Microsoft365 MCP Server

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add microsoft365-mcp-server -e 'MS365_CLIENT_ID=<MS365_CLIENT_ID>' -- npx -y microsoft365-mcp-server

{
  "mcpServers": {
    "microsoft365-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "microsoft365-mcp-server"
      ],
      "env": {
        "MS365_CLIENT_ID": "<MS365_CLIENT_ID>"
      }
    }
  }
}

[mcp_servers.microsoft365-mcp-server]
command = "npx"
args = ["-y", "microsoft365-mcp-server"]
env = { MS365_CLIENT_ID = "<MS365_CLIENT_ID>" }

{
  "mcpServers": {
    "microsoft365-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "microsoft365-mcp-server"
      ],
      "env": {
        "MS365_CLIENT_ID": "<MS365_CLIENT_ID>"
      }
    }
  }
}

{
  "servers": {
    "microsoft365-mcp-server": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "microsoft365-mcp-server"
      ],
      "env": {
        "MS365_CLIENT_ID": "<MS365_CLIENT_ID>"
      }
    }
  }
}

Put your own value in place of <MS365_CLIENT_ID> (Azure AD application (client) ID. Every mode except client-token needs it). The author’s registry entry marks it as required.

Optional settings from the registry entry, left out of the block above: MS365_TENANT_ID (Azure AD tenant ID, or 'common'/'organizations'/'consumers'. Read by certificate, client-secret and oauth-proxy modes), MS365_CLIENT_SECRET (Azure AD client secret (client-secret mode)), MS365_CERT_PATH (Path to the certificate used by certificate mode), MS365_CERT_PASSWORD (Password for the certificate at MS365_CERT_PATH, if it has one), MS365_ACCESS_TOKEN (A Graph access token supplied directly (client-token mode)), MS365_AUTH_MODE (Auth mode: interactive (default), certificate, client-secret, client-token or oauth-proxy), MS365_OAUTH_BASE_URL (Base URL of the OAuth proxy (oauth-proxy mode)), MS365_READ_ONLY (Set to 'true' to expose read-only tools and refuse every write), MS365_ENABLED_TOOLS (Case-insensitive regular expression matched against tool names; only matching tools are registered. Not a comma-separated list), MS365_PRESETS (Comma-separated tool presets to enable instead of naming tools individually), MS365_ORG_MODE (Set to 'true' for organisation-wide (application-permission) behaviour), TRANSPORT_TYPE (Transport: 'stdio' (the default, and what this npm package is listed as) or 'httpStream' for remote/Docker deployments).