Read-only access to Microsoft 365 suite via Model Context Protocol.
The diagram shows the complete system architecture including Claude Code integration, MCP server components, Azure AD authentication, Microsoft Graph API gateway, and M365 services (SharePoint, OneDrive, Outlook, Teams, Calendar).
- SharePoint: Search sites, list files, get content
- OneDrive: Browse user files, search
- Outlook: Search emails, read messages
- Teams: List teams/channels, read messages
- Calendar: View events, search calendar
📖 For detailed setup instructions, see SETUP.md
- Azure AD App Registration: Register app with Application permissions
- Install:
pip install -r requirements.txt - Configure: Add credentials to
~/.claude.json - Test:
msgraph.test_connection()
Register an Azure AD app with these Application permissions:
Sites.Read.All- SharePointFiles.Read.All- OneDrive/SharePoint filesMail.Read- OutlookChannelMessage.Read.All- Teams messagesChat.Read.All- Teams chatsCalendars.Read- CalendarUser.Read.All- User directoryGroup.Read.All- Teams/Groups
Grant admin consent for all permissions.
cd ~/.claude/mcp-servers/msgraph-mcp
pip install -r requirements.txtAdd to ~/.claude.json:
{
"mcpServers": {
"msgraph-mcp": {
"type": "stdio",
"command": "python3",
"args": ["/Users/thianseongyee/.claude/mcp-servers/msgraph-mcp/server.py"],
"env": {
"AZURE_CLIENT_ID": "your-client-id",
"AZURE_TENANT_ID": "your-tenant-id",
"AZURE_CLIENT_SECRET": "your-client-secret"
}
}
}
}Access via msgraph module in code execution:
# Test connection
result = msgraph.test_connection()
# Search SharePoint files
result = msgraph.search_files("formulation xlsx", limit=10)
# List recent emails
result = msgraph.list_recent_emails("user@company.com", limit=20)
# Get Teams channels
teams = msgraph.list_teams()
channels = msgraph.list_channels(teams['items'][0]['id'])
# View calendar
result = msgraph.list_events("user@company.com", days_ahead=7)test_connection()- Test API connectivitylist_users(query, limit)- Search usersget_user(email)- User details
search_sites(query, limit)- Find siteslist_site_contents(site_id, path)- Browse folderssearch_files(query, site_id, limit)- Search filesget_file_content(site_id, item_id)- Read fileget_file_metadata(site_id, item_id)- File info
list_user_files(email, path)- Browse OneDrivesearch_user_files(email, query, limit)- Search files
search_emails(query, email, limit)- Search maillist_recent_emails(email, limit, folder)- Recent mailget_email(email, message_id)- Full email
list_teams(limit)- List teamslist_channels(team_id)- Team channelsget_channel_messages(team_id, channel_id, limit)- Messagessearch_channel_messages(team_id, channel_id, query)- Search
list_events(email, days_ahead)- Upcoming eventssearch_events(email, query, limit)- Search calendarget_event(email, event_id)- Event details
- Read-only: No write permissions
- Sandboxed: Limited Python builtins
- App-only auth: No user credentials stored
- Token managed: Automatic refresh, never exposed