Outlook MCP

outlook-mcp

MCP server for Microsoft Outlook personal accounts (Outlook.com, Hotmail, Live). Provides AI agents with full access to mail, calendar, contacts, and tasks via Microsoft Graph API.

Independent open-source project. Not affiliated with Microsoft.

Agent-friendly

Pass concise=True to read tools (outlook_list_inbox, outlook_read_message, outlook_search_mail, outlook_list_events, outlook_list_thread) to drop large body fields — ~10× fewer tokens for triage scans. Graph errors are wrapped into structured {code, message, action} responses with recovery hints (re-auth on 401, ROADMAP link on 403/ErrorAccessDenied, re-list on 404, back-off on 429, retry on 503). v1.9.1 docstring audit: every @mcp.tool() docstring rewritten to a consistent shape with contrastive pointers for ambiguous pairs and concrete syntax examples, designed to reduce wrong-tool selection by LLMs.

Important

• Personal Microsoft accounts only (@outlook.com, @hotmail.com, @live.com). Work/school accounts (Entra ID) are not supported in v1.
• Requires Azure AD app registration — free, takes ~5 minutes, but you need a free Azure account first. See README.
• Auth is CLI-based — run outlook-mcp auth on the host before the agent can use it. No interactive auth through MCP tools.

Setup

1. Create a free Azure account at azure.microsoft.com/free (sign up with your @outlook.com address)
2. Register an Azure AD app (see README for step-by-step)
3. Configure: Create ~/.outlook-mcp/config.json:

   {
     "client_id": "YOUR-APP-CLIENT-ID",
     "tenant_id": "consumers",
     "timezone": "America/Los_Angeles",
     "read_only": true,
     "attachments_dir": "~/.outlook-mcp/attachments"
   }
   

4. Install:

   uv tool install outlook-graph-mcp
   

   Installs the released wheel from PyPI and puts outlook-mcp on your PATH. Upgrade later with uv tool upgrade outlook-graph-mcp.
5. Register with OpenClaw (writes to mcp.servers in ~/.openclaw/openclaw.json):

   openclaw mcp set outlook '{"command":"outlook-mcp"}'
   openclaw mcp list   # verify
   

6. Authenticate on the host:

   outlook-mcp auth
   

7. Restart the gateway: openclaw gateway restart

Working on outlook-mcp itself? Clone the repo and use uv run --directory /path/to/outlook-mcp outlook-mcp as the command instead — see the README. The PyPI install above is the right one for using it.

Prompts (3)

• morning_brief(folder="inbox") — today's events, unread mail and tasks due, in the cheapest order
• triage_folder(folder="inbox", count=50) — one scan, sorted, applied in a single batch call
• catch_up(since="24h") — what changed, via the delta path

Tools (62)

Auth

• outlook_auth_status — Check authentication status and read-only mode

Mail — Read

• outlook_list_inbox — List messages with filters (folder, unread, sender, date, category, Focused class)
• outlook_read_message — Get full message by ID
• outlook_read_messages — Bulk read up to 20 messages by ID in one $batch round-trip (use NOT N read_message calls)
• outlook_search_mail — Search mail using KQL query
• outlook_list_folders — List all mail folders
• outlook_list_inbox_delta — List only inbox changes since last call (massive token savings for recurring agent jobs)

Mail — Write

• outlook_send_message — Send email with recipients, CC, BCC, HTML, importance
• outlook_reply — Reply or reply-all to a message
• outlook_forward — Forward a message

Mail — Triage

• outlook_move_message — Move to a folder
• outlook_delete_message — Delete (soft by default, permanent optional)
• outlook_flag_message — Set follow-up flag
• outlook_categorize_message — Set categories
• outlook_mark_read — Mark read or unread
• outlook_reclassify_message — Move between Focused Inbox and Other
• outlook_list_inbox_overrides — List Focused Inbox per-sender override rules
• outlook_set_inbox_override — Upsert a per-sender override (focused/other)
• outlook_delete_inbox_override — Delete an override by ID

