List/search messages in the signed-in user's mailbox. Supports full-text KQL search (sender, recipient, cc, subject, keyword, attachment, read/unread, importance) and time ranges.

Get a single message including its full body.

List top-level mail folders of the signed-in user's mailbox.

List child folders of a mail folder.

List/search messages inside a specific mail folder.

List attachments of a message (metadata only: name, contentType, size).

Download an attachment and return its content. DOCX/XLSX/PPTX/PDF/TXT/CSV are converted to text; other binaries (images) come back as base64.

List mail folders of a shared mailbox the user has access to.

List/search messages of a shared mailbox the signed-in user has access to.

List/search messages inside a folder of a shared mailbox.

Get a single shared-mailbox message including its full body.

Download an attachment from a shared-mailbox message (text extraction like get-mail-attachment-content).

Create a DRAFT email in the signed-in user's Drafts folder. Does NOT send anything - use send-draft-email (with explicit user approval) to send it.

SEND a previously created draft. WRITE operation - requires confirm=true and explicit user approval.

Compose and SEND an email in one step as the signed-in user. WRITE operation - requires confirm=true and explicit user approval. Prefer create-draft-email + user review for report emails.

Reply to a message as the signed-in user. Requires confirm=true.

Reply-all to a message as the signed-in user. Requires confirm=true.

Forward a message as the signed-in user. Requires confirm=true.

Create a DRAFT in a shared mailbox. Does NOT send.

Compose and SEND an email from a shared mailbox. Requires confirm=true and explicit user approval.

Reply to a shared-mailbox message. Requires confirm=true.

Reply-all to a shared-mailbox message. Requires confirm=true.

Forward a shared-mailbox message. Requires confirm=true.

List the signed-in user's calendars.

Get a single calendar by id.

PRIMARY meeting-lookup tool: list all calendar events (including recurring occurrences) within a time range. Requires timeRange or from/to. Returns organizer, participants, start/end, location, onlineMeeting join URL, recurrence.

List events of the default calendar (series masters + single events). For time-ranged queries prefer get-calendar-view which expands recurrences.

Get a single event with full body/description, attendees, online meeting info and recurrence.

List attachments of a calendar event (metadata).

Free/busy availability (getSchedule) of one or more colleagues' calendars for a time window. Returns availabilityView (0=free, 1=tentative, 2=busy, 3=out of office) and busy time slots - event details stay hidden unless their calendar is shared with the user.

Suggest meeting time slots that work for the signed-in user and the given attendees (findMeetingTimes), based on free/busy data and working hours.

CREATE a calendar event in the signed-in user's default calendar (optionally as a Teams online meeting; attendees get invitations). WRITE operation - requires confirm=true after explicit user approval.

UPDATE an existing calendar event (only the provided fields change; attendees are notified of changes). WRITE operation - requires confirm=true.

Respond to a meeting invitation (accept / decline / tentativelyAccept); the organizer is notified. WRITE operation - requires confirm=true.

List the signed-in user's Teams chats (1:1, group, meeting chats).

Get a single chat including its members.

List messages of a chat, newest first. Supports a time range (lastModifiedDateTime filter). Keyword filtering must be done client-side or via search-m365 with entityTypes=["chatMessage"].

Get a single chat message.

List the Microsoft Teams teams the signed-in user is a member of.

Get a team's properties.

List channels of a team.

Get a single channel of a team.

List messages of a team channel, newest first (Graph does not support server-side filtering here; use search-m365 for keyword search).

Get a single channel message.

List replies (thread) of a channel message.

List members of a team (name, email, roles).

SEND a message to a Teams chat (1:1 or group) as the signed-in user. WRITE operation - requires confirm=true after explicit user approval.

POST a new message to a team channel as the signed-in user. WRITE operation - requires confirm=true after explicit user approval.

REPLY to an existing channel message (thread) as the signed-in user. WRITE operation - requires confirm=true.

Resolve an onlineMeeting from a Teams join URL (calendar event -> onlineMeeting.joinUrl -> this tool). This is how a calendar event is connected to its transcripts/recordings/attendance.

Get an online meeting by its onlineMeeting id (subject, organizer, participants, join URL, start/end).

List transcripts available for an online meeting (metadata: id, created date).

Get the FULL TEXT of a meeting transcript in WebVTT format (speaker, timestamp, text preserved). Use for meeting summaries, decisions and commitments extraction.

List recordings of an online meeting (metadata + content URL; the recording itself stays in OneDrive/SharePoint).

List attendance reports of an online meeting.

List attendance records (who joined, when, for how long) of an attendance report.

List the signed-in user's OneNote notebooks.

Get a single OneNote notebook.

List sections of a OneNote notebook (newest-modified first; paginates past 100 sections automatically).

List all OneNote sections across the user's notebooks (newest-modified first; paginates past 100 automatically).

