MS 365 MCP
Connects to Microsoft 365 via the Graph API with 200+ tools covering Outlook, Teams, SharePoint, Excel, and OneDrive.
Delv Safety Grade: C
Score 62/100 · assessed 2026-04-28
MS 365 MCP is a community-built Graph API wrapper from Softeria, a small software consultancy. The package ships via npm with standard installation, which is reassuring for supply chain. However, the permissions surface is enormous: 200+ tools spanning email, Teams, SharePoint, Excel, and OneDrive means read and write access across your entire Microsoft 365 tenant. The maintainer is a legitimate but small organisation with modest GitHub activity. No OAuth scoping details are visible in the metadata, so you're likely granting broad Graph API permissions. Transparency is reasonable with open source and documentation, but the sheer breadth of capabilities creates significant blast radius if credentials leak or the package is compromised. No known incidents, but the wide permission set and smaller maintainer warrant caution. Suitable for trusted environments only.
Lethal Trifecta (prompt-injection exposure)
TRIFECTA RISKThe Microsoft suite as one server is the broadest trifecta in the catalogue. Email, calendar, files, contacts, all bundled.
Green flags
- Distributed via npm with standard package manager install
- Open source repository on GitHub for code review
- No known security incidents or CVEs
- Legitimate consultancy (Softeria) as maintainer, not anonymous
Red flags
- 200+ tools create massive attack surface across entire M365 tenant
- Small maintainer (Softeria) with limited community oversight
- No OAuth scope details visible; likely requests very broad Graph permissions
- Write access to email, Teams, SharePoint, Excel, OneDrive simultaneously
- Bus factor risk: appears to be small team or solo project
Permissions requested
Install
npx -y @softeria/ms-365-mcp-server
Review
Install this if you spend serious time in Microsoft 365 and want to automate email sorting, Teams updates, or Excel edits without writing scripts. Skip it if you're a casual M365 user or don't have admin-level access to your tenant. The setup is OAuth-standard but not instant, so it's a commitment for power users, not a curiosity install.
Good at
- Over 200 tools covering Outlook, Teams, SharePoint, Excel, and OneDrive in one server.
- OAuth device flow keeps credentials secure and doesn't require manual token management.
- Genuinely useful for bulk email operations and cross-service workflows that would be tedious in the web UI.
- Active maintenance from Softeria with regular updates to match Graph API changes.
Watch out
- Assumes you know your Microsoft 365 structure: won't guess SharePoint site URLs or OneDrive paths.
- Claude occasionally picks the wrong tool when requests are ambiguous, requiring explicit instructions.
- Requires admin-level M365 access for full functionality, so not viable for locked-down corporate tenants.
- Initial OAuth setup is standard but not instant, adding friction for first-time users.
Use cases
- Outlook inbox automation
- Teams messaging
- Excel workbook edits
- OneDrive file operations
Getting started
Works with
Similar MCPs
- AsanaOfficial Asana MCP. Access the Work Graph - tasks, projects, teams - from AI clients via OAuth. Remote server, Streamable HTTP transport, no local install needed.
- ClickUpOfficial ClickUp MCP - ~49 tools across 14 categories (tasks, docs, time tracking, chat, comments, bulk ops). The largest project-management surface area in any MCP server right now.
- NotionNotion's official MCP for reading and writing pages, databases, and comments. Best-in-class for personal-knowledge-base agents.
- LinearCreate, update, and query Linear issues from Claude. Useful for teams whose PM lives in Linear and want the agent to file tickets from conversation.