@insightsentry/ms-mcp

@insightsentry/ms-mcp

MCP (Model Context Protocol) server for Microsoft Outlook, To Do, Calendar, and OneDrive via the Microsoft Graph API.

Gives AI assistants direct access to your Microsoft account — read, search, send, and draft emails, manage To Do tasks, manage calendar events, and browse/manage OneDrive files. Uses OAuth2 delegated auth with interactive browser login (or device-code flow for headless environments).

Setup

Prerequisites

You need a Microsoft Entra (Azure AD) app registration with delegated permissions (not application permissions):

• Mail.ReadWrite
• Mail.Send
• Tasks.ReadWrite
• Calendars.ReadWrite
• Files.ReadWrite
• Notes.ReadWrite
• User.Read

The app registration must be configured as a public client (allow public client flows) since this uses PublicClientApplication — no client secret is needed.

Gather these values from your app registration:

Variable	Description
MS_MCP_CLIENT_ID	Application (client) ID
MS_MCP_TENANT_ID	Directory (tenant) ID

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "microsoft": {
      "command": "npx",
      "args": ["@insightsentry/ms-mcp"],
      "env": {
        "MS_MCP_CLIENT_ID": "your-client-id",
        "MS_MCP_TENANT_ID": "your-tenant-id"
      }
    }
  }
}

Claude Code

Add to .mcp.json in your project root:

{
  "mcpServers": {
    "microsoft": {
      "command": "npx",
      "args": ["@insightsentry/ms-mcp"],
      "env": {
        "MS_MCP_CLIENT_ID": "your-client-id",
        "MS_MCP_TENANT_ID": "your-tenant-id"
      }
    }
  }
}

Authentication

On first use, call the microsoft_login tool (or run npx @insightsentry/ms-mcp-login from the terminal). This opens your browser for interactive OAuth sign-in. On headless/SSH environments, it falls back to device-code flow automatically.

For device-code flow explicitly:

npx @insightsentry/ms-mcp-login --device-code

Tokens are cached to ~/.ms-mcp/msal-cache.json and silently refreshed via the refresh token on subsequent runs.

Available Tools (29)

Auth

Tool	Description
microsoft_login	Sign in to Microsoft account via browser OAuth
microsoft_login_status	Check if currently signed in

Raw API

Tool	Description
graph_api	Call any Microsoft Graph API endpoint directly

Email

Tool	Description
search_emails	Search emails across all folders using KQL syntax
list_emails	List emails with pagination, filtering, and search
read_email	Read full email content by ID
create_draft	Create a draft email
send_email	Send a new email directly
reply_email	Reply or reply-all to an email

To Do

Tool	Description
search_tasks	Search tasks across all lists by keyword
list_task_lists	List all To Do task lists
list_tasks	List tasks in a task list with filtering
create_task	Create a task with title, body, due date, importance
update_task	Update task title, body, due date, importance, or status
delete_task	Delete a task

Calendar

Tool	Description
search_events	Search calendar events using KQL syntax
list_events	List upcoming calendar events in a time range
get_event	Get full details of a calendar event
create_event	Create an event with attendees, location, Teams meeting
update_event	Update event details
delete_event	Delete a calendar event

OneDrive

Tool	Description
list_drive_items	List files and folders (root or by path/ID)
search_drive	Search files and folders by name or content
get_drive_item	Get file/folder metadata by ID or path
create_drive_folder	Create a new folder
move_drive_item	Move or rename a file/folder
copy_drive_item	Copy a file/folder to a new location
delete_drive_item	Delete a file/folder (moves to recycle bin)
share_drive_item	Create a sharing link for a file/folder

JSONata Transforms

Most read tools accept an optional transform parameter — a JSONata expression applied to the response before returning. This lets AI assistants extract exactly the fields they need without processing the full response.

Development

npm install
npm run build     # Compile TypeScript
npm run dev       # Run with tsx (no build needed)
npm run login     # Interactive login

License

MIT