Microsoft 365 Core MCP Server

Instructions

Implementation Reference

• src/handlers/intune-windows-handler.ts:552-658 (handler)

  The core handler function implementing manage_intune_windows_apps tool. Handles Windows app operations in Intune including list, get, deploy, update, remove, and sync status via Microsoft Graph API endpoints under /deviceAppManagement/mobileApps.

  export async function handleIntuneWindowsApps(
    graphClient: Client,
    args: IntuneWindowsAppArgs
  ): Promise<{ content: { type: string; text: string }[] }> {
    let apiPath = '';
    let result: any;
  
    switch (args.action) {
      case 'list':
        apiPath = '/deviceAppManagement/mobileApps';
        let filter = '';
        
        if (args.appType) {
          const odataType = 
            args.appType === 'win32LobApp' ? '#microsoft.graph.win32LobApp' :
            args.appType === 'microsoftStoreForBusinessApp' ? '#microsoft.graph.microsoftStoreForBusinessApp' :
            args.appType === 'officeSuiteApp' ? '#microsoft.graph.officeSuiteApp' :
            args.appType === 'webApp' ? '#microsoft.graph.webApp' :
            args.appType === 'microsoftEdgeApp' ? '#microsoft.graph.microsoftEdgeApp' :
            '';
          
          if (odataType) {
            filter = `@odata.type eq '${odataType}'`;
          }
        }
  
        if (filter) {
          apiPath += `?$filter=${filter}`;
        }
  
        result = await graphClient.api(apiPath).get();
        break;
  
      case 'get':
        if (!args.appId) {
          throw new McpError(ErrorCode.InvalidParams, 'appId is required for get action');
        }
        apiPath = `/deviceAppManagement/mobileApps/${args.appId}`;
        result = await graphClient.api(apiPath).get();
        break;
  
      case 'deploy':
        if (!args.appId || !args.assignmentGroups) {
          throw new McpError(ErrorCode.InvalidParams, 'appId and assignmentGroups are required for deploy action');
        }      const assignments = args.assignmentGroups.map(groupId => ({
          target: {
            '@odata.type': '#microsoft.graph.groupAssignmentTarget',
            groupId: groupId
          },
          intent: args.assignment?.installIntent || 'available',
          settings: {
            '@odata.type': '#microsoft.graph.win32LobAppAssignmentSettings',
            notifications: 'showAll',
            restartSettings: null,
            installTimeSettings: null
          }
        }));
  
        apiPath = `/deviceAppManagement/mobileApps/${args.appId}/assign`;
        result = await graphClient.api(apiPath).post({
          mobileAppAssignments: assignments
        });
        break;
  
      case 'update':
        if (!args.appId) {
          throw new McpError(ErrorCode.InvalidParams, 'appId is required for update action');
        }
  
        const updatePayload: any = {};
        if (args.name) updatePayload.displayName = args.name;
        if (args.version) updatePayload.displayVersion = args.version;
  
        apiPath = `/deviceAppManagement/mobileApps/${args.appId}`;
        result = await graphClient.api(apiPath).patch(updatePayload);
        break;
  
      case 'remove':
        if (!args.appId) {
          throw new McpError(ErrorCode.InvalidParams, 'appId is required for remove action');
        }
        apiPath = `/deviceAppManagement/mobileApps/${args.appId}`;
        result = await graphClient.api(apiPath).delete();      break;
  
      case 'sync_status':
        if (!args.appId) {
          throw new McpError(ErrorCode.InvalidParams, 'appId is required for sync_status action');
        }
        
        // Get app installation status across devices
        apiPath = `/deviceAppManagement/mobileApps/${args.appId}/deviceStatuses`;
        result = await graphClient.api(apiPath).get();
        break;
  
      default:
        throw new McpError(ErrorCode.InvalidParams, `Unknown action: ${args.action}`);
    }
  
    return {
      content: [
        {
          type: 'text',
          text: `Windows App Management Result:\n${JSON.stringify(result, null, 2)}`
        }
      ]
    };
  }

• src/tool-metadata.ts:159-162 (schema)

  Tool metadata definition including description, title, and annotations (readOnlyHint, destructiveHint, etc.) for the manage_intune_windows_apps tool.

  manage_intune_windows_apps: {
    description: "Manage Windows application deployment including Win32 apps, Microsoft Store apps, and Office 365 assignments.",
    title: "Intune Windows App Manager",
    annotations: { title: "Intune Windows App Manager", readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true }

• src/types/intune-types.ts:814-837 (schema)

  TypeScript interface defining input parameters (IntuneWindowsAppArgs) for the handler function.

  export interface IntuneWindowsAppArgs {
    action: 'list' | 'get' | 'deploy' | 'update' | 'remove' | 'sync_status';
    appId?: string;
    appType?: 'win32LobApp' | 'microsoftStoreForBusinessApp' | 'webApp' | 'officeSuiteApp' | 'microsoftEdgeApp';
    name?: string;
    version?: string;
    assignmentGroups?: string[];
    assignment?: {
      groupIds: string[];
      installIntent: 'available' | 'required' | 'uninstall' | 'availableWithoutEnrollment';
      deliveryOptimizationPriority?: 'notConfigured' | 'foreground';
    };
    appInfo?: {
      displayName: string;
      description?: string;
      publisher: string;
      fileName?: string;
      setupFilePath?: string;
      installCommandLine?: string;
      uninstallCommandLine?: string;
      minimumSupportedOperatingSystem?: string;
      packageFilePath?: string;
    };
  }

• src/tool-definitions.ts:358-381 (schema)

  Zod schema (intuneWindowsAppSchema) for input validation and MCP tool discovery of manage_intune_windows_apps.

  export const intuneWindowsAppSchema = z.object({
    action: z.enum(['list', 'get', 'deploy', 'update', 'remove', 'sync_status']).describe('Intune Windows app management action'),
    appId: z.string().optional().describe('App ID for app-specific operations'),
    appType: z.enum(['win32LobApp', 'microsoftStoreForBusinessApp', 'webApp', 'officeSuiteApp', 'microsoftEdgeApp']).optional().describe('Windows app type'),
    name: z.string().optional().describe('Application name'),
    version: z.string().optional().describe('Application version'),
    assignmentGroups: z.array(z.string()).optional().describe('Target groups for app deployment'),
    assignment: z.object({
      groupIds: z.array(z.string()).describe('Target group IDs'),
      installIntent: z.enum(['available', 'required', 'uninstall', 'availableWithoutEnrollment']).describe('Installation intent'),
      deliveryOptimizationPriority: z.enum(['notConfigured', 'foreground']).optional().describe('Delivery optimization priority'),
    }).optional().describe('App assignment configuration'),
    appInfo: z.object({
      displayName: z.string().describe('Application display name'),
      description: z.string().optional().describe('Application description'),
      publisher: z.string().describe('Application publisher'),
      fileName: z.string().optional().describe('Installation file name'),
      setupFilePath: z.string().optional().describe('Setup file path'),
      installCommandLine: z.string().optional().describe('Install command line'),
      uninstallCommandLine: z.string().optional().describe('Uninstall command line'),
      minimumSupportedOperatingSystem: z.string().optional().describe('Minimum OS version'),
      packageFilePath: z.string().optional().describe('Package file path'),
    }).optional().describe('Application information'),
  });

• src/prompts.ts:718-721 (helper)

  Example usage of manage_intune_windows_apps tool in device compliance analysis prompt.

  manage_intune_windows_apps {
    action: "list"
  }
  \`\`\`