MCP.Market

Outlook Personal MCP server

by salahawad·io.github.salahawad/outlook-personal-mcp·v0.1.1·1 stars

Full-control MCP server for a personal Outlook.com mailbox and calendar (Microsoft Graph).

B82/100grade B
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
New

1 stars72 downloads/wk

Reviews

Write one

Nobody has reviewed Outlook Personal MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Outlook Personal MCP tools (32, 11 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • add_attachment

    Attach a local file to a draft.

  • copy_message

    Copy a message to another folder.

  • create_draftwrite action

    Create a draft message (not sent).

  • create_eventwrite action

    Create a calendar event. Times are ISO 8601 in the given time_zone.

  • create_folderwrite action

    Create a mail folder, optionally nested under parent_folder_id.

  • delete_eventwrite action

    Delete/cancel a calendar event.

  • delete_folderwrite action

    Delete a mail folder (moves it to Deleted Items).

  • delete_messagewrite action

    Delete a message (moves it to Deleted Items; reversible).

  • download_attachment

    Download an attachment to a local file path.

  • find_availability

    Free/busy across the given people for a time window (Graph getSchedule).

  • flag_message

    Flag or unflag a message.

  • forward

    Forward a message to recipients with an optional comment.

  • get_event

    Get one event including body and attendees.

  • get_message

    Get a single message; include_body returns the full body text/HTML.

  • list_attachments

    List a message's attachments (id, name, size, contentType).

  • list_calendars

    List the user's calendars.

  • list_events

    List events. If start and end (ISO 8601) are given, returns that window via calendarView.

  • list_folders

    List mail folders with unread/total counts.

  • list_messages

    List messages (newest first). Optionally restrict to a folder or unread only.

  • mark_read

    Mark a message read (read=True) or unread (read=False).

  • move_message

    Move a message to another folder.

  • permanent_deletewrite action

    PERMANENTLY delete a message (irreversible). Enabled via env flag.

  • rename_folder

    Rename a mail folder.

  • reply

    Reply to a message (set reply_all to reply to everyone).

  • respond_event

    Respond to a meeting invite. response is one of: accept, decline, tentative.

  • search_events

    Search events by free text.

  • search_messages

    Full-text search across the mailbox (Graph $search).

  • send_draftwrite action

    Send an existing draft.

  • send_mailwrite action

    Send an email. Set save_to_sent=False to skip saving to Sent Items.

  • update_draftwrite action

    Update a draft's subject and/or body.

  • update_eventwrite action

    Update fields on an existing event (only provided fields change).

  • whoami

    Return the signed-in user's Microsoft account profile.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan16 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 90 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Outlook Personal MCP compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 70% of 916 Email servers
Tools
32
the typical Email server has 7
Tools that change things
34%
typical: 25%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 493 Email servers
Downloads a week
72
more than 50% of 235 Email servers with a package

What its tools let an agent do: 16 read · 4 create · 6 change · 3 delete · 3 send or post

Install Outlook Personal MCP in Claude Code, Cursor or VS Code

claude mcp add outlook-personal-mcp -- uvx mcp-outlook-personal
Add to Cursor

What the publisher says

From the Outlook Personal MCP repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.salahawad/outlook-personal-mcp -->

outlook-personal-mcp

An MCP server that gives Claude Code and Codex full control of a personal Outlook.com mailbox and calendar via the Microsoft Graph API. Written in Python, speaks the MCP stdio transport, and uses per-user device-code OAuth so your credentials never leave your machine. MIT licensed.

