1. A Copilot Studio agent needs to retrieve live inventory data from an external REST API that requires a Bearer token in the Authorization header. The API has an OpenAPI 3.0 specification file available. What is the MOST efficient way to integrate this API into the agent?
- A. Create a custom connector by importing the OpenAPI specification file, configure the connector's security definition to use OAuth 2.0 Bearer token authentication, and then add the connector as an action in the agent.✓ Correct
- B. Write a Power Automate cloud flow that calls the HTTP action, pass the Bearer token as a hardcoded string in the flow, and invoke the flow from the agent.
- C. Use the built-in Azure API Management action in Copilot Studio to proxy the REST API call without any connector configuration.
- D. Copy the API endpoint URL directly into the agent's knowledge sources section and enable live web crawling to retrieve inventory data.
Explanation
Option A is correct because Copilot Studio supports importing OpenAPI specification files to auto-generate custom connectors, and the security definition in the spec maps directly to supported authentication schemes including OAuth 2.0 Bearer tokens — making this the fastest, most maintainable path. Option B would work functionally but hardcoding a Bearer token in a flow is a security anti-pattern and is far less efficient than using a connector with proper auth configuration. Option C is incorrect because Copilot Studio does not have a native 'Azure API Management action' that proxies arbitrary REST calls without connector setup. Option D is incorrect because the knowledge sources section is designed for document/FAQ-style retrieval, not live transactional API calls that require authentication headers.