
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@mindstone/mcp-server-microsoft-teams
Advanced tools
Microsoft 365 Teams via Graph: list chats, read/send messages, list teams/channels, presence.
Microsoft 365 Teams MCP server — list and read Teams chats and channel messages, send messages and replies, start new chats, look up colleagues, search messages, and read or set presence via the Microsoft Graph API.
Cohort-style Microsoft 365 Teams MCP. Reuses the OAuth surface owned by @mindstone/mcp-server-microsoft-mail so the host signs in once and gets Teams plus mail plus calendar plus files plus SharePoint from the same credentials.
mcp-server-microsoft-mail) (MS_CLIENT_ID)STATUS.json@mindstone/mcp-server-microsoft-sharedWhen we ported this in May 2026, Microsoft's own Graph MCP lineup did not yet ship a stand-alone Teams server, and the community options at the time treated Teams as its own login surface — every connector ran a separate OAuth dance and stored its own copy of the refresh token. We pulled the bundled connector out of MindstoneRebel as a 1:1 port so that the same five-connector Microsoft 365 cohort (mail, calendar, files, teams, SharePoint) shares a single set of credentials, a single shared-library package for token persistence and request timeouts, and the structured auth_required envelope the host already knows how to recover from. Teams reuses @mindstone/mcp-server-microsoft-mail's authenticate_microsoft_account tool rather than declaring its own. Some Teams Graph APIs may require tenant admin approval — see Microsoft's Teams Graph docs.
"Show me my last 10 messages in the project chat with Alice and Bob."
Tools the host calls:
list_chats — filters chats by participants alice@example.com and bob@example.com.list_chat_messages — returns the latest 10 messages from the resolved chat ID.Response (trimmed):
{
"chat": {
"id": "19:meeting_...@thread.v2",
"topic": "Project planning",
"members": ["alice@example.com", "bob@example.com"]
},
"messages": [
{ "id": "171...", "from": "Alice", "body": "Pushed the updated forecast", "createdDateTime": "2026-05-19T08:42:00Z" }
]
}
${MS_CONFIG_DIR}/credentials/${sanitised-email}.token.json and an ${MS_CONFIG_DIR}/accounts.json index. This server reads those files; it does not initiate OAuth itself.After clicking the button, your host will prompt you to fill: MS_CLIENT_ID, MS_CONFIG_DIR, MS_MCP_PACKAGE_ID, MICROSOFT_REQUEST_TIMEOUT_MS.
{
"mcpServers": {
"Microsoft 365 Teams": {
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-microsoft-teams"
],
"env": {
"MS_CLIENT_ID": "",
"MS_CONFIG_DIR": "",
"MS_MCP_PACKAGE_ID": "Microsoft365Teams",
"MICROSOFT_REQUEST_TIMEOUT_MS": "60000"
}
}
}
}
cd <path-to-repo>/connectors/microsoft-teams
npm install
npm run build
npx -y @mindstone/mcp-server-microsoft-teams
node dist/index.js
This server runs alongside a host application that owns the Microsoft 365 OAuth flow. The host writes credentials to disk; this server reads them.
| Name | Description |
|---|---|
MS_CLIENT_ID | Microsoft Entra (Azure AD) application client ID. |
MS_CONFIG_DIR | Path to the per-user Microsoft config directory (credentials/, accounts.json). |
| Name | Description | Default |
|---|---|---|
MS_ACCOUNT_EMAIL | Account email when running in multi-account per-instance mode. | First account in accounts.json. |
MS_MCP_PACKAGE_ID | Logical package ID surfaced in error responses. | Microsoft365Teams |
MICROSOFT_REQUEST_TIMEOUT_MS | Override the upstream Microsoft Graph request timeout (max 300000 ms). | 60000 |
MICROSOFT_DISABLE_REFRESH | Set to 1 to disable token refresh on this surface. Tools fail closed with the structured auth_required response so the host can drive reauth. Cloud surfaces set this to 1. | unset |
{
"mcpServers": {
"Microsoft365Teams": {
"command": "npx",
"args": ["-y", "@mindstone/mcp-server-microsoft-teams"],
"env": {
"MS_CLIENT_ID": "your-entra-application-client-id",
"MS_CONFIG_DIR": "/absolute/path/to/microsoft-config"
}
}
}
}
Sign in via @mindstone/mcp-server-microsoft-mail's authenticate_microsoft_account first; the Teams tools then reuse the credentials it writes to ${MS_CONFIG_DIR}/.
{
"mcpServers": {
"Microsoft365Teams": {
"command": "node",
"args": ["<path-to-repo>/connectors/microsoft-teams/dist/index.js"],
"env": {
"MS_CLIENT_ID": "your-entra-application-client-id",
"MS_CONFIG_DIR": "/absolute/path/to/microsoft-config"
}
}
}
}
| Tool | Description |
|---|---|
list_chats | List recent Teams chats. |
get_chat | Get details about a specific chat. |
list_chat_messages | List recent messages from a chat. |
send_chat_message | Send a message to a chat. |
reply_to_message | Reply to a specific chat message, creating a threaded reply. |
compose_chat_message | Open an inline editable compose form before sending; the form posts via send_chat_message when the user clicks Send. |
find_user | Look up people by display name or email. Requires User.ReadBasic.All. |
create_chat | Create a 1:1 or group chat by member email/user ID and return the new chat ID. |
search_messages | Search chat and channel messages by keyword. |
list_teams | List teams you are a member of. |
list_channels | List channels in a team. |
list_channel_messages | List recent messages in a channel. Requires ChannelMessage.Read.All. |
send_channel_message | Post a new message to a channel. Requires ChannelMessage.Send. |
reply_to_channel_message | Reply to an existing channel message. Requires ChannelMessage.Send. |
get_presence | Get your current presence status. |
get_user_presence | Get a colleague's presence status. Requires Presence.Read.All. |
set_presence | Set your own presence status, optionally for a limited duration. Requires Presence.ReadWrite. |
Some Teams Graph APIs may require tenant admin approval. Tools marked with a required permission check the connected account's token up front and return actionable reconnect guidance when the permission is missing (under Microsoft's managed consent policy, ChannelMessage.Read.All is admin-consent-gated in most tenants).
@mindstone/mcp-server-microsoft-mail so the cohort has a single OAuth surface.FSL-1.1-MIT — Functional Source License, Version 1.1, with MIT future licence. Free for non-competing use; relicenses to MIT on the converter date in LICENSE.
FAQs
Microsoft 365 Teams via Graph: list chats, read/send messages, list teams/channels, presence.
The npm package @mindstone/mcp-server-microsoft-teams receives a total of 92 weekly downloads. As such, @mindstone/mcp-server-microsoft-teams popularity was classified as not popular.
We found that @mindstone/mcp-server-microsoft-teams demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.