Lokka (Microsoft 365 MCP server)

What is Lokka?

Lokka is a Model Context Protocol (MCP) server for the Microsoft Graph API. It lets you query and manage your Microsoft 365 tenant using natural language through any MCP-compatible client, such as Claude Desktop.

How to use Lokka?

Install Node.js, clone the Lokka GitHub repository, create an Entra application with appropriate Microsoft Graph application permissions, and generate a client secret. Build the project with npm install and npm run build, then configure your MCP client’s JSON file with the absolute path to build/main.js and the tenant ID, client ID, and client secret environment variables.

Key features of Lokka

• Natural language queries to the Microsoft Graph API
• Works with any MCP‑compatible client (e.g., Claude Desktop)
• Secure app‑only authentication via Entra ID
• Customizable permissions per MCP tool
• Manages users, groups, policies, and Intune devices

Use cases of Lokka

• Create and manage security groups with dynamic membership rules
• Audit conditional access policies for security gaps
• View and modify user attributes across the tenant
• Manage Intune device configuration policies assigned to groups

FAQ from Lokka

What prerequisites are needed to use Lokka?

You need Node.js installed, a local clone of the Lokka repository, an Entra (Azure AD) app registration with Microsoft Graph application permissions, and a client secret.

How do I grant Microsoft Graph permissions to the Entra app?

In the Azure portal, open your app registration, go to API permissions, add Microsoft Graph application permissions, then grant admin consent for your organization.

How do I configure Lokka with Claude Desktop?

Edit the claude_desktop_config.json file to include a new mcpServers.lokka entry with the command node, args pointing to the absolute path of build/main.js, and environment variables for TENANT_ID, CLIENT_ID, and CLIENT_SECRET.

Do I need to restart Claude Desktop after changing the configuration?

Yes. On Windows, make sure to fully quit Claude from the system tray (right‑click and select Quit) before restarting, so the new configuration takes effect.

How can I verify that Lokka is working correctly?

After restarting Claude Desktop, look for a hammer icon in the chat window. You can then try sample queries like “Get all users” or “Show me the details for John Doe.”