Check Microsoft 365 auth state; start device-code sign-in if needed.

When sign-in is required, returns a verification URL and a user code — relay both to the user, then call this tool again to confirm completion.

Search or list mail messages. Read-only.

Args: query: Free-text search (Graph $search / KQL, e.g. 'invoice', 'from:alice subject:report'). Empty = list newest first. folder: Well-known folder (inbox, archive, drafts, sentitems, deleteditems, junkemail, outbox) or a custom folder display name. top: Max messages to return (1-100). since: Only messages received after this point. ISO 8601 ('2026-07-01T00:00:00Z') or relative ('24h', '7d').

Fetch one message: full plain-text body plus metadata. Read-only.

Args: message_id: Graph message id (from search_messages or daily_briefing). include_attachments: Also download attachments and extract text locally from PDF / DOCX / XLSX (other types are listed only).

Classified digest of recent inbox mail. Read-only, no LLM calls.

Groups messages from the last N hours into: urgent, action_needed, fyi, newsletter — using deterministic keyword heuristics (configurable via OUTLOOK_MCP_* env vars or a JSON rules file). Returns Markdown.

List all inbox message rules (name, state, conditions, actions). Read-only.

Idempotently provision one inbox rule. THE ONLY WRITE TOOL.

Creates (or converges) a rule: messages whose sender matches from_contains are moved to folder move_to_folder (created if missing). Safe to run repeatedly — an already-correct rule results in zero write calls; never duplicates rules or folders.

Disabled unless the server runs with OUTLOOK_MCP_ENABLE_WRITE=1 (which also requires re-consenting to write scopes on next sign-in).

Args: name: Rule display name — the idempotency key. from_contains: Substring matched against the sender address/name. move_to_folder: Target folder display name.