sharepoint-mcp

mcp
Security Audit
Pass
Health Pass
  • License — License: NOASSERTION
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 52 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This tool is a Model Context Protocol (MCP) server that connects AI assistants (like Claude) to Microsoft SharePoint via the Graph API. It allows users to use natural language to read and upload documents, manage lists, and search across their SharePoint sites.

Security Assessment
Overall Risk: Medium. The tool inherently accesses sensitive data by design—it acts as a bridge to your organization's SharePoint environment and can read files, create pages, and modify lists. It requires an Azure AD Client Secret to authenticate, meaning you will be storing a highly sensitive credential in your local `.env` file. The light code scan found no dangerous patterns, hardcoded secrets, or dangerous system permissions. However, because it executes read/write operations on your cloud tenant via external network requests, access should be strictly controlled.

Quality Assessment
The project is actively maintained (last pushed 0 days ago) and has earned 52 GitHub stars, indicating a decent level of community trust and usage. The automated code scan reviewed 12 files and found no malicious code. While the automated scan flagged the license as "NOASSERTION" due to repository metadata settings, the README clearly displays an MIT license badge. The project is written in Python 3.10+ and provides helpful diagnostic utilities to test your Azure authentication setup.

Verdict
Use with caution—this is a well-maintained and safe tool, but because it directly modifies and reads proprietary cloud data using your Azure AD credentials, administrators should strictly limit the API permissions granted to the associated Azure app registration.
SUMMARY

SharePoint MCP (Model Context Protocol) - A SharePoint connector for LLM applications. Access SharePoint documents and lists through Microsoft Graph API.

README.md

MseeP.ai Security Assessment Badge

License: MIT
Python 3.10+
MCP
Built with Claude Code

SharePoint MCP Server

DISCLAIMER: This project is not affiliated with, endorsed by, or related to Microsoft Corporation. SharePoint and Microsoft Graph API are trademarks of Microsoft Corporation. This is an independent, community-driven project.

SharePoint MCP Server is a Model Context Protocol (MCP) server that connects LLM applications such as Claude to your SharePoint site via the Microsoft Graph API. Use natural language to query documents, manage lists, upload files, and more — directly from your AI assistant.


Features

Category Capability
Site Get site information
Libraries Browse document libraries, list folder contents
Documents Read DOCX, PDF, XLSX, CSV, TXT; browse by path; get item metadata; upload files
Search Full-text search across all site content
Lists Create lists with AI-optimized schemas; create, update list items
Pages Create modern pages and news posts
Provisioning Create new SharePoint sites and advanced document libraries
Transport stdio (local), SSE, streamable-http (web / Docker)

Prerequisites

  • Python 3.10 or higher
  • A SharePoint site with Microsoft 365
  • An Azure AD application registration with the required Graph API permissions (see docs/auth_guide.md)

Quickstart

1. Clone and install

git clone https://github.com/DEmodoriGatsuO/sharepoint-mcp.git
cd sharepoint-mcp

python -m venv venv
source venv/bin/activate  # Windows: venv\Scripts\activate

pip install -r requirements.txt

2. Configure

cp .env.example .env
# Edit .env with your Azure AD credentials and SharePoint site URL

Required variables in .env:

Variable Description
TENANT_ID Azure AD tenant ID
CLIENT_ID Azure AD application (client) ID
CLIENT_SECRET Azure AD client secret
SITE_URL SharePoint site URL (https://{tenant}.sharepoint.com/sites/{name})

3. Verify your setup (optional)

python config_checker.py   # Validate configuration
python auth-diagnostic.py  # Test authentication

4. Start the server

# stdio — default, for Claude Desktop / MCP Inspector
python server.py

# HTTP streamable-http — for web services and Copilot agents
python server.py --transport streamable-http --port 8000

# Docker
docker-compose up

Usage

Claude Desktop

Install the server into Claude Desktop:

mcp install server.py --name "SharePoint Assistant"

Or add it manually to claude_desktop_config.json:

{
  "mcpServers": {
    "sharepoint": {
      "command": "python",
      "args": ["/absolute/path/to/sharepoint-mcp/server.py"],
      "env": {
        "TENANT_ID": "...",
        "CLIENT_ID": "...",
        "CLIENT_SECRET": "...",
        "SITE_URL": "..."
      }
    }
  }
}

MCP Inspector (development)

mcp dev server.py

HTTP Server

# streamable-http (recommended for Copilot agents and web clients)
python server.py --transport streamable-http --host 0.0.0.0 --port 8000

# SSE
python server.py --transport sse --host 0.0.0.0 --port 8000

# Via environment variables
MCP_TRANSPORT=streamable-http MCP_PORT=8000 python server.py

Docker

# Build and start (defaults to streamable-http on port 8000)
docker-compose up

# Or run manually
docker build -t sharepoint-mcp .
docker run --env-file .env -p 8000:8000 sharepoint-mcp

Available Tools

The following MCP tools are exposed to the LLM:

Tool Description
get_site_info Get name, description, URL, and metadata of the SharePoint site
list_document_libraries List all document libraries (drives) in the site
list_folder_contents Browse files and folders within a document library by path
get_document_content Read and parse DOCX, PDF, XLSX, CSV, or TXT files
get_document_by_path Retrieve document content by file path
get_item_metadata Get metadata for a file or folder
search_sharepoint Full-text search across all content in the site
upload_document Upload a file to a document library
create_list_item Create a new item in a SharePoint list
update_list_item Update an existing item in a SharePoint list
create_intelligent_list Provision a list with an AI-optimized schema
create_advanced_document_library Create a document library with rich metadata
create_modern_page Publish a modern SharePoint page
create_news_post Publish a news article to the site
create_sharepoint_site Provision a new SharePoint team site

For detailed usage examples and example prompts, see docs/usage.md.


Monitoring and Troubleshooting

Logs

The server writes logs to stdout. Set DEBUG=True in .env to enable verbose logging.

Common Issues

Symptom Resolution
Authentication failure Run python auth-diagnostic.py to diagnose
Permission errors Verify your Azure AD app has the required Graph API permissions
Token issues Run python token-decoder.py to inspect token claims

Contributing

Contributions are welcome. Please open an issue first to discuss significant changes. See CONTRIBUTING.md for guidelines.

All contributions must pass the quality checks before merge:

black .       # Formatting
ruff check .  # Linting
pytest        # Tests

License

Released under the MIT License. See LICENSE for details.

Reviews (0)

No results found