outlook-mcp
Health Uyari
- No license — Repository has no license file
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Community trust — 24 GitHub stars
Code Basarisiz
- exec() — Shell command execution in server/auth/auth.js
- process.env — Environment variable access in server/auth/auth.js
- network request — Outbound network request in server/auth/auth.js
- process.env — Environment variable access in server/auth/bootstrap.js
- process.env — Environment variable access in server/auth/config.js
- process.env — Environment variable access in server/auth/tokenManager.js
- process.env — Environment variable access in server/graph/graphClient.js
- process.env — Environment variable access in server/graph/graphHelpers.js
- network request — Outbound network request in server/graph/httpConfig.js
Permissions Gecti
- Permissions — No dangerous permissions requested
Bu listing icin henuz AI raporu yok.
MCP server for Microsoft Office 365 Outlook – email, calendar & SharePoint integration for Claude, ChatGPT, and AI assistants via Microsoft Graph API
Microsoft Outlook MCP Server
A Model Context Protocol (MCP) server that enables AI assistants to interact with Microsoft Outlook email and calendar through the Microsoft Graph API.
Features
- Email Operations: Read, search, send, reply to emails and download attachments
- SharePoint Integration: Access SharePoint files via sharing links or direct file IDs. Download files shared to you via emails.
- Calendar Management: View and manage calendar events and appointments
- Office Document Processing: Parse PDF, Word, PowerPoint, and Excel files with extracted text content
- Receipt & Invoice Collection: Discover emailed receipts by sender/subject/date, save them as verified and consistently named PDFs (attachment, billing link, or rendered fallback), and stage a review draft — built for scheduled, non-interactive runs
- Large File Support: Automatic handling of files that exceed MCP response size limits
Quick Start
Choose your installation method:
| Method | Best For |
|---|---|
| DXT Extension | Claude Desktop users |
| CLI Configuration | Claude Code, mcp CLI, other MCP clients |
Prerequisites: Before installing, you'll need to set up an Azure application to get your Client ID and Tenant ID.
Installation
Installing as DXT Extension
For Claude Desktop users, DXT extensions provide the simplest installation experience.
Option 1: Download Pre-built Extension
- Download
outlook-mcp.dxtfrom the Releases page - In Claude Desktop, go to Settings → Extensions
- Click Install from file and select the
.dxtfile - Enter your Azure Client ID, Tenant ID, and optional download directory when prompted
Option 2: Build from Source
- Clone and install dependencies:
git clone https://github.com/XenoXilus/outlook-mcp.git cd outlook-mcp npm install - Install the DXT CLI:
npm install -g @anthropic-ai/dxt - Pack the extension:
dxt pack . outlook-mcp.dxt - Install the generated
.dxtfile in Claude Desktop as above
Using with CLI Tools
For CLI-based MCP clients (Claude Code, mcp CLI, etc.), configure the server directly.
1. Clone and Install:
git clone https://github.com/XenoXilus/outlook-mcp.git
cd outlook-mcp
npm install
2. Configure your MCP client:
Add the following to your MCP servers configuration (location varies by client):
{
"outlook-mcp": {
"command": "node",
"args": ["/absolute/path/to/outlook-mcp/server/index.js"],
"env": {
"AZURE_CLIENT_ID": "your-azure-client-id",
"AZURE_TENANT_ID": "your-azure-tenant-id",
"MCP_OUTLOOK_WORK_DIR": "/optional/download/directory"
}
}
}
Common config file locations:
- Claude Code:
~/.claude.jsonor project-level.mcp.json - mcp CLI:
~/.config/mcp/servers.json
3. Alternative: Use environment variables
Instead of specifying env in the config, you can export the variables in your shell:
export AZURE_CLIENT_ID="your-azure-client-id"
export AZURE_TENANT_ID="your-azure-tenant-id"
export MCP_OUTLOOK_WORK_DIR="/optional/download/directory"
Azure Setup Guide
To use this MCP server, you need to register an application in Microsoft Azure.
For Business/Work Accounts (Recommended)
- Go to the Azure Portal and search for "App registrations".
- Click New registration.
- Name:
Outlook MCP(or similar) - Supported account types: Accounts in this organizational directory only (Single tenant)
- Redirect URI: Select Web and enter
http://localhost/callback
- Name:
- Click Register.
- Go to Authentication in the sidebar.
- Under "Advanced settings", set Allow public client flows to Yes.
- Click Save.
- On the Overview page, copy:
- Application (client) ID → This is your
AZURE_CLIENT_ID - Directory (tenant) ID → This is your
AZURE_TENANT_ID
- Application (client) ID → This is your
- Go to API permissions in the sidebar.
- Click Add a permission -> Microsoft Graph -> Delegated permissions.
