Softeria Microsoft 365 Graph MCP Server

Content

Softeria Microsoft 365 Graph MCP Server connects MCP clients to Microsoft 365 through Microsoft Graph. It supports personal accounts by default and organization accounts with --org-mode, covering Outlook mail and calendar, OneDrive files, Excel, OneNote, contacts, tasks, Planner, search, Teams, SharePoint, users, shared mailboxes, meetings, and related Graph surfaces.

Use it when the agent needs structured Microsoft Graph tools instead of a general Microsoft 365 command runner. Start with read-only mode and a small preset, then expand scopes only after the intended workflow and tenant permissions are clear.

Source Review

• https://github.com/Softeria/ms-365-mcp-server
• https://raw.githubusercontent.com/Softeria/ms-365-mcp-server/main/README.md
• https://registry.npmjs.org/%40softeria%2Fms-365-mcp-server
• https://raw.githubusercontent.com/Softeria/ms-365-mcp-server/main/LICENSE
• https://raw.githubusercontent.com/Softeria/ms-365-mcp-server/main/SECURITY.md
• https://raw.githubusercontent.com/Softeria/ms-365-mcp-server/main/docs/deployment.md
• https://raw.githubusercontent.com/Softeria/ms-365-mcp-server/main/package.json
• https://raw.githubusercontent.com/Softeria/ms-365-mcp-server/main/src/tool-categories.ts
• https://raw.githubusercontent.com/Softeria/ms-365-mcp-server/main/src/server.ts

These sources were reviewed on 2026-06-06. Prefer the live repository, README, npm package metadata, deployment guide, security policy, package metadata, tool category metadata, and server implementation for current setup details.

Features

• Authenticate with Microsoft through device code flow, OAuth authorization code flow in HTTP mode, or bring-your-own-token mode.
• Use personal-account tools for Outlook, calendar, OneDrive, Excel, OneNote, To Do, Planner, contacts, profile, and search.
• Enable organization mode for Teams, SharePoint, shared mailboxes, shared calendars, online meetings, transcripts, attendance reports, users, presence, virtual events, and work search.
• Restrict the tool surface with --read-only, --preset, --enabled-tools, --allowed-scopes, and dynamic discovery.
• List required Microsoft Graph permissions before deployment.
• Support Global Microsoft 365 and China 21Vianet cloud endpoints.
• Serve stdio locally or Streamable HTTP with OAuth 2.1 for hosted clients.
• Support multi-account use, account pinning, token cache controls, audit logs, Graph retry/circuit-breaker behavior, and optional TOON output.

Installation

Start with a read-only, narrow preset:

npx -y @softeria/ms-365-mcp-server --read-only --preset outlook

Add it to an MCP client:

{
  "mcpServers": {
    "ms365-graph": {
      "command": "npx",
      "args": [
        "-y",
        "@softeria/ms-365-mcp-server",
        "--read-only",
        "--preset",
        "outlook"
      ]
    }
  }
}

For work or school accounts, add --org-mode after tenant permissions are approved:

npx -y @softeria/ms-365-mcp-server --org-mode --read-only --preset teams

Before enabling broader tools, list the effective Graph permissions:

npx -y @softeria/ms-365-mcp-server --org-mode --preset teams --list-permissions

Use Cases

• Summarize recent Outlook messages or calendar events from a personal account.
• Retrieve OneDrive files or Excel workbook data for a task-specific context.
• Search Microsoft 365 content across mail, files, notes, tasks, and work data.
• Let an agent inspect Teams or SharePoint data after admin consent and org-mode approval.
• Run a hosted Streamable HTTP MCP endpoint where each user authenticates with their own Microsoft account.
• Use read-only presets to keep initial context and permissions smaller.

Safety and Privacy

Microsoft 365 data is often sensitive by default. Treat this server like access to a real Microsoft account, not like a documentation helper. Prefer read-only mode, exact presets, narrow enabled-tool regexes, and allowed-scope boundaries. Review --list-permissions output before asking an admin to consent.

For production HTTP deployments, configure a dedicated Entra app, exact redirect URI allowlists, a public URL, managed identity or Key Vault for secrets, and audit logging. For stdio deployments, protect local token caches and pin the expected account so the wrong mailbox or tenant is not exposed by accident.

Duplicate Notes

The catalog already includes CLI for Microsoft 365 MCP Server from the PnP organization. That entry lets agents run CLI for Microsoft 365 commands through an existing m365 login context. This entry covers the separate Softeria Graph API server, npm package, OAuth modes, read-only flag, tool presets, scope allowlists, and generated Microsoft Graph tool surface.