Exchange MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PORT | No | Port for HTTP transport. | 3000 |
| AUTH_METHOD | No | Authentication method: basic, oauth, or certificate. | basic |
| MCP_TRANSPORT | No | Transport protocol: stdio or http. | stdio |
| CERT_PASSPHRASE | No | Passphrase for the certificate used in certificate-based authentication. | |
| EXCHANGE_SERVER | No | FQDN of the Exchange server; automatically sets both the endpoint and PowerShell URI. | |
| OAUTH_CLIENT_ID | No | Client ID for OAuth 2.0 authentication. | |
| EXCHANGE_ENDPOINT | No | Base URL (scheme+host) of the Exchange server. Example: https://mail.contoso.com | https://mail.contoso.local |
| EXCHANGE_INSECURE | No | Set to 'true' to allow self-signed certificates (for lab environments). | false |
| EXCHANGE_PASSWORD | No | Password for basic authentication. | |
| ENABLE_ADMIN_TOOLS | No | Whether admin tools are enabled (true/false). | true |
| OAUTH_CLIENT_SECRET | No | Client secret for OAuth 2.0 authentication. | |
| ENABLE_MAILBOX_TOOLS | No | Whether mailbox tools are enabled (true/false). | false |
| EXCHANGE_POWERSHELL_URL | No | Full PowerShell URI. Must use https://<fqdn>/PowerShell (capital P/S). | https://mail.contoso.local/PowerShell |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| prompts | {
"listChanged": true
} |
| resources | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| exchange_list_mailboxesC | List mailboxes (admin) — supports filter and RecipientTypeDetails |
| exchange_get_mailboxC | Get mailbox details by identity |
| exchange_get_mailbox_statisticsA | Get mailbox statistics (size, item count, last logon, DB) — troubleshooting storage/quota |
| exchange_get_mailbox_permissionsC | Get mailbox permissions (FullAccess, SendAs, etc.) |
| exchange_create_mailboxC | Create mailbox (New-Mailbox) — user/shared/room |
| exchange_set_mailboxC | Set mailbox properties (prohibitSendQuota, retention, etc.) |
| exchange_remove_mailboxC | Remove mailbox (disable/delete) |
| exchange_list_distribution_groupsC | List distribution groups |
| exchange_get_distribution_group_memberC | Get distribution group members |
| exchange_list_dynamic_distribution_groupsB | List dynamic distribution groups |
| exchange_list_mail_contactsC | List mail contacts |
| exchange_list_mail_usersD | List mail users |
| exchange_get_cas_mailboxC | Get Client Access mailbox settings (ActiveSync, OWA, MAPI) |
| exchange_get_transport_rulesA | Get transport (mail flow) rules |
| exchange_list_send_connectorsB | List Send connectors |
| exchange_list_receive_connectorsA | List Receive connectors (optionally per server) |
| exchange_list_accepted_domainsB | List accepted domains |
| exchange_list_remote_domainsB | List remote domains |
| exchange_get_queueB | Get transport queues (Get-Queue) — key for troubleshooting mail flow |
| exchange_get_queue_digestB | Get queue digest across DAG (Get-QueueDigest) |
| exchange_retry_queueC | Retry a queue (troubleshooting) |
| exchange_suspend_queueC | Suspend a queue |
| exchange_get_message_tracking_logC | Search message tracking logs (troubleshooting delivery) |
| exchange_list_serversA | List Exchange servers (Get-ExchangeServer) |
| exchange_get_serverC | Get Exchange server details |
| exchange_list_mailbox_databasesC | List mailbox databases |
| exchange_get_mailbox_databaseC | Get mailbox database details |
| exchange_get_database_copy_statusC | Get database copy status (DAG health) |
| exchange_get_dagC | Get Database Availability Groups (DAGs) |
| exchange_get_exchange_certificateC | Get Exchange certificates (expiry monitoring) |
| exchange_get_virtual_directoryB | Get virtual directories (OWA/ECP/EWS/ActiveSync/MAPI) |
| exchange_get_transport_serviceC | Get Transport service config |
| exchange_get_server_healthC | Get server health (Get-ServerHealth) — Managed Availability health sets |
| exchange_get_health_reportB | Get health report (Get-HealthReport) — rollup per server/DAG |
| exchange_test_service_healthC | Test service health (Test-ServiceHealth) — checks required services |
| exchange_test_replication_healthC | Test replication health (DAG — Test-ReplicationHealth) |
| exchange_get_server_component_stateB | Get server component states (ServerWideOffline, etc.) |
| exchange_get_monitoring_itemB | Get monitoring items (probes/monitors/responders) for a health set |
| exchange_test_mailflowD | Test mailflow (Test-Mailflow) |
| exchange_get_role_groupsA | List role groups (RBAC — Permissions) |
| exchange_search_admin_audit_logC | Search admin audit log (compliance) |
| exchange_test_connectionA | Diagnose Exchange connectivity — tests endpoint reachability, PowerShell virtual directory, and auth. Use when all tools return 404. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| triage-inbox | Triage inbox: summarize unread messages and suggest actions |
| schedule-meeting | Schedule a meeting with attendees |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| exchange-folders | List mailbox folders (inbox, calendar, contacts, etc.) |
TDQS
Scored across 42 tools
Most tools map to a distinct Exchange resource and action, such as mailboxes, connectors, queues, or health sets. A few clusters (mailbox statistics vs. permissions vs. CAS settings, and health report vs. server health vs. monitoring items) could be confused, but the descriptions provide enough clarity.
All tools share the exchange_ prefix and mostly follow a verb_noun pattern with list/get/create/set/remove/test/search. Minor inconsistencies exist, such as get_distribution_group_member using a singular noun and get_queue/get_queue_digest using get for collections rather than list.
42 tools is a very large surface for one MCP server and exceeds the 25+ threshold. While the breadth reflects Exchange's many admin areas, the count creates significant selection overhead and increases the chance of agent misrouting.
Mailbox lifecycle is well covered, and health/transport diagnostics are strong. However, distribution groups, mail contacts/users, connectors, transport rules, and accepted/remote domains are mostly read-only, leaving notable management gaps for a general Exchange administration tool.