microsoft365-mcp-server

← Back to search

A Model Context Protocol (MCP) server for Microsoft 365 - manage mail, calendar, contacts, files, Teams, Planner, OneNote, To Do, and more via Microsoft Graph.

npm ↗

93.8 / 100

Versions

npm31

1.0.31latest

Jul 12, 2026

1.0.30

Jul 12, 2026

1.0.29

Jul 12, 2026

1.0.28

Jul 12, 2026

1.0.27

Jul 12, 2026

+ show 26 moreshow less

1.0.26

Jul 12, 2026

1.0.25

Jul 12, 2026

1.0.24

Jun 18, 2026

1.0.23

Jun 3, 2026

1.0.22

Jun 3, 2026

1.0.21

Jun 2, 2026

1.0.20

Jun 2, 2026

1.0.19

May 29, 2026

1.0.18

May 22, 2026

1.0.17

May 22, 2026

1.0.16

May 22, 2026

1.0.15

May 22, 2026

1.0.14

Apr 18, 2026

1.0.13

Apr 17, 2026

1.0.12

Apr 17, 2026

1.0.11

Apr 17, 2026

1.0.10

Apr 17, 2026

1.0.9

Apr 16, 2026

1.0.8

Apr 16, 2026

1.0.7

Apr 16, 2026

1.0.6

Apr 15, 2026

1.0.5

Apr 15, 2026

1.0.4

Apr 14, 2026

1.0.3

Apr 10, 2026

1.0.1

Apr 9, 2026

0.1.0

Mar 30, 2026

Tools 1

get_auth_status

annotations: none low

Report whether the server can acquire an app-only Microsoft Graph token.

parameters object

Permissions 2

network medium

Server uses network capabilities via: fetch()

env_vars low

Server uses env_vars capabilities via: process.env

Scan Findings 12

low

Tool 'get_auth_status' has no annotations annotation_checker · 100%

medium

OAuth implementation without PKCE auth_checker · 75%

info

Sandbox failed to start for behavioral verification behavioral_verifier · 100%

info

OSV.dev API query failed dependency_analyzer · 100%

info

package.json metadata manifest_parser · 100%

info

Tool: get_auth_status manifest_parser · 75%

info

Required env vars (30) manifest_parser · 80%

info

Sandbox failed to start for output poisoning scan output_poisoning · 100%

medium

Permission: network access detected permission_analyzer · 70%

low

Permission: env_vars access detected permission_analyzer · 90%

info

SBOM generated: 17 components sbom_generator · 100%

medium

No build provenance detected (SLSA L0) slsa_assessor · 90%