Features

  • Mail — list, search, read, send, reply, forward, move, copy, flag, mark read/unread, delete (soft or hard)
  • Drafts — create, update, attach local files, send
  • Folders — list, create, rename, delete
  • Calendar — list calendars, list/search/get/create/update/delete events, respond to invites (accept/decline/tentative), check free/busy availability
  • Per-user OAuth — you register your own free Azure app; the server authenticates with your Microsoft account and caches the token locally
  • Local stdio — runs as a child process of the MCP host; your mailbox data never transits a third party

Prerequisites

  • Python 3.10 or later
  • uv (fast Python package and tool runner) — required at runtime: the server is launched via uvx, and it is not bundled by your MCP host (including Claude Desktop). Install it with curl -LsSf https://astral.sh/uv/install.sh | sh (macOS/Linux) or powershell -c "irm https://astral.sh/uv/install.ps1 | iex" (Windows).
  • A personal Microsoft account (Outlook.com, Hotmail, Live, etc.)
  • A free Azure app registration (see below — takes about three minutes)

Azure App Registration

  1. Go to https://portal.azure.com → Microsoft Entra ID → App registrations → New registration.
  2. Name it anything you like (e.g. outlook-personal-mcp). Under Supported account types choose Personal Microsoft accounts only. No redirect URI is needed. Click Register.
  3. Open the app → Authentication → Advanced settings → Allow public client flows → set to Yes → Save. (This is required for the device-code login flow used by this server.)
  4. Go to API permissions → Add a permission → Microsoft Graph → Delegated permissions, then add:
  • Mail.ReadWrite
  • Mail.Send
  • Calendars.ReadWrite

(User.Read is included by default; offline_access is requested automatically at runtime — you do not need to add it.)

  1. Copy the Application (client) ID from the Overview page. This is your OUTLOOKMCPCLIENT_ID.

Alternatively: create the app with the Azure CLI

If you have the az CLI, the whole registration is one command:

az login --use-device-code --allow-no-subscriptions   # sign in with your personal account

az ad app create \
  --display-name "outlook-personal-mcp" \
  --sign-in-audience PersonalMicrosoftAccount \
  --is-fallback-public-client true \
  --required-resource-accesses '[{"resourceAppId":"00000003-0000-0000-c000-000000000000","resourceAccess":[{"id":"024d486e-b451-40bb-833d-3e66d98c5c73","type":"Scope"},{"id":"e383f46e-2787-4529-855e-0e479a3ffac0","type":"Scope"},{"id":"1ec239c2-d7c9-4623-a91a-a9775856bb36","type":"Scope"}]}]' \
  --query appId -o tsv

The printed appId is your OUTLOOKMCPCLIENTID. (The GUIDs are the Microsoft Graph delegated scopes Mail.ReadWrite, Mail.Send, and Calendars.ReadWrite.) Note:** a brand-new app registration takes a few minutes to propagate to Microsoft's consumer login endpoint — if your first login fails with AADSTS700016 ("application … not found"), wait a few minutes and retry.

Install & First-Time Login

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Outlook Personal MCP: common questions

Is Outlook Personal MCP server safe?
Mostly: it is graded B (82/100). Read the Outlook Personal MCP safety report
How do I install Outlook Personal MCP?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Outlook Personal MCP need an API key?
No secret keys are declared. It reads 6 settings from the environment.
Is Outlook Personal MCP maintained?
The last commit was 129 days ago (2026-06-28). The latest release is v0.1.1.
What can I use instead of Outlook Personal MCP?
Servers from other publishers that do the same job: Outlook MCP server, Outlook Assistant MCP server and MCPEmails MCP server.
How does Outlook Personal MCP compare with other Email MCP servers?
safety score 82/100 (higher than 70% of 916 Email servers); tools 32 (the typical Email server has 7); tools that change things 34% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Outlook Personal MCP

Same job from other publishers: the closest match first, then the best rated.

  • Outlook MCP
    Microsoft Outlook personal accounts: mail, rules, calendar, contacts, to-do, drafts (77 tools).
    A
  • Outlook Assistant
    Microsoft Outlook MCP server — 22 tools for email, calendar, contacts, and mailbox management.
    A
  • MCPEmails
    Never-stored live email: read, send and triage Gmail, Outlook / Microsoft 365, or any IMAP mailbox.
    A
  • Outlook
    Outlook & OneDrive MCP: personal & enterprise tools for mail, calendar, contacts, tasks, files
    A
  • Microsoft 365 Mail
    Microsoft 365 Outlook mail via Graph: read, search, send, reply, forward, draft, move, delete.
    A