MCP.Market

Ms Sharepoint MCP server

by 0xka13b·io.github.0xka13b/ms-sharepoint-mcp·v1.0.1
No reviews yet

Microsoft SharePoint MCP server — access sites, lists, and documents through Microsoft Graph.

C63/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C63/100

full report

Adoption
New

0 stars46 downloads/wk

Reviews

Write one

Nobody has reviewed Ms Sharepoint yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Ms Sharepoint tools (23, 8 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_folderwrite action

    Create a folder in a SharePoint document library.

  • create_itemwrite action

    Create a new item in a SharePoint list.

  • create_sitewrite action

    Create a new SharePoint site. Team sites are provisioned via a Microsoft 365 Group (requires Group.ReadWrite.All). Communication sites are created via the SharePoint REST API (requires Sites.FullControl.All).

  • delete_filewrite action

    Permanently delete a file or folder from a SharePoint document library.

  • delete_itemwrite action

    Permanently delete a SharePoint list item.

  • download_file

    Download a file from a SharePoint document library. Returns content as base64.

  • get_document

    Retrieve both metadata and text content of a SharePoint file in one call. Optimised for AI consumption of documents.

  • get_drive

    Get the default document library (drive) for a SharePoint site, or a specific drive when drive_id is supplied.

  • get_file_content

    Retrieve the raw text content of a file in SharePoint. Best for plain-text, CSV, JSON, or Markdown files.

  • get_file_metadata

    Get file properties (name, size, MIME type, created/modified dates, web URL) without downloading content.

  • get_item

    Get a single SharePoint list item by its ID, including all field values.

  • get_list

    Get metadata and column schema for a specific SharePoint list or library.

  • get_site

    Get metadata for a SharePoint site by its Graph site ID or hostname:path form.

  • get_site_id

    Resolve a SharePoint site hostname and server-relative path to its Graph GUID. Use the returned id with other tools.

  • get_user_profile

    Get the signed-in user's Microsoft 365 profile (id, displayName, mail, jobTitle, department, etc.).

  • list_columns

    List all column definitions for a SharePoint list.

  • list_items

    Query items in a SharePoint list with optional OData $filter, $select, and pagination.

  • list_lists

    List all lists and document libraries in a SharePoint site.

  • list_sites

    Search and list SharePoint sites accessible to the signed-in user.

  • searchwrite action

    Run a Microsoft Search query across SharePoint content with full control over entity types and result shape.

  • search_sharepoint

    Focused full-text search across SharePoint lists and document libraries with ranked results. Supports KQL syntax (e.g. 'budget filetype:xlsx', 'author:"John Smith"').

  • update_itemwrite action

    Update one or more fields of an existing SharePoint list item.

  • upload_filewrite action

    Upload a file to a SharePoint document library. Files over 4 MB are automatically chunked via an upload session.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • Code scan2 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 111 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/index.js: …== "win32" ? 'start ""' : "xdg-open"; exec(`${cmd} "${url}"`, () => { }); }; var loginViaBro…
Overall 63/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Ms Sharepoint compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
63/100
higher than 18% of 48,255 servers
Tools
23
the typical server has 7
Tools that change things
35%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
46
more than 38% of 12,191 servers with a package

What its tools let an agent do: 15 read · 4 create · 2 change · 2 delete

Install Ms Sharepoint in Claude Code, Cursor or VS Code

Runs npx -y ms-sharepoint-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add ms-sharepoint-mcp -- npx -y ms-sharepoint-mcp
Add to Cursor

What the publisher says

From the Ms Sharepoint repository's README, as published. We do not edit it. Read it on GitHub

        

Microsoft MCP

Model Context Protocol servers for Microsoft 365. Calendar · Contacts · OneDrive · Outlook · SharePoint — on the official @modelcontextprotocol/sdk, over stdio or Streamable HTTP.

Each server speaks the real MCP protocol and runs over either transport:

  • stdio — for local MCP clients that launch the server as a subprocess (Claude Desktop, IDEs, the MCP Inspector).
  • Streamable HTTP — for remote/hosted use, with the Microsoft Graph access token supplied per request via Authorization: Bearer.

Servers

All tools are thin wrappers over the Microsoft Graph v1.0 API.

Layout

microsoft-mcp/
├── apps/                       # one MCP server per Microsoft 365 product
│   ├── calendar/
│   ├── contacts/
│   ├── onedrive/
│   ├── outlook/
│   └── sharepoint/
│       └── src/
│           ├── tools.ts        # declarative tool definitions (schema + handler)
│           └── index.ts        # run({ name, version }, tools)
└── packages/                   # shared building blocks
    ├── core/                   # MCP server bootstrap + dual transport (stdio / HTTP)
    ├── graph/                  # Microsoft Graph HTTP client
    ├── validation/             # id / path / query sanitizers
    └── logger/                 # structured JSON logging (stderr-only — stdio-safe)

A server is just a list of tools handed to run():

// apps/calendar/src/index.ts
import { run } from "@microsoft-mcp/core";
import { tools } from "./tools.js";

void run({ name: "microsoft-calendar", version: "1.0.0", title: "Microsoft Calendar" }, tools);
// a single tool
defineTool({
  name: "get_event",
  description: "Get a single calendar event by ID.",
  inputSchema: { event_id: z.string().describe("Event ID") },
  confirmationPolicy: "never",
  handler: ({ graph }, { event_id }) => {
    validateId(event_id, "event_id");
    return graph.request("GET", `/me/events/${event_id}`);
  },
});

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Ms Sharepoint: common questions

Is Ms Sharepoint MCP server safe?
With care: it is graded C, so read the findings first (63/100). Read the Ms Sharepoint safety report
How do I install Ms Sharepoint?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Ms Sharepoint need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is Ms Sharepoint maintained?
The last commit was 149 days ago (2026-06-08). The latest release is v1.0.1.
What can I use instead of Ms Sharepoint?
Servers from other publishers that do the same job: Microsoft 365 MCP Server.
How does Ms Sharepoint compare with other MCP servers?
safety score 63/100 (higher than 18% of 48,255 servers); tools 23 (the typical server has 7); tools that change things 35% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Ms Sharepoint

Same job from other publishers: the closest match first, then the best rated.

  • Microsoft 365 MCP Server
    Interact with Microsoft 365 and Office services through the Microsoft Graph API.
    B

More from 0xka13b →