Sharepoint MCP Server

SharePoint document browsing and site management for AI through Microsoft Graph API.

Data last scanned yesterday · Reviewed last month

289JavaScriptNOASSERTION

Overview

This server provides a structured interface for interacting with Microsoft SharePoint environments. It allows AI models to search for files, list document libraries, and retrieve text-based file content by leveraging the Microsoft Graph API. It handles site metadata and navigation through defined MCP resources and tools. Configuration requires an Azure AD application registration with specific delegated permissions for site and file access. The server uses an OAuth2 client credentials flow for authentication, requiring environment variables for the tenant ID, client ID, and secret to connect to your SharePoint instance.

Our verdict

This server carries a high risk level with a security score of 18/100. The repository has not been updated in over a year (392 days) and is maintained by a single contributor, which limits community oversight and responsiveness to security vulnerabilities. Due to the lack of recent maintenance and unreviewed authentication methods, it should be used with extreme caution in environments containing sensitive organizational data.

  • Supports direct search and file content retrieval
  • Uses OAuth2 client credentials flow
  • Contains only one direct dependency
  • High security risk score of 18/100
  • Last commit occurred over one year ago
  • Single contributor with limited community validation
  • Authentication and read-only status not reviewed

Compatibility

No compatibility data yet.

Frequently asked questions

What Azure permissions are required for this server to function?

You must configure the Microsoft Graph API with 'Sites.Read.All' and 'Files.Read.All' application permissions and grant admin consent in your Azure Active Directory.

Can I use this server to retrieve content from any file type?

No, the 'get_file_content' tool is specifically designed for retrieving the content of text files only.

What information is needed to configure the server environment?

You must provide your SharePoint site URL, Azure tenant ID, application client ID, and client secret via environment variables.

How can I troubleshoot authentication or connectivity issues?

You can enable detailed logging by setting the 'DEBUG' environment variable to 'sharepoint-mcp-server' or use the provided MCP Inspector tool to test connections.

How does the server handle authentication tokens?

The server uses the OAuth2 client credentials flow and automatically manages token acquisition and refreshing before expiration.

Badge

Sharepoint MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.