VERIFIED

Ms 365

Safety: 55/100

0.0(0)

An MCP server for interacting with Microsoft 365 services (Outlook, Teams, SharePoint, etc.) via the Graph API, supporting personal and organizational accounts.

MCP ServersDevelopmentCommunicationData & DatabasesSearch & WebProductivityAI & LLMUtilitiesCloud & InfrastructureFreemium

Boost this tool

Subscribe to listing upgrades or segmented pushes.

Overview

An MCP server for interacting with Microsoft 365 services (Outlook, Teams, SharePoint, etc.) via the Graph API, supporting personal and organizational accounts.

This MCP server offers a balance of read and write capabilities for Microsoft 365 services. It's relatively safe in read-only mode or when used with personal accounts. However, enabling organization mode and using tools that modify data requires careful permission management and awareness of potential risks.

Performance depends on the number of API calls made to Microsoft Graph and the size of the data being processed. Consider using pagination and filtering to optimize performance.

Cost is primarily determined by the number of API calls made to Microsoft Graph. Be mindful of Graph API usage limits and throttling policies.

HybridTypeScript460 starsMITReleased 2/11/2026CI/CD

Connections & Capabilities

Connects To

GitHubDiscordDockerAzure

Capabilities

ReadWriteExecAdmin

Client Compatibility

Claude Desktop

full

Cursor

untested

Windsurf

untested

VS Code (Copilot)

untested

Quickstart

Install

npx @softeria/ms-365-mcp-server --toon

Claude Desktop Config

{
  "mcpServers": {
    "ms365": {
      "command": "npx",
      "args": [
        "-y",
        "@softeria/ms-365-mcp-server"
      ]
    }
  }
}

Environment Variables

OPENAI_API_KEYAZURE_CLIENT_IDAZURE_CLIENT_SECRETAZURE_TENANT_ID

Tools (8)

safe

list-mail-messages

Lists email messages in a mailbox.

Read-only operation.

moderate

send-mail

Sends an email message.

Can be used to send unwanted or malicious emails.

moderate

create-calendar-event

Creates a new calendar event.

Could potentially spam users with unwanted events.

high

delete-onedrive-file

Deletes a file from OneDrive.

Destructive operation that can lead to data loss.

safe

list-users

Lists users in the organization.

Read-only access to user information.

moderate

send-chat-message

Sends a message to a Teams or chat channel.

Can be used to send unwanted messages to a channel.

moderate

update-calendar-event

Updates an existing calendar event.

Can modify existing calendar entries.

safe

search-query

Executes a search query across Microsoft 365 services.

Read-only search operation.

Security

Auth Method

OAuth

Data Locality

hybrid

Scopes

Mail.ReadMail.SendCalendars.ReadWriteFiles.ReadWriteUser.Read

Known Risks

!Accidental data modification or deletion due to incorrect tool usage.
!Exposure of sensitive organizational data if permissions are misconfigured.
!Phishing or social engineering attacks via the send-mail tool.
!Unauthorized access to shared mailboxes if delegated permissions are not properly managed.

Safety Score

moderate risk

Positive

+Supports read-only mode for safe operations.
+Tool filtering allows granular access control.
+Authentication via Microsoft Authentication Library (MSAL) enhances security.
+Tokens are cached securely in the OS credential store or file system.

Risks

-Includes tools that can send emails, create calendar events, and modify files.
-Organization mode grants access to potentially sensitive organizational data.
-Shared mailbox access requires delegated permissions.
-HTTP mode requires careful setup of Azure AD app registration for OAuth.

Use Cases

Information Retrieval

-Listing recent emails from a specific sender.
-Searching for files containing specific keywords in OneDrive.
-Retrieving upcoming calendar events.

Task Automation

-Creating a to-do task based on an email.
-Scheduling a meeting with a set of contacts.
-Automatically sending a weekly report via email.

Content Management

-Uploading a file to a specific OneDrive folder.
-Creating a new OneNote page with meeting notes.
-Updating an Excel spreadsheet with new data.

Communication

-Sending a quick message to a Teams channel.
-Replying to a chat message.
-Creating and sending a draft email.

Who Is This For?

Best For

Automating tasks within Microsoft 365 environments.
Integrating Microsoft 365 services with other applications.
Building custom workflows that leverage Microsoft Graph API.
Users comfortable with managing permissions and understanding API usage.

Not Ideal For

Users who are not familiar with Microsoft 365 or Graph API.
Scenarios requiring strict data loss prevention measures.
Environments with limited network connectivity.

Autonomy & Execution

Default ModeConfigurable

Destructive Tools

Autonomy level depends on the configured tools and permissions. Exercise caution when granting access to tools that can modify or delete data.

StatelessYes

Retry LogicNot documented

ConcurrencySingle-threaded

Production Tip

Implement robust error handling and monitoring to detect and respond to issues in production.

FAQ

What Microsoft 365 services can I access with this MCP server?

You can access a wide range of services, including Outlook, Teams, SharePoint, OneDrive, Excel, OneNote, Planner, and To Do.

How do I enable organization mode?

You can enable organization mode by using the `--org-mode` flag when starting the server.

How do I access shared mailboxes?

You need organization mode, delegated permissions, Exchange permissions, and the shared mailbox's email address as the `user-id` parameter.

What authentication methods are supported?

The server supports Device Code Flow (default) and OAuth Authorization Code Flow (HTTP mode only).

How do I set up Azure AD for OAuth testing?

You need to create an Azure AD app registration, configure redirect URIs, and get the client ID and secret.

Can I use this MCP server with Open WebUI?

Yes, you can use it with Open WebUI by starting the server with HTTP mode and dynamic registration enabled.

What is the difference between JSON and TOON output formats?

JSON is the standard format, while TOON is an experimental format that uses fewer tokens, making it more efficient for LLMs.

Key Features

Development Communication Data & Databases Search & Web Productivity AI & LLM Utilities Cloud & Infrastructure

Metrics

Discovered2/14/2026

Reviews0

Saved By0 users

Related Tools

Ms 365 | AI Builder Hub Review & Alternatives | Flaex AI