M365 MCP logo

M365 MCP

Claimed

by StuMason

MCP server for Microsoft 365. Manage mail, calendar, OneDrive, Teams and more through AI assistants via the Microsoft Graph API.

Set up this server

Compare serversMy Stack

This server needs project-specific setup. Follow the project instructions; no reusable public launch command is available yet.

Project instructions
aiclaudemcpmicrosoft-365microsoft-graphmodel-context-protocoloffice-365typescript

More in AI & ML

Browse the full directory

Badge

Show this listing on your README and website

Get verified and your listing links back to your site with a do-follow link. The badge is optional while first-100 launch spots remain.

MCPVault: claimedGet the embed code

Security profile

Exposure: Extensive

Reaches several sensitive areas at once. Read the list before installing.

What this server can reach, from a static read of the shipped code. Nothing was executed and nothing here is a verdict: a browser tool has to run commands and an API wrapper has to call its API. Decide what fits your setup.

NVIDIA SkillSpector v2.11.0, MCPVault MCP-server policy. Scanned 5 days ago @ 7081cd6.

Detected

  • Reads environment variables in bulk2 places

    Copies or enumerates the whole environment, which can include keys meant for other tools.

  • Accesses credential files3 places

    References SSH keys, cloud credential files or token stores.

  • Uses elevated privileges1 places

    sudo, the Docker socket or a privileged container appear in shipped code.

  • Contains instructions aimed at AI agents1 places

    Text in code or agent-facing files that steers a model. Worth reading before you trust it.

  • Passes model output on without checks1 places

    Model output reaches HTML, SQL or a shell without validation.

Not detected: sends conversation content outward, runs shell commands, reads or writes other agents' configuration, installs itself to run later, matches a known malicious pattern.

Dependencies with known advisories

  • @modelcontextprotocol/client 2.0.0 High, CVE-2026-104850
  • brace-expansion 5.0.9 High, CVE-2026-102276, CVE-2026-102277, CVE-2026-102278
  • braces 3.0.3 High, CVE-2026-93687

Left out of the profile

26 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.

How the profile works Maintainers see file, line and a fix for each item in their dashboard.

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about M365 MCP Server

How do I connect M365 MCP Server to Claude?
The project does not publish a launch command that MCPVault could verify. Open the repository linked on this page for its install steps; the listing names Claude Code, Cursor and Claude Desktop as compatible clients.
Is M365 MCP Server free?
The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can M365 MCP Server do?
MCPVault has not yet recorded the tool list for M365 MCP Server; it is captured when the server passes a live MCP handshake. The description above is what the project publishes.