How do I install the M365 Mailbox skill?

Run npx skillmds@latest add javimosch/m365-mailbox in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the M365 Mailbox skill do?

M365 Mailbox (Microsoft Graph) It is listed under Coding & Dev Tools on SkillMD.

Is M365 Mailbox safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with M365 Mailbox?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is M365 Mailbox free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published M365 Mailbox?

javimosch (@javimosch) published this skill. Their other Agent Skills are listed on their SkillMD profile.

M365 Mailbox by javimosch — Agent Skill

Name: M365 Mailbox
Author: javimosch

File contents

M365 Mailbox (Microsoft Graph)

Installation / runtime requirements

Requires Node.js (scripts are Node ESM).
This skill declares its npm dependency in package.json.
After installing/updating the skill, install deps:

cd skills/m365-mailbox
npm install

Security / boundaries

Never commit or share token caches.
Default secret location (per machine): ~/.openclaw/secrets/m365-mailbox/

Setup philosophy (permission-aware)

During setup, the user chooses:

What Graph permissions to request (minimal vs broad)
What OpenClaw is allowed to do autonomously vs what must ask for confirmation

Two modes:

Minimal-consent mode (more secure): request only the scopes required for the chosen feature set.
Broad-consent mode (more flexible): request a superset of scopes, but enforce an autonomy policy locally.

Quick start

0) First question: connect M365 Business or M365 Home/Consumer?

Home/Consumer = hotmail.com, outlook.com, live.com
Business = Work/School account (Exchange Online)

1) Privacy / keys

No third-party API key required.
Auth is done via your own Microsoft login (device code flow).
Tokens are stored locally per profile on the OpenClaw machine.

2) One-command setup (interactive)

node skills/m365-mailbox/scripts/setup.mjs --profile home --tenant consumers --email you@outlook.com --clientId <YOUR_APP_CLIENT_ID> --tz Europe/Vienna
node skills/m365-mailbox/scripts/setup.mjs --profile business --tenant organizations --email you@company.com --clientId <IT_PROVIDED_CLIENT_ID> --tz Europe/Vienna

3) Use (examples)

node skills/m365-mailbox/scripts/list-unread.mjs --profile home --top 20
node skills/m365-mailbox/scripts/search.mjs --profile home --query "invoice" --top 20
node skills/m365-mailbox/scripts/get-message.mjs --profile home --id <MSG_ID>
node skills/m365-mailbox/scripts/create-draft.mjs --profile home --to you@example.com --subject "Hi" --body "..."
node skills/m365-mailbox/scripts/send-draft.mjs --profile home --id <DRAFT_ID>

Business note (users without IT admin rights)

Many tenants block:

creating app registrations as a normal user
user consent to new apps
Mail.Send or Mail.ReadWrite without admin consent

In that case this skill can still work for Business accounts, but only if your IT/SysAdmin provides a clientId for an app registration configured with:

Delegated Microsoft Graph permissions (depending on your chosen feature set): Mail.Read, Mail.ReadWrite, Mail.Send, (optional) offline_access
Public client flows enabled (Device Code)
(Often required) Admin consent granted

If you don’t get such a clientId/consent from IT, you can still use the skill with a Consumer account.

---name: m365-mailboxdescription: M365 Mailbox (Microsoft Graph)---# M365 Mailbox (Microsoft Graph)## Installation / runtime requirements- Requires **Node.js** (scripts are Node ESM).- This skill declares its npm dependency in `package.json`.- After installing/updating the skill, install deps:```bashcd skills/m365-mailboxnpm install```## Security / boundaries- Never commit or share token caches.- Default secret location (per machine): `~/.openclaw/secrets/m365-mailbox/`## Setup philosophy (permission-aware)During setup, the user chooses:1) **What Graph permissions to request** (minimal vs broad)2) **What OpenClaw is allowed to do autonomously** vs what must ask for confirmationTwo modes:- **Minimal-consent mode (more secure):** request only the scopes required for the chosen feature set.- **Broad-consent mode (more flexible):** request a superset of scopes, but enforce an **autonomy policy** locally.## Quick start### 0) First question: connect **M365 Business** or **M365 Home/Consumer**?- **Home/Consumer** = `hotmail.com`, `outlook.com`, `live.com`- **Business** = Work/School account (Exchange Online)### 1) Privacy / keys- **No third-party API key required.**- Auth is done via **your own Microsoft login** (device code flow).- Tokens are stored **locally per profile** on the OpenClaw machine.### 2) One-command setup (interactive)```bashnode skills/m365-mailbox/scripts/setup.mjs --profile home --tenant consumers --email you@outlook.com --clientId <YOUR_APP_CLIENT_ID> --tz Europe/Viennanode skills/m365-mailbox/scripts/setup.mjs --profile business --tenant organizations --email you@company.com --clientId <IT_PROVIDED_CLIENT_ID> --tz Europe/Vienna```### 3) Use (examples)```bashnode skills/m365-mailbox/scripts/list-unread.mjs --profile home --top 20node skills/m365-mailbox/scripts/search.mjs --profile home --query "invoice" --top 20node skills/m365-mailbox/scripts/get-message.mjs --profile home --id <MSG_ID>node skills/m365-mailbox/scripts/create-draft.mjs --profile home --to you@example.com --subject "Hi" --body "..."node skills/m365-mailbox/scripts/send-draft.mjs --profile home --id <DRAFT_ID>```## Business note (users without IT admin rights)Many tenants block:- creating app registrations as a normal user- user consent to new apps- `Mail.Send` or `Mail.ReadWrite` without admin consentIn that case this skill can still work for Business accounts, but only if your **IT/SysAdmin** provides a `clientId` for an app registration configured with:- Delegated Microsoft Graph permissions (depending on your chosen feature set): `Mail.Read`, `Mail.ReadWrite`, `Mail.Send`, (optional) `offline_access`- **Public client flows enabled** (Device Code)- (Often required) **Admin consent granted**If you don’t get such a `clientId`/consent from IT, you can still use the skill with a **Consumer** account.

Frequently asked questions

M365 Mailbox