MCP.Market

Microsoft Outlook MCP server

by 0xka13b·io.github.0xka13b/microsoft-outlook-mcp·v1.0.1
No reviews yet

Microsoft Outlook (mail) MCP server — read, search, and send email through Microsoft Graph.

C63/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C63/100

full report

Adoption
New

0 stars60 downloads/wk

Reviews

Write one

Nobody has reviewed Microsoft Outlook yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Microsoft Outlook tools (14, 9 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_email_draftwrite action

    Create a new, standalone draft email that can be edited and sent later. Use this only for starting a fresh message \u2014 to draft a reply within an existing conversation thread, use create_reply_draft instead.

  • create_reply_draftwrite action

    Draft a reply to an existing email, kept inside the original conversation thread. Produces an editable draft (in Drafts) that inherits the conversation, the 'RE:' subject, threading headers, and quoted history \u2014 review and send it later with send_email or via Outlook. Use this instead of create_email_draft whenever responding to a message.

  • delete_emailwrite action

    Permanently delete an email message.

  • get_attachment

    Get an email attachment's content (returned as base64 in contentBytes).

  • get_emailwrite action

    Get a single email message by ID with full body and headers.

  • list_emails

    List emails from a mailbox folder ordered by date descending.

  • me

    Get the signed-in user's profile (id, displayName, mail).

  • move_emailwrite action

    Move an email to a different folder.

  • reply_all_emailwrite action

    Reply to all recipients of an email.

  • reply_to_emailwrite action

    Reply to an email (sender only).

  • search_emails

    Search emails by keyword across all folders or within a specific folder (KQL syntax supported).

  • send_emailwrite action

    Send an email immediately.

  • unified_search

    Search across multiple Microsoft 365 content types (email, calendar events, files) in one query.

  • update_emailwrite action

    Update email properties such as read status, categories, or flag.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • Code scan2 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 111 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/index.js: …== "win32" ? 'start ""' : "xdg-open"; exec(`${cmd} "${url}"`, () => { }); }; var loginViaBro…
Overall 63/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Microsoft Outlook compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
63/100
higher than 18% of 916 Email servers
Tools
14
the typical Email server has 7
Tools that change things
64%
typical: 25%. Fewer write tools means less an agent can break
Downloads a week
60
more than 45% of 235 Email servers with a package

What its tools let an agent do: 5 read · 2 create · 3 change · 1 delete · 3 send or post

Install Microsoft Outlook in Claude Code, Cursor or VS Code

Runs npx -y microsoft-outlook-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add microsoft-outlook-mcp -- npx -y microsoft-outlook-mcp
Add to Cursor

What the publisher says

From the Microsoft Outlook repository's README, as published. We do not edit it. Read it on GitHub

        

Microsoft MCP

Model Context Protocol servers for Microsoft 365. Calendar · Contacts · OneDrive · Outlook · SharePoint — on the official @modelcontextprotocol/sdk, over stdio or Streamable HTTP.

Each server speaks the real MCP protocol and runs over either transport:

  • stdio — for local MCP clients that launch the server as a subprocess (Claude Desktop, IDEs, the MCP Inspector).
  • Streamable HTTP — for remote/hosted use, with the Microsoft Graph access token supplied per request via Authorization: Bearer.

Servers

All tools are thin wrappers over the Microsoft Graph v1.0 API.

Layout

microsoft-mcp/
├── apps/                       # one MCP server per Microsoft 365 product
│   ├── calendar/
│   ├── contacts/
│   ├── onedrive/
│   ├── outlook/
│   └── sharepoint/
│       └── src/
│           ├── tools.ts        # declarative tool definitions (schema + handler)
│           └── index.ts        # run({ name, version }, tools)
└── packages/                   # shared building blocks
    ├── core/                   # MCP server bootstrap + dual transport (stdio / HTTP)
    ├── graph/                  # Microsoft Graph HTTP client
    ├── validation/             # id / path / query sanitizers
    └── logger/                 # structured JSON logging (stderr-only — stdio-safe)

A server is just a list of tools handed to run():

// apps/calendar/src/index.ts
import { run } from "@microsoft-mcp/core";
import { tools } from "./tools.js";

void run({ name: "microsoft-calendar", version: "1.0.0", title: "Microsoft Calendar" }, tools);
// a single tool
defineTool({
  name: "get_event",
  description: "Get a single calendar event by ID.",
  inputSchema: { event_id: z.string().describe("Event ID") },
  confirmationPolicy: "never",
  handler: ({ graph }, { event_id }) => {
    validateId(event_id, "event_id");
    return graph.request("GET", `/me/events/${event_id}`);
  },
});

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Microsoft Outlook: common questions

Is Microsoft Outlook MCP server safe?
With care: it is graded C, so read the findings first (63/100). Read the Microsoft Outlook safety report
How do I install Microsoft Outlook?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Microsoft Outlook need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is Microsoft Outlook maintained?
The last commit was 149 days ago (2026-06-08). The latest release is v1.0.1.
What can I use instead of Microsoft Outlook?
Servers from other publishers that do the same job: Outlook MCP server, Agenticmail MCP server and Outlook Assistant MCP server.
How does Microsoft Outlook compare with other Email MCP servers?
safety score 63/100 (higher than 18% of 916 Email servers); tools 14 (the typical Email server has 7); tools that change things 64% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Microsoft Outlook

Same job from other publishers: the closest match first, then the best rated.

  • Outlook MCP
    Microsoft Outlook personal accounts: mail, rules, calendar, contacts, to-do, drafts (77 tools).
    A
  • Agenticmail
    Real email and SMS for AI agents — send mail, receive verification codes, drive a real inbox.
    B
  • Outlook Assistant
    Microsoft Outlook MCP server — 22 tools for email, calendar, contacts, and mailbox management.
    More from littlebearapps →
    A
  • Openagentemail
    Unlimited agent mailboxes — create identities, read/wait for mail, extract OTPs, send email.
    B
  • Fluxmail
    Read, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes.
    B

More from 0xka13b →