
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@insightsentry/ms-mcp
Advanced tools
MCP server for Microsoft Outlook, To Do, and Calendar via Graph API - provides AI-accessible tools for email, task management, and calendar events
MCP (Model Context Protocol) server for Microsoft Outlook, To Do, and Calendar via the Microsoft Graph API.
Gives AI assistants direct access to your Outlook mailbox — read, search, send, draft, and reply to emails, manage To Do tasks, and manage calendar events. Uses OAuth2 client credentials flow so no interactive login is needed.
You need a Microsoft Entra (Azure AD) app registration with the following application permissions:
Mail.ReadWriteMail.SendTasks.ReadWriteCalendars.ReadWriteGather these values from your app registration:
| Variable | Description |
|---|---|
GRAPH_API_CLIENT_ID | Application (client) ID |
GRAPH_API_CLIENT_SECRET | Client secret value |
GRAPH_API_TENANT_ID | Directory (tenant) ID |
GRAPH_API_USER_ID | Object ID or UPN of the mailbox user |
Add to your claude_desktop_config.json:
{
"mcpServers": {
"microsoft": {
"command": "npx",
"args": ["@insightsentry/ms-mcp"],
"env": {
"GRAPH_API_CLIENT_ID": "your-client-id",
"GRAPH_API_CLIENT_SECRET": "your-client-secret",
"GRAPH_API_TENANT_ID": "your-tenant-id",
"GRAPH_API_USER_ID": "your-user-id"
}
}
}
}
Add to .mcp.json in your project root:
{
"mcpServers": {
"microsoft": {
"command": "npx",
"args": ["@insightsentry/ms-mcp"],
"env": {
"GRAPH_API_CLIENT_ID": "your-client-id",
"GRAPH_API_CLIENT_SECRET": "your-client-secret",
"GRAPH_API_TENANT_ID": "your-tenant-id",
"GRAPH_API_USER_ID": "your-user-id"
}
}
}
}
| Tool | Description |
|---|---|
search_emails | Search emails across all folders using KQL syntax |
list_emails | List emails with pagination, filtering, and search |
read_email | Read full email content by ID |
create_draft | Create a draft email |
send_email | Send a new email directly |
reply_email | Reply or reply-all to an email |
| Tool | Description |
|---|---|
search_tasks | Search tasks across all lists by keyword |
list_task_lists | List all To Do task lists |
list_tasks | List tasks in a task list with filtering |
create_task | Create a task with title, body, due date, importance |
update_task | Update task title, body, due date, importance, or status |
delete_task | Delete a task |
| Tool | Description |
|---|---|
search_events | Search calendar events using KQL syntax |
list_events | List upcoming calendar events in a time range |
get_event | Get full details of a calendar event |
create_event | Create an event with attendees, location, Teams meeting |
update_event | Update event details |
delete_event | Delete a calendar event |
Access tokens are cached to ~/.ms-mcp/token.json and reused across invocations until they expire. No interactive login is required.
npm install
npm run build # Compile TypeScript
npm run dev # Run with tsx (no build needed)
MIT
FAQs
MCP server for Microsoft Outlook, To Do, and Calendar via Graph API - provides AI-accessible tools for email, task management, and calendar events
The npm package @insightsentry/ms-mcp receives a total of 6 weekly downloads. As such, @insightsentry/ms-mcp popularity was classified as not popular.
We found that @insightsentry/ms-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.