What can you do with this server?

This lean MCP server provides direct Microsoft Graph API access with multi-tenant account management, designed to minimize context bloat while enabling comprehensive Microsoft 365 integration. Core Capabilities: * Multi-tenant authentication - Log in to multiple Microsoft 365 accounts simultaneously using device code flow, ideal for headless/SSH environments * Universal Graph API access - Execute any Graph API request through a single graph-request tool supporting all HTTP methods (GET, POST, PUT, PATCH, DELETE), custom headers, and request bodies * Cross-tenant querying - Target specific accounts via accountId parameter to query different tenants in the same conversation without switching * Full Microsoft 365 coverage - Access all services including Outlook, Calendar, OneDrive, Users, Groups, Teams, and SharePoint * Advanced OData queries - Use $select, $filter, $top, $orderby, $expand, $count, and $search for precise data retrieval * API version control - Choose between stable (v1.0) and preview (beta) endpoints * Account lifecycle management - List, select, verify status, and remove cached accounts * Context-efficient design - Only 7 tools (~1KB context) replace 30-40 specialized tools (~12KB), reducing AI model overhead * PnP CLI complement - Works alongside PnP CLI for specialized SharePoint, Teams, and Power Platform operations

How do I use ForIT Microsoft Graph?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@ForIT Microsoft Graph show my upcoming calendar events for this week" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

ForIT Microsoft Graph

License: MIT

A lean MCP (Model Context Protocol) server for raw Microsoft Graph API access with multi-tenant account management.

The Problem

AI assistants using Microsoft Graph face two challenges:

Context bloat - Existing MCPs expose 30-40 specialized tools, consuming ~12KB of context per conversation
Multi-tenant friction - Managing multiple Microsoft 365 accounts requires constant switching

The Solution

7 tools. ~1KB context. Direct tenant access.

Tool	Description
`login`	Authenticate with Microsoft (device code flow)
`logout`	Log out from Microsoft account
`verify-login`	Check authentication status
`list-accounts`	List all cached Microsoft accounts
`select-account`	Switch default account
`remove-account`	Remove an account from cache
`graph-request`	Execute any Graph API request

Why This Approach?

Instead of 30+ specialized tools like list-mail-messages, create-calendar-event, get-user, etc., we expose one flexible tool that can call any Graph API endpoint. The AI already knows the Graph API - it doesn't need hand-holding.

Before (Softeria, 37 tools):

list-mail-messages, get-mail-message, send-mail, create-draft-email, list-calendar-events, create-calendar-event, get-calendar-event, list-users, get-user, get-current-user, list-calendars...

After (ForIT, 1 tool):

{ "endpoint": "/me/messages", "queryParams": { "$top": "10" } }

Multi-Tenant Without Switching

The killer feature: reference any account directly without switching.

{ "endpoint": "/me/calendar/events", "accountId": "work-tenant-id" }

{ "endpoint": "/me/calendar/events", "accountId": "personal-tenant-id" }

Query both tenants in the same conversation. No select-account dance required.

Installation

npm install -g @foritllc/microsoft-graph

Quick Start

With Claude Desktop / MCP Client

{ "mcpServers": { "graph": { "command": "npx", "args": ["-y", "@foritllc/microsoft-graph"] } } }

Authentication (Device Code)

Device code authentication is used, which is the most reliable method for:

SSH sessions where browser auth isn't available
Headless servers
Remote development environments
AI agent automation

The device code is displayed prominently in a box format for visibility.

# First tenant (device code displayed clearly) npx @foritllc/microsoft-graph --login # Second tenant (adds to cache) npx @foritllc/microsoft-graph --login # See all accounts npx @foritllc/microsoft-graph --list-accounts

Multi-Account Requirement

When multiple accounts exist, you must specify which account to use:

{ "endpoint": "/me", "accountId": "abc123..." }

Without accountId, requests will error showing available accounts. Use list-accounts tool to see account IDs.

The `graph-request` Tool

Parameters

Parameter	Type	Description
`endpoint`	string	Graph API path (e.g., `/me`, `/users/{id}`, `/me/messages`)
`method`	enum	`GET`, `POST`, `PUT`, `PATCH`, `DELETE` (default: GET)
`body`	object	Request body for POST/PUT/PATCH
`queryParams`	object	OData params (`$select`, `$filter`, `$top`, `$orderby`, etc.)
`headers`	object	Additional HTTP headers
`apiVersion`	enum	`v1.0` (default) or `beta`
`accountId`	string	Target specific tenant without switching

Examples

Get current user:

{ "endpoint": "/me" }

List unread emails:

{ "endpoint": "/me/messages", "queryParams": { "$filter": "isRead eq false", "$select": "subject,from,receivedDateTime", "$top": "10", "$orderby": "receivedDateTime desc" } }

Create calendar event:

{ "endpoint": "/me/calendar/events", "method": "POST", "body": { "subject": "Team Sync", "start": { "dateTime": "2025-01-15T10:00:00", "timeZone": "UTC" }, "end": { "dateTime": "2025-01-15T11:00:00", "timeZone": "UTC" } } }

Use beta API:

{ "endpoint": "/me/insights/used", "apiVersion": "beta" }

Cross-tenant query:

{ "endpoint": "/me/drive/root/children", "accountId": "client-tenant-abc123" }

Use With PnP CLI

This MCP complements PnP CLI for Microsoft 365:

Use Case	Tool
Raw Graph API calls	ForIT Microsoft Graph
SharePoint, Teams, Power Platform	PnP CLI
Multi-tenant management	ForIT Microsoft Graph
Specialized admin commands	PnP CLI

Environment Variables

Variable	Description
`MS365_MCP_CLIENT_ID`	Azure AD app client ID (optional)
`MS365_MCP_CLIENT_SECRET`	Client secret for confidential apps
`MS365_MCP_TENANT_ID`	Azure AD tenant ID (default: `common`)

Credits

Fork of @softeria/ms-365-mcp-server, rebuilt with a different philosophy: less is more.

License

MIT - See LICENSE

Install Server

A

security – no known vulnerabilities

A

license - permissive license

A

quality - confirmed to work

How are these scores calculated?

Resources

GitHub Repository

Need Help?

Report Issue

Reddit Discussion

Related Servers

ForIT Microsoft Graph

ForIT Microsoft Graph

The Problem

The Solution

Why This Approach?

Multi-Tenant Without Switching

Installation

Quick Start

With Claude Desktop / MCP Client

Authentication (Device Code)

Multi-Account Requirement

The `graph-request` Tool

Parameters

Examples

Use With PnP CLI

Environment Variables

Credits

License

Resources

Tools

New MCP Servers

Latest Blog Posts

MCP directory API

ForIT Microsoft Graph

The Problem

The Solution

Why This Approach?

Multi-Tenant Without Switching

Installation

Quick Start

With Claude Desktop / MCP Client

Authentication (Device Code)

Login to Multiple Tenants

Multi-Account Requirement

The graph-request Tool

Parameters

Examples

Use With PnP CLI

Environment Variables

Credits

License

Resources

Tools

New MCP Servers

Latest Blog Posts

MCP directory API

The `graph-request` Tool