MCP.Market

Ms Onedrive MCP server

by 0xka13b·io.github.0xka13b/ms-onedrive-mcp·v1.0.1
No reviews yet

Microsoft OneDrive MCP server — browse, read, and manage files and folders through Microsoft Graph.

C63/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C63/100

full report

Adoption
New

0 stars34 downloads/wk

Reviews

Write one

Nobody has reviewed Ms Onedrive yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Ms Onedrive tools (9, 3 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_filewrite action

    Upload a new file to OneDrive.

  • delete_filewrite action

    Delete a file or folder from OneDrive.

  • download_file

    Download a file from OneDrive. Returns the full file content as base64. Use ONLY for files under 10 MB \u2014 for larger files use download_file_stream.

  • download_file_stream

    Download a file from OneDrive in chunks using HTTP Range requests. Use for files 10 MB or larger. Call repeatedly with increasing offset values until has_more is false. Returns content_base64, content_type, offset, chunk_size, total_size, and has_more.

  • get_file

    Get metadata for a OneDrive item by ID. Includes a temporary download URL for files.

  • list_files

    List files and folders in OneDrive at a given path.

  • me

    Get the signed-in user's profile (id, displayName, mail).

  • search_files

    Search for files in OneDrive by name or content.

  • update_filewrite action

    Replace the content of an existing OneDrive file.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • Code scan2 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 111 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/index.js: …== "win32" ? 'start ""' : "xdg-open"; exec(`${cmd} "${url}"`, () => { }); }; var loginViaBro…
Overall 63/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Ms Onedrive compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
63/100
higher than 18% of 48,255 servers
Tools
9
the typical server has 7
Tools that change things
33%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
34
more than 23% of 12,191 servers with a package

What its tools let an agent do: 6 read · 1 create · 1 change · 1 delete

Install Ms Onedrive in Claude Code, Cursor or VS Code

Runs npx -y ms-onedrive-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add ms-onedrive-mcp -- npx -y ms-onedrive-mcp
Add to Cursor

What the publisher says

From the Ms Onedrive repository's README, as published. We do not edit it. Read it on GitHub

        

Microsoft MCP

Model Context Protocol servers for Microsoft 365. Calendar · Contacts · OneDrive · Outlook · SharePoint — on the official @modelcontextprotocol/sdk, over stdio or Streamable HTTP.

Each server speaks the real MCP protocol and runs over either transport:

  • stdio — for local MCP clients that launch the server as a subprocess (Claude Desktop, IDEs, the MCP Inspector).
  • Streamable HTTP — for remote/hosted use, with the Microsoft Graph access token supplied per request via Authorization: Bearer.

Servers

All tools are thin wrappers over the Microsoft Graph v1.0 API.

Layout

microsoft-mcp/
├── apps/                       # one MCP server per Microsoft 365 product
│   ├── calendar/
│   ├── contacts/
│   ├── onedrive/
│   ├── outlook/
│   └── sharepoint/
│       └── src/
│           ├── tools.ts        # declarative tool definitions (schema + handler)
│           └── index.ts        # run({ name, version }, tools)
└── packages/                   # shared building blocks
    ├── core/                   # MCP server bootstrap + dual transport (stdio / HTTP)
    ├── graph/                  # Microsoft Graph HTTP client
    ├── validation/             # id / path / query sanitizers
    └── logger/                 # structured JSON logging (stderr-only — stdio-safe)

A server is just a list of tools handed to run():

// apps/calendar/src/index.ts
import { run } from "@microsoft-mcp/core";
import { tools } from "./tools.js";

void run({ name: "microsoft-calendar", version: "1.0.0", title: "Microsoft Calendar" }, tools);
// a single tool
defineTool({
  name: "get_event",
  description: "Get a single calendar event by ID.",
  inputSchema: { event_id: z.string().describe("Event ID") },
  confirmationPolicy: "never",
  handler: ({ graph }, { event_id }) => {
    validateId(event_id, "event_id");
    return graph.request("GET", `/me/events/${event_id}`);
  },
});

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Ms Onedrive: common questions

Is Ms Onedrive MCP server safe?
With care: it is graded C, so read the findings first (63/100). Read the Ms Onedrive safety report
How do I install Ms Onedrive?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Ms Onedrive need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is Ms Onedrive maintained?
The last commit was 149 days ago (2026-06-08). The latest release is v1.0.1.
What can I use instead of Ms Onedrive?
Servers from other publishers that do the same job: Microsoft 365 MCP Server.
How does Ms Onedrive compare with other MCP servers?
safety score 63/100 (higher than 18% of 48,255 servers); tools 9 (the typical server has 7); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Ms Onedrive

Same job from other publishers: the closest match first, then the best rated.

  • Microsoft 365 MCP Server
    Interact with Microsoft 365 and Office services through the Microsoft Graph API.
    B

More from 0xka13b →