Model Context Protocol moderate risk

Ms 365

An MCP server for interacting with Microsoft 365 services (Outlook, Teams, SharePoint, etc.) via the Graph API, supporting personal and organizational accounts.

Connections & Capabilities

Connects To

GitHubDiscordDockerAzure

Capabilities

readwriteexecadmin

Quickstart

Install

npx @softeria/ms-365-mcp-server --toon

Config

{
  "mcpServers": {
    "ms365": {
      "command": "npx",
      "args": [
        "-y",
        "@softeria/ms-365-mcp-server"
      ]
    }
  }
}

Exposed MCP Tools (8)

safe

list-mail-messages

Lists email messages in a mailbox.

Read-only operation.

moderate

send-mail

Sends an email message.

Can be used to send unwanted or malicious emails.

moderate

create-calendar-event

Creates a new calendar event.

Could potentially spam users with unwanted events.

high

delete-onedrive-file

Deletes a file from OneDrive.

Destructive operation that can lead to data loss.

safe

list-users

Lists users in the organization.

Read-only access to user information.

moderate

send-chat-message

Sends a message to a Teams or chat channel.

Can be used to send unwanted messages to a channel.

moderate

update-calendar-event

Updates an existing calendar event.

Can modify existing calendar entries.

safe

search-query

Executes a search query across Microsoft 365 services.

Read-only search operation.

Safety Assessment

This MCP server offers a balance of read and write capabilities for Microsoft 365 services. It's relatively safe in read-only mode or when used with personal accounts. However, enabling organization mode and using tools that modify data requires careful permission management and awareness of potential risks.

Supports read-only mode for safe operations.
Tool filtering allows granular access control.
Authentication via Microsoft Authentication Library (MSAL) enhances security.
Tokens are cached securely in the OS credential store or file system.

Includes tools that can send emails, create calendar events, and modify files.
Organization mode grants access to potentially sensitive organizational data.
Shared mailbox access requires delegated permissions.
HTTP mode requires careful setup of Azure AD app registration for OAuth.