List section groups of a OneNote notebook (sections nested in groups are NOT returned by list-onenote-notebook-sections).

List sections inside a OneNote section group (newest-modified first; paginates past 100 automatically).

List pages of a OneNote section.

List OneNote pages across all personal notebooks, newest first (time filter on lastModifiedDateTime; filter e.g. "contains(title,'x')"). Full-text search is not supported by Graph v1.0 (error 20108). Accounts with many sections get Graph error 20266 here - then go notebook -> sections -> list-onenote-section-pages instead.

Get metadata of a OneNote page. Use get-onenote-page-content for the actual body.

Get the FULL HTML content of a OneNote page (the actual note body, not just metadata).

List OneNote notebooks hosted on a SharePoint site.

List sections of a SharePoint-hosted OneNote notebook (newest-modified first; paginates past 100 sections automatically).

List ALL sections of a SharePoint site's OneNote notebooks regardless of section-group nesting (newest-modified first; paginates past 100 automatically). Each item carries parentNotebook and parentSectionGroup. Best entry point for large notebooks.

List section groups of a SharePoint-hosted OneNote notebook.

List sections inside a section group of a SharePoint-hosted OneNote notebook (newest-modified first).

List pages of a section in a SharePoint-hosted OneNote notebook.

List/search OneNote pages of a SharePoint site's notebooks.

Get the FULL HTML content of a SharePoint-hosted OneNote page.

Search SharePoint sites the signed-in user can access, by keyword.

Get a SharePoint site by id (or 'hostname:/sites/path' form).

List document libraries (drives) of a SharePoint site.

Get a drive (document library) by id.

List files/folders in the root of a drive (document library).

List files/folders inside a folder of a drive.

Get file/folder metadata (includes @microsoft.graph.downloadUrl for files).

Search files by keyword within one drive (document library).

Download a file's content from SharePoint. DOCX/XLSX/PPTX/PDF/TXT/CSV are converted to text; other binaries come back as base64. Size-limited by MAX_DOWNLOAD_BYTES.

List SharePoint lists of a site.

Get a SharePoint list by id.

List items of a SharePoint list including their field values.

Get a single SharePoint list item including field values.

Get the signed-in user's OneDrive (drive id, quota, owner).

List files/folders in the root of the user's OneDrive.

List files/folders inside a OneDrive folder.

Get OneDrive file/folder metadata (includes @microsoft.graph.downloadUrl for files).

Get a short-lived direct download URL for a OneDrive file without fetching its content.

Search the user's OneDrive (and items shared with them) by keyword.

Download a OneDrive file's content. DOCX/XLSX/PPTX/PDF/TXT/CSV are converted to text; other binaries come back as base64. Size-limited by MAX_DOWNLOAD_BYTES.

Search Microsoft Loop components (.loop/.fluid files stored in SharePoint/OneDrive) by keyword. Note: Loop workspaces in SharePoint Embedded containers are not exposed via delegated Graph and may be missing from results.

Download a Loop component's raw content by driveId + itemId (from search-loop-components hit resource.parentReference). Content is Fluid/JSON-like text.

Cross-source Microsoft 365 search (Mail, Calendar, Teams messages, SharePoint, OneDrive). KQL supported. Restriction from Graph: driveItem/drive/site/list/listItem can be combined in one call; message, event and chatMessage must each be searched in a SEPARATE call. Use the returned pointers with dedicated tools to fetch full content.

Search people relevant to the signed-in user (colleagues, frequent contacts). Good first step for fuzzy name resolution.

List ALL users of the organization including disabled accounts (accountEnabled=false) and guests. Paged: for directories larger than maxItems follow nextCursor. Supports $filter (e.g. "accountEnabled eq false") and advanced $search.

Get a user by object id or userPrincipalName (email).

When was a user DISABLED (or re-enabled), by whom, with what result? Reads the Entra directory audit log (category UserManagement) for the given user and returns only the events that changed accountEnabled: 'Disable account' / 'Enable account' activities and 'Update user' events whose modifiedProperties contain AccountEnabled (true -> false = disabled). Other user updates are excluded. Newest first. RETENTION: Entra keeps directory audits 30 days (P1/P2; 7 days Free) - if the change is older the result is explicitly 'not available in audit log'; no date is estimated. Read-only; needs delegated AuditLog.Read.All + Directory.Read.All with admin consent and a reader role (Reports Reader / Security Reader / Global Reader).

Entra directory audit log (who changed what, when): user/group/app changes, password resets, role assignments. Time filter on activityDateTime; $filter e.g. "category eq 'UserManagement' and activityDisplayName eq 'Update user'" or "targetResources/any(t:t/id eq '')". Retention: 30 days (P1/P2). Read-only; needs AuditLog.Read.All + Directory.Read.All (admin consent).

Resolve a person by (partial) display name or email, e.g. "Móré Attila" -> Entra user with email + id. Use search-people first for fuzzy matches among the user's contacts.