- Add these permissions:
Mail.Read,Mail.ReadWrite,Mail.SendCalendars.Read,Calendars.ReadWriteUser.Read,MailboxSettings.ReadFiles.Read.All,Files.ReadWrite.AllSites.Read.All,Sites.ReadWrite.Alloffline_access
- Click Add permissions.
- (Optional) If you are an admin, click Grant admin consent to suppress consent prompts for users.
Note: No client secret is required (PKCE auth flow).
For Personal Accounts (outlook.com, hotmail.com)
Personal Microsoft accounts can also register apps in Azure:
- Sign in to the Azure Portal with your personal Microsoft account (outlook.com, hotmail.com, etc.).
- If prompted to create a directory, follow the steps to create a free Azure directory.
- Follow the same steps as above for Business accounts.
- When configuring, use Accounts in any organizational directory and personal Microsoft accounts for supported account types.
Configuration Reference
Environment Variables
| Variable | Required | Description |
|---|---|---|
AZURE_CLIENT_ID |
Yes | Your Azure AD application client ID |
AZURE_TENANT_ID |
Yes | Your Azure AD directory (tenant) ID |
MCP_OUTLOOK_WORK_DIR |
No | Directory for saving large files (defaults to system temp) |
MCP_OUTLOOK_ALLOWED_WRITE_DIRS |
No | Comma-separated extra directories save tools may write into when given an explicit destDir. Permission only — defaults are unchanged |
MCP_OUTLOOK_SHARED_MAILBOX |
No | Delegated/shared mailbox to read; empty = own mailbox |
The desktop extension (DXT) exposes only the mail settings above. The receipt/invoice-run behaviour below is configured by the calling process (e.g. a scheduled routine's MCP server config) via environment variables — it is intentionally not part of the extension settings UI:
| Variable | Description |
|---|---|
MCP_OUTLOOK_RECEIPTS_DIR |
Directory where receipt/invoice PDFs are saved (falls back to work dir). Also passable per-call as destDir. |
RECEIPT_RULES_PATH |
Optional JSON file of site-specific vendor rules (see below). Unset = generic heuristics only. If set but missing/invalid, receipt tools fail fast rather than silently degrade. |
BILLING_DOMAIN_ALLOWLIST |
Comma-separated hosts outlook_fetch_billing_pdf may contact (default: pay.stripe.com,invoice.stripe.com,files.stripe.com,m.stripe.network) |
RECEIPT_FILENAME_TEMPLATE |
Receipt naming pattern (default: {vendor} {DDMmmYY} Invoice.pdf). Also passable per-vendor as filenameTemplate. |
MCP_OUTLOOK_AUTH_MODE |
interactive (default) or headless — headless never opens a browser and fails fast if silent refresh is impossible |
MCP_OUTLOOK_REFRESH_TOKEN_PATH |
Directory of the encrypted token store for headless runs (defaults to the built-in store) |
MCP_OUTLOOK_CHROME_PATH |
Chrome/Chromium binary for outlook_render_email_pdf (auto-detected when unset) |
Vendor rules (RECEIPT_RULES_PATH)
outlook_extract_receipt / outlook_collect_receipts work with zero configuration for
receipts issued via payment processors that put the vendor in the subject line
("Your receipt from Acme #1234"). For senders that need explicit mapping, or to
capture product labels, point RECEIPT_RULES_PATH at a JSON file
(see receipt-rules.example.json):
vendorSenders:[{ "pattern": "<case-insensitive regex on the from address>", "vendor": "<name>" }]— checked before the subject heuristic.productLabels:["<case-insensitive regex>", ...]— first match becomesproductLabel; without rules it isnull.
Receipt & Invoice-Run Tools (v1.1)
Five tools support autonomous expense-receipt collection (e.g. a scheduled monthly invoice run):
| Tool | Purpose |
|---|---|
outlook_save_attachment |
Save an attachment's original bytes to a chosen path/filename. Auto-selects the Invoice-*.pdf when a Stripe receipt attaches both Invoice and Receipt PDFs (prefer: invoice|receipt|first). Validates %PDF magic bytes; returns path + SHA-256 + size. |
outlook_fetch_billing_pdf |
Fetch the PDF behind a billing link in an email body (fallback when a forward loses its attachment). HTTPS-only, allowlist-only (redirects included), content-type + magic-byte validated, 25 MB / 30 s bounded. |
outlook_extract_receipt |
Compact structured summary of a receipt email (vendor, amount, currency, receipt/invoice numbers, product label, billing link, attachment ids) — never the 60 KB+ HTML body. |
outlook_render_email_pdf |
Render the sanitised email HTML to PDF via headless Chrome — audit-trail fallback for receipts with no attachment and no link (e.g. app-store order receipts). |
outlook_collect_receipts |
One call per period: discovers each vendor's receipts by sender/subject/date across the whole mailbox, saves every PDF (attachment → link → rendered fallback), and returns a manifest plus missing[]. Idempotent re-runs via onExisting: skip|overwrite|version. |
outlook_create_draft additionally accepts attachmentPaths (absolute local file paths, ≤ 3 MB each) and returns the draft's webLink — it stages the email for review and never sends.
