Repository navigation
Add WIQD agentic workflow for agent connectors and fix partner-reported manifest issues - #14548
Robert Outlaw (rloutlaw) wants to merge 7 commits into
Conversation
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 7eb31394-9fad-4cec-b379-9eb2d2a31adf
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
|
Learn Build status updates of commit 73efcfa: ✅ Validation status: passed
For more details, please refer to the build report. |
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 7eb31394-9fad-4cec-b379-9eb2d2a31adf
Robert Outlaw (rloutlaw)
changed the title
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
|
Learn Build status updates of commit b7a5d5e: ✅ Validation status: passed
For more details, please refer to the build report. |
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 7eb31394-9fad-4cec-b379-9eb2d2a31adf
|
Learn Build status updates of commit 9279d37: 💡 Validation status: suggestions
msteams-platform/m365-apps/images/wiqd-copilot.png
For more details, please refer to the build report. Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them. |
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
|
This is ready for merge - I have sign off from the Work IQ team, but they can't access this PR directly. |
|
Ack Robert Outlaw (@rloutlaw); I need to have the feature owner on my side review this as well but she's out until next week. I'll follow up on it with her as soon as she returns. |
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
Position 'wiqd plugin share' as the recommended way to get a connector to testers and users, rather than passing around a packaged .zip file. Package upload and catalog publishing remain documented as alternatives. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: a6911780-2065-4244-b2cc-539a9f0fdb55
Robert Outlaw (rloutlaw)
changed the title
|
Learn Build status updates of commit ed76c7a: 💡 Validation status: suggestions
msteams-platform/m365-apps/images/wiqd-copilot.png
For more details, please refer to the build report. Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them. |
|
Learn Build status updates of commit 97bbf13: 💡 Validation status: suggestions
msteams-platform/m365-apps/images/wiqd-copilot.png
For more details, please refer to the build report. Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them. |
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
The markers flagged pre-existing text about the DCR and Azure Key Vault registration surfaces. Removing them for now; the underlying question is tracked outside the article. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: a6911780-2065-4244-b2cc-539a9f0fdb55
|
Learn Build status updates of commit 414c581: 💡 Validation status: suggestions
msteams-platform/m365-apps/images/wiqd-copilot.png
For more details, please refer to the build report. Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them. |
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
Document referenceId as an opaque identifier for a separately registered auth configuration, with a per-type table of what it contains and the 128-character schema limit. Note that public documentation for the DynamicClientRegistration and AzureKeyVault registration records is limited. Describe the runtime consent model: Microsoft 365 starts an authorization code flow for the signed-in user, and admin consent may still be required depending on the identity provider and requested scopes. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: a6911780-2065-4244-b2cc-539a9f0fdb55
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
|
Learn Build status updates of commit da9c53b: 💡 Validation status: suggestions
msteams-platform/m365-apps/images/wiqd-copilot.png
For more details, please refer to the build report. Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them. |
|
FYI Sidharth Awasthi has been identified as reviewer here. |
2 participants
What this PR does
Establishes the WIQD agentic workflow as the primary path for building and sharing MCP agent connectors, and corrects a set of schema and guidance defects in the surrounding documentation that were reported by partners building against this feature.
The two halves are related: partners hit the manifest defects precisely because they were hand-authoring manifests without a guided workflow, so the fixes and the WIQD path ship together.
WIQD-first authoring and sharing
agent-connectors.mdleads with the WIQD agentic interface in GitHub Copilot CLI as the recommended preview workflow, with the equivalent CLI commands shown for automation, troubleshooting, and reference.agentConnectorsnode, so readers understand these are alternative authoring paths rather than different features.wiqd plugin shareis positioned as the way to distribute a connector going forward, rather than passing around a packaged .zip file. Sharing gets the connector to testers and early users directly, and recipients always get the current version. Package upload, org catalog, and marketplace publishing remain documented as alternatives.wiqd plugin validate(static) and--mode deep(builds the package and delegates semantic validation to Agents Toolkit), with an explicit statement of what neither mode validates.Documentation fixes from partner-reported issues
Every claim below was verified against the live App Manifest JSON schemas (v1.27 through v1.30) or against published Microsoft Learn content.
Manifest version correctness.
mcpToolDescriptionis required in schema versions 1.27 and 1.28 and only becomes optional in 1.29. The article previously showed 1.27 samples while telling readers they could omit the property for dynamic tool discovery, which is impossible to follow and produced a validation failure reporting a missing required property. All samples now target 1.29, and a Choose a manifest version section carries a capability table for 1.27/1.28 versus 1.29+.AzureKeyVaultis now correctly marked as 1.29 and later.mcpToolDescriptionshape. In the app manifest,fileis the only property accepted. The article previously showed a nesteddescriptionobject and an inlinetoolsarray, which is the plugin manifest's shape and fails validation in an app manifest. Corrected, with an explicit note about the difference so the error isn't reintroduced.Transport. Removed the claim that
wss://endpoints are supported. The schema constrainsmcpServerUrlto HTTPS.Dynamic tool discovery. Every statement now carries both conditions: manifest version 1.29 or later and a host that permits it. Microsoft 365 Copilot Cowork is named as a host that requires a tool description and returns HTTP 400 without one. This also corrects a contradicting line in the Copilot validation guidelines.
Terminology. Adds a comparison table distinguishing agent connectors from MCP plugins, federated and synced Copilot connectors, and BYO MCP servers, plus glossary entries for agent connector, Copilot connector, MCP, MCP server, and plugin. Partners repeatedly conflated these, in one case selecting a Copilot connector template and then being prompted for Azure resources. The article now states that registering an agent connector requires no Azure subscription.
New reference material. A properties table with required/optional status and length limits, the 10-connector maximum, and the
additionalProperties: falsebehavior that makes a stray property fail upload. New Deploy and manage the connector and Tools that modify data sections, plus expanded troubleshooting.Files
m365-apps/agent-connectors.mdget-started/glossary.md.../review-copilot-validation-guidelines.mdm365-apps/images/wiqd-copilot.pngValidation
agent-connectors.mdvalidates against the live App Manifest schema (10 samples, 0 failures; the standalonetoolDescription.jsonis validated separately by shape).referenceIdis now documented for what the schema actually guarantees: an opaque identifier, up to 128 characters, for a separately registered authentication configuration, with a per-type table of what it contains and an explicit statement that public documentation for the DCR and Key Vault registration records is limited. The OAuth and API key sections still link to their specific Developer Portal tool pages, which do exist.Related
Companion changes in
MicrosoftDocs/m365copilot-docs-pradd reciprocal cross-references so the plugin-path articles distinguish themselves from the agent connector path.