ms-365-mcp-server

What is ms-365-mcp-server?

A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Microsoft Office services through the Graph API. It supports multiple Microsoft cloud environments (Global and China 21Vianet). For developers and users who want to integrate AI assistants with Microsoft 365 services.

How to use ms-365-mcp-server?

Install via npx: npx @softeria/ms-365-mcp-server. Configure in Claude Desktop via JSON configuration or use CLI flags like --org-mode, --toon, --http, --list-permissions, --allowed-scopes, --extra-scopes, --preset, --enabled-tools, --read-only, --cloud, --public-url, and --no-dynamic-registration. Authenticate using Device Code Flow (default), HTTP OAuth 2.1, or On-Behalf-Of flow.

Key features of ms-365-mcp-server

• 200+ tools covering most Microsoft Graph API surface
• Read-only mode support for safe operations
• TOON format for 30-60% fewer tokens vs JSON
• Tool filtering for granular access control
• Supports both personal and work/school accounts
• Scope allowlisting for enterprise deployments

Use cases of ms-365-mcp-server

• List and manage emails, calendar events, and OneDrive files
• Search Microsoft 365 users and contacts across an organization
• Manage Teams chats, meetings, and SharePoint sites and lists
• Access shared mailboxes and calendars in an organization
• Read and create OneNote notebooks, To Do tasks, and Planner plans

FAQ from ms-365-mcp-server

What is the difference between personal and organization mode?

Personal mode (default) provides email, calendar, OneDrive, and other personal account tools. Organization mode (--org-mode) additionally enables Teams, SharePoint, shared mailbox, and other work/school features.

What are the runtime requirements?

Node.js 20 or later is recommended. Node.js 14+ may work with dependency warnings.

Where does my data live?

Data is accessed directly through the Microsoft Graph API. No data is stored by the server itself. Authentication and tool requests are sent to Microsoft's cloud endpoints.

Can I limit which tools are available?

Yes. Use --enabled-tools with a regex pattern, --preset for predefined sets, --allowed-scopes to hide tools whose required Graph scopes are not covered, or --read-only for safe read-only operations.

What authentication methods are supported?

Device Code Flow (default for interactive use), HTTP OAuth 2.1 (for Open WebUI and web integrations), and On-Behalf-Of flow (for server-to-server scenarios).