Calendar

• outlook_list_events — List events in date range (expands recurring); each carries type (seriesMaster vs one-off); calendar reads a secondary calendar by name or ID (default calendar when omitted); a cursor continues the same calendar
• outlook_get_event — Get event details, incl. recurrence and type (seriesMaster etc.)
• outlook_list_events_delta — List only event changes since last call within a window (massive token savings for recurring agent jobs)
• outlook_create_event — Create event with attendees, online meeting; recurrence (shorthand or Graph object) creates a series
• outlook_update_event — Update event fields incl. attendees (replaces the list, sends invites) and all-day; recurrence converts a single event into a series, remove_recurrence=True converts it back
• outlook_delete_event — Delete event
• outlook_rsvp — Accept, decline, or tentatively accept

Contacts

• outlook_list_contacts — List with cursor pagination
• outlook_search_contacts — Search by name or email
• outlook_get_contact — Get full details
• outlook_create_contact — Create
• outlook_update_contact — Update
• outlook_delete_contact — Delete
• outlook_list_contacts_delta — List only contact changes since last call (massive token savings for recurring agent jobs)

Digest

• outlook_changes_since — One structured "since last call" digest across mail, events, and contacts. Composes the three delta tools into counts + urgent-flagged mail + top-5 senders + new/cancelled events; auto-recovers from stale tokens. Designed for recurring agent loops (morning brief, hourly inbox sweep).

To Do

• outlook_list_task_lists — List To Do lists
• outlook_list_tasks — List tasks with status filter and pagination
• outlook_create_task — Create with due date, importance, recurrence
• outlook_update_task — Update
• outlook_complete_task — Mark completed
• outlook_delete_task — Delete

Drafts

• outlook_list_drafts — List with pagination
• outlook_create_draft — Create for later review
• outlook_update_draft — Update
• outlook_send_draft — Send
• outlook_delete_draft — Delete

Attachments

• outlook_list_attachments — List on a message
• outlook_download_attachment — Download and save decoded bytes into attachments_dir
• outlook_send_with_attachments — Send with files read from attachments_dir (auto upload session for >3MB)
• outlook_attach_to_draft — Add attachments to an existing draft (auto upload session for >3MB)
• outlook_remove_draft_attachment — Remove a single attachment from a draft

Folder Management

• outlook_create_folder — Create (top-level or nested)
• outlook_rename_folder — Rename
• outlook_delete_folder — Delete (refuses well-known folders)

Threading and Batch

• outlook_list_thread — Get all messages in a conversation
• outlook_copy_message — Copy to another folder
• outlook_batch_triage — Batch move/flag/categorize/mark_read (max 20)

User and Admin

• outlook_whoami — Current user profile
• outlook_list_calendars — Available calendars
• outlook_list_categories — Category definitions with colors
• outlook_get_mail_tips — Pre-send check (OOF, delivery restrictions)
• outlook_list_accounts — Configured accounts
• outlook_switch_account — Switch active account

Privacy

• Zero telemetry, zero local caching
• Only connects to login.microsoftonline.com and graph.microsoft.com
• Tokens stored in the OS keyring (macOS Keychain, Windows Credential Store, libsecret on Linux). Without an encrypted store the server refuses to persist them unless allow_unencrypted_token_cache is set.
• BYOID: you register your own Azure AD app — no shared client ID

Notes

• IDs are opaque Graph strings — get them from list/search tools, never guess
• Dates take ISO 8601 or a relative offset (7d ago, +7d from now, now); responses are UTC, and zone-less input is read in the config timezone
• Attachments may only be read from or written to attachments_dir — put a file there before asking for it to be sent
• Three workflow prompts ship with the server: morning_brief, triage_folder, catch_up
• Mail search uses KQL syntax
• Start with read_only: true, flip when comfortable
• Granular permissions: For finer control, set allow_categories in config (e.g., ["calendar_write"] to allow only calendar writes). See README for the 7 categories and example policies.
• Toolset selection: Set OUTLOOK_MCP_TOOLSETS (e.g. mail,calendar,digest,delta) to load only the tool groups you use and cut per-turn context; unset loads all 62. Tools carry read-only / destructive annotations so clients can auto-approve reads.