Headless (Scheduled) Runs
- Seed tokens once, interactively:
npm run auth:bootstrap(opens the browser PKCE flow and stores an encrypted refresh token). - Set
MCP_OUTLOOK_AUTH_MODE=headlessfor the scheduled run. The server refreshes silently and never launches a browser; if re-consent is genuinely required it fails fast with an actionable error telling you to re-run the bootstrap. - Optionally set
MCP_OUTLOOK_REFRESH_TOKEN_PATHto point the run at a specific token store directory.
Large File Handling
When downloading large attachments or SharePoint files, the server automatically detects when the response would exceed the MCP 1MB limit and saves the content to local files instead.
- If
MCP_OUTLOOK_WORK_DIRis set, large files are saved to this directory - If not set, files are saved to the system temp directory
- Files are automatically named with timestamps to avoid conflicts
- Old files are periodically cleaned up to manage disk space
Example Prompts
Once installed, you can ask the AI assistant things like:
Email Management
- "Show me my unread emails from this week"
- "Find all emails from John about the project proposal"
- "Send a reply to the last email from Sarah thanking her for the update"
- "Draft an email to the team summarizing today's meeting"
Calendar
- "What meetings do I have tomorrow?"
- "Schedule a 30-minute call with Alex next Tuesday afternoon"
- "Show me my availability for the rest of the week"
Attachments & SharePoint
- "Download and summarize the PDF attachment from the latest email from Finance"
- "Get the contents of this SharePoint link: [paste link]"
- "What files were attached to emails from Legal this month?"
Receipts & Invoices
- "Collect all my June receipts into my receipts folder and give me the manifest"
- "Save the invoice PDF from the latest Acme receipt email as 'Acme 29Jun26 Invoice.pdf'"
- "Draft an email to my accountant with last month's receipt PDFs attached — don't send it"
Office Document Processing
The server automatically parses:
- PDF files: Extracts text content
- Word documents (.docx): Extracts text content
- PowerPoint (.pptx): Extracts slide text
- Excel (.xlsx): Parses data into structured format
Authentication
The server uses OAuth 2.0 with PKCE for secure authentication:
- First run will open a browser for Microsoft authentication
- Tokens are encrypted and stored locally (uses OS keychain if available, otherwise encrypted file storage)
- Automatic token refresh for long-term usage
- No sensitive data stored in plain text
Required Permissions
The app requests these Microsoft Graph permissions:
Mail.Read,Mail.ReadWrite,Mail.Send- Email accessCalendars.Read,Calendars.ReadWrite- Calendar accessUser.Read,MailboxSettings.Read- User profileFiles.Read.All,Files.ReadWrite.All- OneDrive/SharePoint filesSites.Read.All,Sites.ReadWrite.All- SharePoint sitesoffline_access- Refresh tokens
Troubleshooting
Large File Issues
- Problem: "Result exceeds maximum length" error
- Solution: Ensure
MCP_OUTLOOK_WORK_DIRis set and writable - Alternative: Files automatically save to system temp if work dir not configured
Authentication Issues
- Problem: Authentication failures
- Solution: Verify Azure AD app permissions and client ID
- Reset: Clear stored tokens and re-authenticate
SharePoint Access Issues
- Problem: Cannot access SharePoint files
- Solution: Ensure sharing links are valid and user has access permissions
- Alternative: Use direct file ID access if available
Development
Project Structure
outlook-mcp/
├── server/
│ ├── index.js # Main MCP server
│ ├── auth/ # Authentication management
│ ├── graph/ # Microsoft Graph API client
│ ├── schemas/ # MCP tool schemas
│ ├── tools/ # MCP tool implementations
│ │ ├── attachments/ # Attachment tools
│ │ ├── calendar/ # Calendar tools
│ │ ├── email/ # Email tools
│ │ ├── folders/ # Folder management
│ │ ├── receipts/ # Receipt/invoice-run tools
│ │ └── sharepoint/ # SharePoint tools
│ └── utils/ # Utility modules
└── package.json
Running Tests
npm test # Run all tests
npm run test:watch # Watch mode
npm run test:benchmark # Performance benchmarks
Debugging
npm run test:graph # Test Graph API connection
Support
If this tool saved you time, consider supporting the development!
License
MIT License
Contributing
- Fork the repository
- Create a feature branch
- Make changes with tests
- Submit a pull request
Yorumlar (0)
Yorum birakmak icin giris yap.
Yorum birakSonuc bulunamadi