
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@houmak/minerva-mcp-server
Advanced tools
Minerva Model Context Protocol (MCP) Server for Microsoft 365 and Azure integrations
Minerva MCP Server - Enhanced Microsoft 365 automation with intelligent orchestration
A powerful Model Context Protocol (MCP) server that provides seamless integration with Microsoft 365 services, including Microsoft Graph API, Azure Resource Management, SharePoint, and PowerShell/PnP automation.
npm install -g @houmak/minerva-mcp-server
npx @houmak/minerva-mcp-server
{
"mcpServers": {
"minerva": {
"command": "npx",
"args": ["@houmak/minerva-mcp-server"],
"env": {
"NODE_ENV": "production"
}
}
}
}
Variable | Description | Default |
---|---|---|
NODE_ENV | Environment mode | production |
USE_GRAPH_BETA | Use Graph API beta version | true |
MINERVA_CONFIG_PATH | Path to configuration file | ./config.json |
# Start the MCP server
npx @houmak/minerva-mcp-server
# Check version
npx @houmak/minerva-mcp-server --version
# Get help
npx @houmak/minerva-mcp-server --help
// Example: Get users from Microsoft Graph
{
"apiType": "graph",
"path": "/users",
"method": "get",
"graphApiVersion": "v1.0",
"fetchAll": true,
"consistencyLevel": "eventual"
}
// Example: List resource groups
{
"apiType": "azure",
"path": "/subscriptions/{subscriptionId}/resourcegroups",
"method": "get",
"apiVersion": "2021-04-01",
"subscriptionId": "your-subscription-id"
}
// Example: Execute PowerShell command
{
"command": "Get-Process",
"parameters": {
"Name": "node"
}
}
Minerva-Microsoft
apiType
(string): "graph"
or "azure"
path
(string): API endpoint pathmethod
(string): HTTP method (get
, post
, put
, patch
, delete
)apiVersion
(string, optional): Azure API version (required for Azure)subscriptionId
(string, optional): Azure Subscription IDqueryParams
(object, optional): Query parametersbody
(object, optional): Request bodygraphApiVersion
(string, optional): Graph API version (v1.0
or beta
)fetchAll
(boolean, optional): Fetch all pages for list resultsconsistencyLevel
(string, optional): Graph API consistency levelMinerva-PowerShell
command
(string): PowerShell command to executeparameters
(object, optional): Command parametersscript
(string, optional): PowerShell script contenttimeout
(number, optional): Execution timeout in millisecondsMinerva MCP Server
├── Core Services
│ ├── AuthManager (Multi-mode authentication)
│ ├── IntelligentRouter (Dynamic provider selection)
│ ├── CircuitBreaker (Resilience pattern)
│ └── AdvancedMonitoring (Telemetry & logging)
├── Microsoft 365 Integration
│ ├── Microsoft Graph API
│ ├── Azure Resource Management
│ ├── SharePoint/PnP
│ └── CLI M365
├── Sprint 4 Features
│ ├── Azure DevOps MCP
│ ├── Azure Bicep MCP
│ ├── PnP Core SDK
│ └── Custom Connectors
└── Utilities
├── Dry-Run Mode
├── Caching (Redis)
└── Migration Tools
# Run unit tests
npm test
# Run tests with coverage
npm run test:coverage
# Run E2E tests
npm run test:e2e
# Run tests in watch mode
npm run test:watch
# Clone the repository
git clone https://github.com/HoussemMak/minerva.git
cd minerva/src/mcp
# Install dependencies
npm install
# Build the project
npm run build
# Run in development mode
npm run dev
npm run build
- Compile TypeScript to JavaScriptnpm run start
- Start the production servernpm run dev
- Start in development mode with hot reloadnpm test
- Run unit testsnpm run lint
- Run ESLintnpm run clean
- Clean build artifactsgit checkout -b feature/amazing-feature
)git commit -m 'Add amazing feature'
)git push origin feature/amazing-feature
)This project is licensed under the MIT License - see the LICENSE file for details.
Made with ❤️ by Houssem Makhlouf
FAQs
Minerva Model Context Protocol (MCP) Server for Microsoft 365 and Azure integrations
We found that @houmak/minerva-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.