SharePoint Online MCP Server

This is a MCP server for Claude Desktop that allows you to interact with SharePoint Online using the SharePoint REST API. It is designed to be used with the Claude Desktop app, but could be used by other MCP clients as well.

Implementation

Component	Operation	Available
Users		✅
	List Site Users by Role	✅
	List Site Groups	✅
	Get Group Members	✅
	Add Group Member	✅
	Remove Group Member	✅
Sites		✅
	Get Site Details	✅
	Update Site Properties	✅
	Get Global Navigation Links	✅
	Get Quick Navigation Links	✅
	Add Navigation Link	✅
	Update Navigation Link	✅
	Delete Navigation Link	✅
	Get Subsites	✅
	Create Subsite	❌
	Delete Subsite	✅
Lists		✅
	Get All Lists	✅
	Create List	✅
	Update List	❌
	Get List Fields	✅
	Create List Field	✅
	Update List Field	✅
	Delete List Field	✅
	Set List Field formatting	❌
	Set List View formatting	❌
	Delete List	✅
List Views		✅
	Get List Views	✅
	Delete List View	✅
	Create List View	✅
	Update List View	✅
	Get View Fields	✅
	Add View Field	✅
	Remove View Field	✅
	Remove All View Fields	✅
	Move View Field	✅
List Items		✅
	Get All List Items	✅
	Create List Item	✅
	Update List Item	✅
	Delete List Item	✅
List Content Types		❌
	Get All List Content Types	❌
	Create List Content Type	❌
	Update List Content Type	❌
	Delete List Content Type	❌
Pages		❌
	Create Modern Page	❌
Documents		❌
	Create Document	❌
	Upload Document	❌
	Copy Document	❌
Taxonomy		❌
	Get Taxonomy Group	❌
	Create Taxonomy Label	❌
	Update Taxonomy Label	❌
	Delete Taxonomy Label	❌

Authentication Options

The server supports two authentication methods:

Client Secret Authentication - Traditional client ID and secret. It's the App-only authentication that is deprecated and will not work after April 2026.
Certificate Authentication - More modern method using Azure AD App Registration with certificate

Option 1: Client Secret Authentication (Will not work after April 2026)

This option requires the SharePoint administrator role.

Configuration steps

⚠️ You need to be a SharePoint tenant admin or a global admin to create a SharePoint app.

Download and install the SharePoint Online Management Shell from here.
Open PowerShell and run the following command to make sure the SharePoint-only apps are enabled:

Connect-SPOService -Url https://<your-tenant>-admin.sharepoint.com/
Set-SPOTenant -DisableCustomAppAuthentication $false

Open https://<your-tenant>.sharepoint.com/_layouts/15/appregnew.aspx
Click Generate to create a new client ID and secret.
Fill in the following fields:
- App Domain: www.example.com (or any domain you own)
- Redirect URL: http://example.com
Click Create to create the app.
Copy the Client ID and Client Secret values to a safe place. You will need them later.

Grant App Permissions

Open https://<your-tenant>.sharepoint.com/_layouts/15/appinv.aspx
Paste the Client ID value in the App ID field and click Lookup.
Paste the following XML in the App Permission Request XML field:

<AppPermissionRequests AllowAppOnlyPolicy="true">
   <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />
</AppPermissionRequests>

Click Create and then Trust It to grant the app permissions.

Option 2: Certificate Authentication

Certificate-based authentication provides better security than client secrets. It uses a certificate to prove the identity of the application instead of a shared secret.

⚠️ This option requires the Global administrator role to provide the necessary permissions to the app.

Clone the repo

git clone https://github.com/Zerg00s/server-sharepoint.git

Create Azure AD App with Certificate

Navigate to the cloned repo and use the provided PowerShell script to create the Azure AD app with certificate:

.\Create-SPAppCertificate.ps1 -AppName "SharePoint-Server-MCP" -CertName "SharePoint-Server-MCP-Cert" -CertPassword "YourSecureP@ssw0rd!"

This script will

Create a self-signed certificate in your certificate store
Register an Azure AD application
Add the certificate to the application
Configure the required SharePoint permissions
Generate configuration files with the necessary settings
Output the claude_desktop_config.json that is compatible with Claude Desktop

After running the script, you'll get an Admin Consent URL. Open it in a browser and sign in as a Global Admin to grant consent for the permissions.

Install Node.js

Install Node.js version: 22.14.0 or later

Install and Configure Claude Desktop

Download Claude Desktop and install it.
In Claude Desktop, go to File > Settings > Developer.
Click Edit Config
Open the claude_desktop_config.json config file in the editor. You can also use the claude_desktop_config.json file generated by the PowerShell script earlier.
Paste the following to the config and update the mcpServers section with your own values:

For Certificate Authentication

{
  "mcpServers": {
    "server-sharepoint": {
      "command": "npx",
      "args": [
        "-y",
        "server-sharepoint"
      ],
      "env": {
        "AZURE_APPLICATION_ID": "<your-app-id>",
        "AZURE_APPLICATION_CERTIFICATE_THUMBPRINT": "<your-certificate-thumbprint>",
        "AZURE_APPLICATION_CERTIFICATE_PASSWORD": "<your-certificate-password>",
        "M365_TENANT_ID": "<your-tenant-id>"
      }
    }
  }
} 

For Client Secret Authentication (not recommended)

{
  "mcpServers": {
    "server-sharepoint": {
      "command": "npx",
      "args": [
        "-y",
        "server-sharepoint"
      ],
      "env": {
        "SHAREPOINT_CLIENT_ID": "<your-client-id>",
        "SHAREPOINT_CLIENT_SECRET": "<your-client-secret>",
        "M365_TENANT_ID": "<your-tenant-id>"
      }
    }
  }
} 

💡Learn how to get the tenant ID from Entra ID

Save the config file and restart Claude Desktop. Make sure to quit the app completely via the tasks tray icon:

How to "talk" to the MCP Server

Open Claude Desktop and ask a question like Get me the list of lists from https://<your-tenant>.sharepoint.com/sites/Dashboard-Communication. Present the results in a table form. don't use code.

