Workplace#Email

Microsoft 365 MCP: Outlook, Teams and OneDrive through Graph

A community server with 300+ Microsoft Graph tools for Outlook mail and calendar, OneDrive, Excel, Teams and SharePoint, with read-only mode and scope limits.

Project and installation docs

View project

https://github.com/Softeria/ms-365-mcp-server

Your company runs on Outlook, Teams and SharePoint, while many workplace MCP servers only cater to Google users. Softeria’s Microsoft 365 MCP Server brings over most of the Microsoft Graph API: each tool maps one-to-one to a Graph endpoint, declared in endpoints.json. It works with personal Microsoft accounts and work tenants, including the 21Vianet-operated China cloud.

What it does

  • Personal account tools by default: Outlook mail, Calendar, OneDrive files, Excel, OneNote, To Do, Planner, Contacts and Search.
  • Organization mode: --org-mode adds Teams chats, online meetings, transcripts and recordings, SharePoint sites and lists, shared mailboxes and user management.
  • Narrow the surface: --read-only for no writes, presets such as --preset mail, --enabled-tools with a regex, and --allowed-scopes to cap Graph permissions. --list-permissions shows what will be requested so admins can pre-approve it.
  • Token-lean output: the experimental --toon flag returns list data as TOON, which the project says uses 30 to 60% fewer tokens than JSON.

Who it’s for

  • People working in Microsoft 365 who want an agent to handle mail, schedule meetings and find OneDrive files.
  • Enterprise IT teams that must approve Graph permissions before rollout; --list-permissions and --allowed-scopes are built for them.

Setup

Needs Node.js 20 or newer. Add it to Claude Code (append --org-mode for work accounts) and sign in through the device-code flow on first use:

claude mcp add ms365 -- npx -y @softeria/ms-365-mcp-server

China-cloud tenants add --cloud china.

Our take

About 1,000 stars as of 2026-10-06 and the broadest community server for Microsoft 365. Its 300-plus tools cut both ways: load them all and they swallow context, so start with a preset or read-only mode. As with Google Workspace MCP, mail and documents can carry prompt injections, and in org mode the agent can touch Teams messages, SharePoint and user management, which is a wide blast radius; pair it with --allowed-scopes. It isn’t a Microsoft project, and some tools call Graph beta endpoints that may change. Licensed MIT.