PowerToolBox
Download

Quickstart: your first audit

This walks you from the download to an exported audit report. Budget about ten minutes, plus a few more if you still need to create the Entra app registration.

  1. Download the zip from the install page and extract it.
  2. Open appsettings.json in the extracted folder and fill in the Authentication section: your Tenant ID, the Client ID of your app registration, and a CertificateThumbprint (recommended) or a ClientSecret.
{
  "Authentication": {
    "TenantId": "your-tenant-guid",
    "ClientId": "your-app-registration-guid",
    "CertificateThumbprint": "your-thumbprint-no-spaces"
  }
}
  1. Run win-x64\PowerToolBox.exe. No installer, no .NET download — the runtime is bundled.
  2. Open Flow Auditor from the sidebar, under the Audit category.
  3. Pick an environment from the dropdown, or scan all environments the app registration can see.
  4. Click Run Audit Scan.
  5. Review the severity summary cards and the findings grid. Filter by severity, category, or search text to cut the list down.
  6. Click Export, pick a format — JSON, CSV, Markdown, HTML, or Excel — and choose where to save the file.

Open the Markdown or HTML file to read the findings, or feed the JSON and CSV into whatever you use for tracking.

If Windows SmartScreen warns on the first launch, that is expected for an unsigned build — see SmartScreen blocks the app. Note that the Connection Manager wizard can test your values but does not save connection profiles in 1.2.0; the Authentication section above is what the audit uses. See Known limitations in 1.2.0.

No sign-in: document exported files instead

If you do not have an app registration, or you only have a flow export someone sent you, use the Flow Documentation tool: point it at the exported Power Automate .json files or a solution .zip and it generates interactive HTML documentation locally. It never touches the network. See Document your flows.

What next

Last updated: July 27, 2026