Configuring Sales Layer MCP Server in Microsoft Copilot Studio

Modified on Tue, 2 Jun at 11:48 AM


Microsoft Copilot Studio can connect to the Sales Layer MCP Server using the Model Context Protocol. This allows your Copilot agent to use Sales Layer tools to query your catalog data from a secure MCP connection.


This article explains how to configure the Sales Layer MCP Server in Microsoft Copilot Studio and how to complete the Sales Layer authorization flow.


Before you start


Before configuring the MCP Server in Copilot Studio, make sure you have:


  • Access to Microsoft Copilot Studio.
  • Permission to add a Model Context Protocol server in your Copilot Studio environment.
  • A Sales Layer account with access to the catalog you want to connect.
  • Your Sales Layer Catalog Token.


At the moment, the Catalog Token is not obtained from an API/Tokens section inside the Sales Layer PIM. To get it, contact Sales Layer Support or your Sales Layer account representative.

Recommended setup


If your version of Microsoft Copilot Studio offers Dynamic discovery for MCP servers, use that option first. Dynamic discovery lets Copilot Studio detect the OAuth configuration automatically and helps avoid manual configuration errors.


Use the following basic configuration:


FieldValue
Server nameSales Layer MCP
Server descriptionMCP Server for Sales Layer PIM
Server URLhttps://mcp.saleslayer.com/mcp
AuthenticationOAuth 2.0


Add the MCP Server in Copilot Studio


  1. Open Microsoft Copilot Studio.
  2. Open the Copilot where you want to use Sales Layer data.
  3. Go to the area where you can add tools or connect a Model Context Protocol server.
  4. Select the option to add a new MCP server.
  5. Enter Sales Layer MCP as the server name.
  6. Enter MCP Server for Sales Layer PIM as the description.
  7. Enter the server URL: https://mcp.saleslayer.com/mcp.
  8. For authentication, select OAuth 2.0.
  9. If Dynamic discovery is available, select it and continue with the connection.


Manual OAuth configuration


If Dynamic discovery is not available in your version of Copilot Studio, configure OAuth 2.0 manually with the following values:


FieldValue
Authorization URLhttps://mcp.saleslayer.com/oauth/authorize
Token URLhttps://mcp.saleslayer.com/oauth/token
Client IDcopilot-studio
Client SecretLeave empty
ScopeLeave empty
Grant TypeAuthorization Code with PKCE
Code Challenge MethodS256


Important: The Catalog Token is entered later in the Sales Layer authorization screen. It is not the Client ID, Client Secret, API key authentication value, or bearer token used in Copilot Studio. The Client ID is only a stable identifier for the Copilot Studio connection. 


Complete the Sales Layer authorization flow


After the MCP Server has been configured, Copilot Studio starts the OAuth authorization flow.


  1. Connect the MCP Server from Copilot Studio.
  2. Copilot Studio opens a browser window.
  3. A Sales Layer authorization screen appears.
  4. Enter your Sales Layer Catalog Token.
  5. Sales Layer validates the token.
  6. After validation, you are redirected back to Copilot Studio.
  7. The connection is established and the Sales Layer MCP tools become available.


Compatibility requirement


The Sales Layer MCP Server requires OAuth 2.0 with PKCE and the S256 code challenge method. PKCE stands for Proof Key for Code Exchange and is required for this connection.


If your version of Copilot Studio does not allow Authorization Code with PKCE and Code Challenge Method S256, it may not be compatible with the Sales Layer MCP Server at this time.


Reference endpoints


Use these endpoints for advanced configuration or troubleshooting:


EndpointURL
MCP Serverhttps://mcp.saleslayer.com/mcp
OAuth Authorizationhttps://mcp.saleslayer.com/oauth/authorize
OAuth Tokenhttps://mcp.saleslayer.com/oauth/token
OAuth Discoveryhttps://mcp.saleslayer.com/.well-known/oauth-authorization-server
OAuth Protected Resourcehttps://mcp.saleslayer.com/.well-known/oauth-protected-resource


Test the connection


Once the server is connected, open your Copilot and check that the Sales Layer MCP tools are available. You can test with a simple prompt such as:


What Sales Layer tools are available?


You can also ask a catalog-related question, for example:


Show me a summary of the product catalog.


If your connection is configured with a read-only access profile, Copilot can query catalog data but cannot make changes to your Sales Layer catalog.


Troubleshooting


IssueCauseWhat to do
invalid_tokenThe Catalog Token was used as an API key or bearer token in Copilot Studio.Change authentication to OAuth 2.0 and enter the Catalog Token only in the Sales Layer authorization screen.
PKCE or S256 options are not availableYour Copilot Studio version may not support the required OAuth configuration.Check whether your version supports Authorization Code with PKCE and Code Challenge Method S256.
The authorization window does not openThe browser popup may be blocked, or the connection may not have started correctly.Allow popups for Copilot Studio and try to connect the server again.
No Sales Layer tools are availableThe OAuth flow may not have completed correctly.Disconnect and reconnect the MCP Server, then complete the Sales Layer authorization flow again.


Best practices


Use Dynamic discovery whenever it is available in Copilot Studio. If you need to configure OAuth manually, review every field before connecting.


Keep your Sales Layer Catalog Token secure. Enter it only in the Sales Layer authorization screen, and never paste it into Client ID, Client Secret, API key, or bearer token fields.


Start with a read-only connection when you only need Copilot to query or analyze catalog data. Use full access only when the Copilot is intended to perform write operations and the users understand the impact of those actions.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article