Microsoft 365 Core MCP Server

Installation

• Smithery: npx -y @smithery/cli install @DynamicEndpoints/m365-core-mcp --client claude
• Local: npm install, npm run build, npm start

Configuration

• Required: MS_TENANT_ID, MS_CLIENT_ID, MS_CLIENT_SECRET
• Optional: MS_REDIRECT_URI, LOG_LEVEL, PORT, USE_HTTP, STATELESS, NODE_ENV
• Smithery uses a TypeScript runtime and reads configSchema from smithery.ts.

Capabilities

• 29 core tools plus extended Microsoft 365 resources and prompts
• Distribution lists, security groups, M365 groups, Exchange, SharePoint, Azure AD, security/compliance, Intune, audit/reporting, and dynamic Graph access
• Lazy loading, health checks, and HTTP/stateful/stateless transport support

Limitations

• Requires Microsoft 365/Entra ID credentials, app registration, and admin consent for the documented Graph permissions.
• Security remediation documentation still notes a remaining xlsx high-severity vulnerability with no fix available in npm audit.