to enable API key authentication on an on-premises Business Central server, replacing Azure S2S tokens. This non-standard modification to the BC server could introduce vulnerabilities or bypass native security features if the patcher itself is compromised or misconfigured. Hardcoded secrets were found in test scripts, highlighting the need for vigilance in production environments. Actions performed by the AI agent will inherit the permissions of the authenticated BC user, requiring careful management of user privileges.