Outlook Personal MCP server
io.github.salahawad/outlook-personal-mcp·v0.1.1·1 starsFull-control MCP server for a personal Outlook.com mailbox and calendar (Microsoft Graph).
1 stars72 downloads/wk
Reviews
Write oneNobody has reviewed Outlook Personal MCP yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Outlook Personal MCP tools (32, 11 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
add_attachmentAttach a local file to a draft.
copy_messageCopy a message to another folder.
create_draftwrite actionCreate a draft message (not sent).
create_eventwrite actionCreate a calendar event. Times are ISO 8601 in the given time_zone.
create_folderwrite actionCreate a mail folder, optionally nested under parent_folder_id.
delete_eventwrite actionDelete/cancel a calendar event.
delete_folderwrite actionDelete a mail folder (moves it to Deleted Items).
delete_messagewrite actionDelete a message (moves it to Deleted Items; reversible).
download_attachmentDownload an attachment to a local file path.
find_availabilityFree/busy across the given people for a time window (Graph getSchedule).
flag_messageFlag or unflag a message.
forwardForward a message to recipients with an optional comment.
get_eventGet one event including body and attendees.
get_messageGet a single message; include_body returns the full body text/HTML.
list_attachmentsList a message's attachments (id, name, size, contentType).
list_calendarsList the user's calendars.
list_eventsList events. If start and end (ISO 8601) are given, returns that window via calendarView.
list_foldersList mail folders with unread/total counts.
list_messagesList messages (newest first). Optionally restrict to a folder or unread only.
mark_readMark a message read (read=True) or unread (read=False).
move_messageMove a message to another folder.
permanent_deletewrite actionPERMANENTLY delete a message (irreversible). Enabled via env flag.
rename_folderRename a mail folder.
replyReply to a message (set reply_all to reply to everyone).
respond_eventRespond to a meeting invite. response is one of: accept, decline, tentative.
search_eventsSearch events by free text.
search_messagesFull-text search across the mailbox (Graph $search).
send_draftwrite actionSend an existing draft.
send_mailwrite actionSend an email. Set save_to_sent=False to skip saving to Sent Items.
update_draftwrite actionUpdate a draft's subject and/or body.
update_eventwrite actionUpdate fields on an existing event (only provided fields change).
whoamiReturn the signed-in user's Microsoft account profile.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan16 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 90 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Outlook Personal MCP compares
Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 70% of 916 Email servers
- Tools
- 32
- the typical Email server has 7
- Tools that change things
- 34%
- typical: 25%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 493 Email servers
- Downloads a week
- 72
- more than 50% of 235 Email servers with a package
What its tools let an agent do: 16 read · 4 create · 6 change · 3 delete · 3 send or post
Install Outlook Personal MCP in Claude Code, Cursor or VS Code
claude mcp add outlook-personal-mcp -- uvx mcp-outlook-personal
What the publisher says
From the Outlook Personal MCP repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.salahawad/outlook-personal-mcp -->
outlook-personal-mcp
An MCP server that gives Claude Code and Codex full control of a personal Outlook.com mailbox and calendar via the Microsoft Graph API. Written in Python, speaks the MCP stdio transport, and uses per-user device-code OAuth so your credentials never leave your machine. MIT licensed.
Features
- Mail — list, search, read, send, reply, forward, move, copy, flag, mark read/unread, delete (soft or hard)
- Drafts — create, update, attach local files, send
- Folders — list, create, rename, delete
- Calendar — list calendars, list/search/get/create/update/delete events, respond to invites (accept/decline/tentative), check free/busy availability
- Per-user OAuth — you register your own free Azure app; the server authenticates with your Microsoft account and caches the token locally
- Local stdio — runs as a child process of the MCP host; your mailbox data never transits a third party
Prerequisites
- Python 3.10 or later
- uv (fast Python package and tool runner) — required at runtime: the server is launched via uvx, and it is not bundled by your MCP host (including Claude Desktop). Install it with curl -LsSf https://astral.sh/uv/install.sh | sh (macOS/Linux) or powershell -c "irm https://astral.sh/uv/install.ps1 | iex" (Windows).
