Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 0
- 4 2
- 3 3
- 2 0
- 1 0
Trust in production
- Trust it - 20%
- With caveats - 80%
- Wouldn't - 0%
80% would recommend this server
How reviewers scored it
- Setup & docs 3.6
- Auth experience 3.2
- Reliability 3.6
- Maintainer responsiveness 3.8
Why it got a B
The most used open-source Microsoft 365 MCP server (MIT, TypeScript, 79 contributors, about 1.1K GitHub stars). It maps 300+ tools one-to-one to Microsoft Graph endpoints: Outlook mail, calendar and contacts, OneDrive, Excel, OneNote, To Do and Planner by default, and Teams, SharePoint and shared mailboxes with --org-mode. You sign in with Microsoft (device code by default), and the token is kept in an encrypted file whose key sits in your OS credential store. The server asks only for the Graph scopes its enabled tools need, so --preset outlook, --read-only or --allowed-scopes shrink both the tools and the token. Without them, the default set can read, send and delete mail. Two advisories were fixed quickly: a high one (a project .env could set a command run at startup, fixed in 0.137.0) and a low one (".." path values, fixed in 0.158.1). Not a Microsoft product; Microsoft's own Work IQ MCP is in public preview for work tenants. Biggest deduction: HTTP mode listens on every network interface with no built-in TLS, so keep it on stdio or put it behind an HTTPS reverse proxy bound to a private address.
How to connect
claude mcp add ms365 -- npx -y @softeria/ms-365-mcp-server// claude_desktop_config.json (personal account; add "--org-mode" for work/school)
{ "mcpServers": { "ms365": { "command": "npx",
"args": ["-y", "@softeria/ms-365-mcp-server"] } } }Is Microsoft 365 MCP Server (Softeria ms-365-mcp-server) safe?
Is Microsoft 365 MCP Server (Softeria ms-365-mcp-server) safe to use?
Microsoft 365 MCP Server (Softeria ms-365-mcp-server) grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. It shells out to helper programs or serves HTTP without enforced TLS, so keep it local and isolated.
Does Microsoft 365 MCP Server (Softeria ms-365-mcp-server) have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Microsoft 365 MCP Server (Softeria ms-365-mcp-server) support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Collaboration
- A Google Drive MCP ServerOfficial Google-hosted Drive server (Developer Preview) to search, read, download, create, and copy files, with scoped OAuth.
- A Pragor Project Board MCP ServerHosted server that connects an agent to a Pragor project board to read and update messages, tasks and operations, with a per-agent token limited to its project role.
- A Slack MCP ServerOfficial hosted Slack server to search and read messages, files, and canvases, and send messages as you.
- A monday.com MCPmonday.com's official MCP server, hosted at mcp.monday.com or run locally from npm, to read and update boards, items, columns, updates and forms.
- B Asana MCPOfficial hosted Asana server to search, read, create, and update tasks and projects, with OAuth sign-in.
Embed this badge
[](https://trustedmcp.io/servers/ms-365-mcp-server)<a href="https://trustedmcp.io/servers/ms-365-mcp-server"><img src="https://trustedmcp.io/badge/ms-365-mcp-server.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Recommended it to two teams already
Replaced a homegrown script with Microsoft 365 MCP Server (Softeria ms-365-mcp-server) and have not looked back. Filed an issue and got a reply within two days. Recommended, with sensible guardrails.
Used for Keeping project boards up to date
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Saves me a context switch every hour
I use this almost daily. You can tell it is actively maintained, the rough edges keep getting fixed. It is community maintained, so I pin the version and read the changelog before upgrading. I like that access goes through a proper sign-in instead of a long-lived secret on disk. It is in our production agent and I sleep fine.
Used for Drafting announcements
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Does the job, docs could be better
I like it, with reservations. Sign-in flow was painless and I never had to paste a key into a config file. Releases come often and the changelog is clear. Fine in production if you sandbox it.
Used for Summarising channels I missed
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Mixed feelings after two weeks
Took longer to configure than I expected. Sign-in flow was painless and I never had to paste a key into a config file. Worth it, just do not skip the hardening steps.
Used for Meeting prep from shared docs
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Works, just lock it down
Some tools are great, a couple feel half finished. Updates land regularly, and nothing broke when I upgraded. Scoped the token to just what the agent needs and it respected that. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Turning chat threads into tasks
- Setup & docs 2/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.