Sample result

Available Tools

Site Management

getSite - Get detailed information about a SharePoint site
updateSite - Update site properties including Title, Description, and Logo URL
getSubsites - Get all subsites from a site
deleteSubsite - Delete a subsite (requires confirmation)
getGlobalNavigationLinks - Get global (top) navigation links
getQuickNavigationLinks - Get quick (left) navigation links
addNavigationLink - Add a navigation link to global or quick navigation
updateNavigationLink - Update an existing navigation link
deleteNavigationLink - Delete a navigation link
getSiteUsers - Get users from a site with optional filtering by role (Owners, Members, Visitors)
getSiteGroups - Get all SharePoint groups for a site

List Management

getLists - Get all available lists on a SharePoint site
createList - Create a new list or document library with custom settings and optional custom URL
deleteList - Delete a list or document library (requires confirmation)
getListFields - Get detailed information about fields/columns in a list
createListField - Create a new field/column with a two-step process: first with a clean name for proper internal name generation, then updating to the desired display name with spaces
updateListField - Update a field including display name, choices, and other properties
deleteListField - Delete a field/column from a list (requires confirmation)
getListViews - Get all views for a list with optional field details
createListView - Create a custom view with selected fields and filters
updateListView - Update an existing view's settings and fields
deleteListView - Delete a view from a list (cannot delete default views)

List View Field Management

getViewFields - Get all fields in a specific list view
addViewField - Add a field to a list view
removeViewField - Remove a field from a list view
removeAllViewFields - Remove all fields from a list view
moveViewFieldTo - Move a field to a specific position in a list view

List Item Management

getListItems - Get all items from a specific list
createListItem - Create a new item with custom field values
updateListItem - Update an existing item's field values
deleteListItem - Remove an item from a list

User Management

getGroupMembers - Get all members of a specific SharePoint group
addGroupMember - Add a user to a SharePoint group
removeGroupMember - Remove a user from a SharePoint group

For Contributors

Build a new npm package

npm run build
npm publish
npx clear-npx-cache
npm cache clean --force

Run MCP Inspector locally

npx @modelcontextprotocol/inspector node build/src/index.js

MCP Server Context 7 Documentation for LLMs

[https://context7.com/modelcontextprotocol/servers](MCP Server Context 7 Documentation for LLMs)

Local Development

Clone the repo
nvm use 22.14.0
npm install
Update MCP config in claude_desktop_config.json file. Sample:

For client secret authentication (Will not work after April 2026)

{
"mcpServers": {
  "sharepoint": {
      "command": "node",
      "args": [
        "C:\\trash\\server-sharepoint\\build\\index.js"
      ],
      "env": {
        "SHAREPOINT_CLIENT_ID": "aaa2ce0f-7c97-4e51-acd9-4ac99e6831d0",
        "SHAREPOINT_CLIENT_SECRET": "bbb0OFF+aWkua2NJRERUMGduMmhsWDhGUTVPUHJZLXd5dldSemNPUw==",
        "M365_TENANT_ID": "22bcd981-eaa6-475f-aac3-3afca0c35261"
      }
    }
  }
}

For certificate authentication (Recommended)

{
"mcpServers": {
  "sharepoint": {
      "command": "node",
      "args": [
        "C:\\trash\\server-sharepoint\\build\\index.js"
      ],
      "env": {
        "AZURE_APPLICATION_ID": "5bc793c7-3eb0-4b86-88bf-b464b2459c4c",
        "AZURE_APPLICATION_CERTIFICATE_THUMBPRINT": "3D38D1D8AC3228CAD35E527D1105101B0B90CE86",
        "AZURE_APPLICATION_CERTIFICATE_PASSWORD": "TemporaryP@ssw0rd",
        "M365_TENANT_ID": "11bcd981-eaa6-475f-aac3-3afca0c35261"
      }
    }
  }
}

Make changes to the code
Build the code npm run build
Test with MCP Inspector: npx @modelcontextprotocol/inspector node build/src/index.js -y

You must be authenticated.

security – no known vulnerabilities

license - not found

quality - confirmed to work

remote-capable server

The server can be hosted and run remotely because it primarily relies on remote services or has no dependency on the local environment.

Tools

Allows Claude to interact with SharePoint Online using the REST API, enabling users to query site information, lists, and list items through natural language commands.

Related MCP Servers

Veri5ight MCP Server
5ajaki
A
security
A
license
A
quality
Enables Claude to interact with Ethereum nodes, allowing users to check ENS token balances, view smart contract code, and decode transactions through natural language.
Last updated -
5
1
JavaScript
MIT License
Webflow MCP Server
kapilduraphe
A
security
A
license
A
quality
Enables Claude to interact with Webflow's APIs for managing sites, retrieving information, and executing tasks using natural language.
Last updated -
2
4
TypeScript
MIT License
Claude Desktop API MCP
mlobo2012
A
security
F
license
A
quality
A server that enables Claude Desktop users to access the Claude API directly, allowing them to bypass Professional Plan limitations and use advanced features like custom system prompts and conversation management.
Last updated -
1
5
Python
Webflow MCP Server
TimKJones
-
security
A
license
-
quality
Enables Claude to interact with Webflow's APIs, allowing access to site information, collections, and other Webflow resources.
Last updated -
TypeScript
MIT License

View all related MCP servers