- Protocol
- MCP Streamable HTTP, JSON-RPC 2.0. Negotiates versions 2024-11-05, 2025-03-26 and 2025-06-18.
- Endpoints
- /webservice/mcpca/server.php (MCP), /rest.php (REST), /openapi.php (OpenAPI 3.0), /token.php (self-service token).
- Authentication
- Entra ID tokens validated for signature, issuer, audience and scope; the identity is resolved to the Moodle account linked through auth_oauth2. Alternatively, a Moodle web service token.
- Authorisation
- Dedicated capability webservice/mcpca:use; every tool checks the Moodle capabilities of the context (course, module). tools/list is filtered per user.
- Tools
- 26 purpose-built tools (authoring: pages, sections, files, quizzes, questions, question bank) plus 22 native Moodle functions exposed as tools, 48 in total.
- Clients
- Copilot Studio verified (Teams and M365 Copilot). Any MCP client with OAuth or a token: Claude, ChatGPT, VS Code, Cursor. REST and OpenAPI for ChatGPT Actions and custom integrations.
- Requirements
- Moodle 4.3+, PHP 8.0+, HTTPS reachable from the cloud of the chosen assistant. No external services.
- Privacy
- A privacy provider is declared; the plugin stores only the token's last access time and writes to Moodle's standard log.