Outlook MCP Server

Microsoft 365 email, calendar, OneDrive files, and Power Automate flows for AI assistants.

Data last scanned last week · Reviewed last month

11 2 dangerous tools28 tools★ 415JavaScript

Overview

This server integrates Claude with the Microsoft Graph API and Power Automate, providing a suite of tools for managing Outlook emails, calendars, and folders. Users can search for emails, create calendar events, and manage folder structures directly within their AI-powered workflows. Beyond email and scheduling, the implementation supports OneDrive file operations including search, upload, and sharing. It also interfaces with Power Automate to list, trigger, and monitor the execution history of your automated flows.

Our verdict

With a security score of 31/100, this server carries a high risk profile. Specifically, the repository lacks a defined software license, leaving legal usage terms unclear, and the authentication and read-only mechanisms have not undergone external review. Given these factors and the community-maintained status, this tool should only be used by developers who are comfortable reviewing the source code and handling their own authentication security in a non-sensitive environment.

Supports broad Microsoft 365 service integration via Graph API
Contains only two direct dependencies for lower supply-chain surface
Provides documented functionality for Power Automate flow management

No license detected, creating ambiguity regarding legal usage terms
Authentication and read-only mode have not been externally reviewed
Community-maintained project with no official vendor support

Setup

Claude Desktop

{
  "mcpServers": {
    "outlook-mcp": {
      "args": [
        "-y",
        "m365-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
list-emails	List recent emails from inbox	low
search-emails	Search emails with filters	low
read-email	Read email content	low
send-email	Send a new email	medium
mark-as-read	Mark email as read/unread	medium
list-events	List calendar events	low
create-event	Create calendar event	medium
accept-event	Accept event invitation	medium
decline-event	Decline event invitation	medium
delete-event	Delete calendar event	high

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›What authentication method does this server use?

The server uses OAuth 2.0 to authenticate with the Microsoft Graph API and the Power Automate API.

›Is there a limit on file sizes for OneDrive uploads?

Yes, standard uploads are limited to files under 4MB, while the onedrive-upload-large tool must be used for files 4MB and larger.

›Can I test the server without making real API calls?

Yes, the server includes a test mode that provides simulated responses for testing purposes without hitting live API endpoints.

›What are the core technical prerequisites for running this server?

You need Node.js version 14.0.0 or higher, an npm or yarn package manager, and an Azure account to register the application.

›How do I initiate the authentication process once the server is running?

After starting the authentication server with 'npm run auth-server', you must use the authenticate tool within Claude to receive the OAuth URL for login.