- A personal Microsoft account (Outlook.com, Hotmail, Live, etc.)
- A free Azure app registration (see below — takes about three minutes)
Azure App Registration
- Go to https://portal.azure.com → Microsoft Entra ID → App registrations → New registration.
- Name it anything you like (e.g. outlook-personal-mcp). Under Supported account types choose Personal Microsoft accounts only. No redirect URI is needed. Click Register.
- Open the app → Authentication → Advanced settings → Allow public client flows → set to Yes → Save. (This is required for the device-code login flow used by this server.)
- Go to API permissions → Add a permission → Microsoft Graph → Delegated permissions, then add:
- Mail.ReadWrite
- Mail.Send
- Calendars.ReadWrite
(User.Read is included by default; offline_access is requested automatically at runtime — you do not need to add it.)
- Copy the Application (client) ID from the Overview page. This is your OUTLOOKMCPCLIENT_ID.
Alternatively: create the app with the Azure CLI
If you have the az CLI, the whole registration is one command:
az login --use-device-code --allow-no-subscriptions # sign in with your personal account
az ad app create \
--display-name "outlook-personal-mcp" \
--sign-in-audience PersonalMicrosoftAccount \
--is-fallback-public-client true \
--required-resource-accesses '[{"resourceAppId":"00000003-0000-0000-c000-000000000000","resourceAccess":[{"id":"024d486e-b451-40bb-833d-3e66d98c5c73","type":"Scope"},{"id":"e383f46e-2787-4529-855e-0e479a3ffac0","type":"Scope"},{"id":"1ec239c2-d7c9-4623-a91a-a9775856bb36","type":"Scope"}]}]' \
--query appId -o tsvThe printed appId is your OUTLOOKMCPCLIENTID. (The GUIDs are the Microsoft Graph delegated scopes Mail.ReadWrite, Mail.Send, and Calendars.ReadWrite.) Note:** a brand-new app registration takes a few minutes to propagate to Microsoft's consumer login endpoint — if your first login fails with AADSTS700016 ("application … not found"), wait a few minutes and retry.
Install & First-Time Login
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Outlook Personal MCP: common questions
- Is Outlook Personal MCP server safe?
- Mostly: it is graded B (82/100). Read the Outlook Personal MCP safety report
- How do I install Outlook Personal MCP?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Outlook Personal MCP need an API key?
- No secret keys are declared. It reads 6 settings from the environment.
- Is Outlook Personal MCP maintained?
- The last commit was 129 days ago (2026-06-28). The latest release is v0.1.1.
- What can I use instead of Outlook Personal MCP?
- Servers from other publishers that do the same job: Outlook MCP server, Outlook Assistant MCP server and MCPEmails MCP server.
- How does Outlook Personal MCP compare with other Email MCP servers?
- safety score 82/100 (higher than 70% of 916 Email servers); tools 32 (the typical Email server has 7); tools that change things 34% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Outlook Personal MCP
Same job from other publishers: the closest match first, then the best rated.
- Outlook MCPMicrosoft Outlook personal accounts: mail, rules, calendar, contacts, to-do, drafts (77 tools).not reviewedEstablishedA
Outlook AssistantMicrosoft Outlook MCP server — 22 tools for email, calendar, contacts, and mailbox management.not reviewedEstablishedA- MCPEmailsNever-stored live email: read, send and triage Gmail, Outlook / Microsoft 365, or any IMAP mailbox.not reviewedGrowingA
- OutlookOutlook & OneDrive MCP: personal & enterprise tools for mail, calendar, contacts, tasks, filesnot reviewedGrowingA
- Microsoft 365 MailMicrosoft 365 Outlook mail via Graph: read, search, send, reply, forward, draft, move, delete.not reviewedGrowingA