Verified

Outlook MCP Server (XMV Solutions GmbH)

Microsoft 365 inbox and calendar access for AI agents with strictly manual sending controls.

Data last scanned today · Reviewed today

45 4 dangerous tools17 tools★ 1PythonMIT

Overview

This server provides AI agents with tools to interact with Microsoft 365 mailboxes and calendars. By leveraging Microsoft Graph, it preserves user attribution for actions while maintaining distinct local profiles, allowing users to operate across multiple tenants simultaneously without account overlap. The server prioritizes safety by omitting any automated sending functionality. Instead, it restricts the AI agent's capabilities to reading messages, searching events, and creating drafts, ensuring that all final communication requires human review before it leaves the mailbox.

Our verdict

With a high-risk security score of 35/100, this tool should be approached with caution in production or highly regulated environments. The score reflects that the server is community-maintained by XMV Solutions GmbH rather than an official Microsoft release and that critical security aspects, such as the authentication method and read-only mode, have not yet undergone an independent editorial review. Users comfortable with experimental community projects may find the draft-focused architecture useful, but others should wait for further verification.

Strictly limits AI to draft creation without automated sending
Uses Microsoft Graph to maintain proper user audit trails
Supports multiple M365 tenant profiles via local process execution
Zero direct dependencies reduces the supply-chain attack surface

Community-maintained software lacking official vendor support
Authentication and read-only modes remain unreviewed
Low adoption with only one GitHub star recorded

Tools

Tool	Description	Risk
ol_email_search	Free-text search over the user's mailbox using Microsoft Graph $search.	low
ol_email_list_unread	Unread mails in the named folder, newest first.	low
ol_email_read	Full body (text + html) + headers + attachments-list for a single mail.	low
ol_email_get_attachment	Downloads one file attachment to a local file.	low
ol_calendar_search	Events matching a free-text query.	low
ol_calendar_list_events	Events in a date range with attendees and location.	low
ol_status	Shows pending drafts created by this MCP profile.	low
ol_email_create_draft	Creates a draft in the user's Drafts folder.	medium
ol_email_update_draft	Updates a draft created by this profile.	medium
ol_email_list_drafts	Lists drafts created by this profile.	low

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›Does this MCP server allow AI agents to automatically send emails on my behalf?

No, the server does not include a send email tool. AI agents can only create drafts in your Drafts folder, which you must manually review and send.

›How do I authenticate with my Microsoft 365 account?

Authentication is performed via the Microsoft Device Code flow, which you can trigger by running 'uvx mcp-server-outlook login' or directly within a supported MCP client.

›What are the system prerequisites for running this server?

The server requires Python 3.11 or higher and is compatible with Linux, macOS, and Windows.

›Can I use this server to manage multiple Microsoft 365 accounts simultaneously?

Yes, you can run one MCP server instance per tenant or mailbox. Each instance maintains its own namespaced tokens locally.

›Does the server require 'Mail.Send' permissions by default?

No, the default installation does not request 'Mail.Send' permissions. Enabling sending is an opt-in process using the 'OUTLOOK_ALLOW_SEND=true' configuration.

›How are calendar events handled when using the draft tools?

The server provides a 'ol_calendar_create_event_draft' tool that creates a tentative event on your calendar with 'responseRequested=False', requiring you to manually send the invitations.