Microsoft 365 MCP: Outlook, Teams and OneDrive through Graph
A community server with 300+ Microsoft Graph tools for Outlook mail and calendar, OneDrive, Excel, Teams and SharePoint, with read-only mode and scope limits.
Project and installation docs
View projecthttps://github.com/Softeria/ms-365-mcp-server
Your company runs on Outlook, Teams and SharePoint, while many workplace MCP servers only cater to Google users. Softeria’s Microsoft 365 MCP Server brings over most of the Microsoft Graph API: each tool maps one-to-one to a Graph endpoint, declared in endpoints.json. It works with personal Microsoft accounts and work tenants, including the 21Vianet-operated China cloud.
What it does
- Personal account tools by default: Outlook mail, Calendar, OneDrive files, Excel, OneNote, To Do, Planner, Contacts and Search.
- Organization mode:
--org-modeadds Teams chats, online meetings, transcripts and recordings, SharePoint sites and lists, shared mailboxes and user management. - Narrow the surface:
--read-onlyfor no writes, presets such as--preset mail,--enabled-toolswith a regex, and--allowed-scopesto cap Graph permissions.--list-permissionsshows what will be requested so admins can pre-approve it. - Token-lean output: the experimental
--toonflag returns list data as TOON, which the project says uses 30 to 60% fewer tokens than JSON.
Who it’s for
- People working in Microsoft 365 who want an agent to handle mail, schedule meetings and find OneDrive files.
- Enterprise IT teams that must approve Graph permissions before rollout;
--list-permissionsand--allowed-scopesare built for them.
Setup
Needs Node.js 20 or newer. Add it to Claude Code (append --org-mode for work accounts) and sign in through the device-code flow on first use:
claude mcp add ms365 -- npx -y @softeria/ms-365-mcp-server
China-cloud tenants add --cloud china.
Our take
About 1,000 stars as of 2026-10-06 and the broadest community server for Microsoft 365. Its 300-plus tools cut both ways: load them all and they swallow context, so start with a preset or read-only mode. As with Google Workspace MCP, mail and documents can carry prompt injections, and in org mode the agent can touch Teams messages, SharePoint and user management, which is a wide blast radius; pair it with --allowed-scopes. It isn’t a Microsoft project, and some tools call Graph beta endpoints that may change. Licensed MIT.