Mmcp.market

Microsoft 365 MCP Server

by Softeria·io.github.Softeria/ms-365-mcp-server·v0.154.2
No reviews yet

Interact with Microsoft 365 and Office services through the Microsoft Graph API.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Established

982 stars42k downloads/wk

Reviews

Write one

Nobody has reviewed Microsoft 365 MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Microsoft 365 MCP Server tools (3, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • execute-toolwrite action

    Execute a Microsoft Graph API tool by name. Workflow: search-tools \u2192 get-tool-schema \u2192 execute-tool. Call get-tool-schema first for any tool you have not seen before \u2014 passing the wrong shape to parameters will fail validation or return a Graph 400. For list endpoints, prefer modest $top plus $select.

  • get-tool-schema

    Returns the full parameter schema (name, placement, required, JSON Schema) for a tool discovered via search-tools. Call this before execute-tool so you know what parameters to pass and what enum values are valid.

  • search-tools

    Search through … tools (… Microsoft Graph API operations + … server utilities like download-bytes). Ranks results by BM25 over tool name, llmTip, description, and path. After picking a tool, call get-tool-schema for parameters, then execute-tool.

Public scan report

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high
  • Code scan65 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    bin/modules/generate-mcp-tools.mjs: …d directory: ${outputDir}`); } execSync( `npx -y openapi-zod-client "${openapiTrimmedFile}" -o "${clientFilePath}" --with-description --st…
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreC → Bscore 75: Shell command built from a string (injection risk)

Install directly

Runs npx -y @softeria/ms-365-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add ms-365-mcp-server -- npx -y @softeria/ms-365-mcp-server
Add to Cursor

Microsoft 365 MCP Server: common questions

Is Microsoft 365 MCP Server safe?
Mostly: it is graded B (75/100). Read the Microsoft 365 MCP Server safety report
How do I install Microsoft 365 MCP Server?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Microsoft 365 MCP Server need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Microsoft 365 MCP Server maintained?
The last commit was 2 days ago (2026-09-18). The latest release is v0.154.2.

More from Softeria →