Outlook MCP Server (win32com)

An MCP server that controls the Microsoft Outlook desktop app through COM automation (win32com). It does not use Microsoft Graph — there is no Azure app registration, no OAuth, no API keys. It operates on whatever account(s) your local Outlook client is already signed into, which makes it ideal for corporate environments where Graph API access is locked down.

Requirements

• Windows (COM automation is Windows-only)

• Classic Outlook desktop installed and configured with an account. The "new Outlook" (the web-based rewrite) does not expose the COM object model and will not work — switch the toggle back to classic Outlook.

• Python 3.10+

Related MCP server: MCP Outlook

Installation

git clone <this-repo>
cd outlook_mcp
pip install -e .

This installs mcp and pywin32 and registers the outlook-mcp command.

Configure Claude Desktop / Claude Code

Claude Desktop (%APPDATA%\Claude\claude_desktop_config.json):

{
  "mcpServers": {
    "outlook": {
      "command": "outlook-mcp"
    }
  }
}

Claude Code:

claude mcp add outlook -- outlook-mcp

If Outlook is not running, the first tool call starts it automatically.

Tools

Emails are addressed by their Outlook EntryID, which list_emails and search_emails return — pass it to get_email, reply_to_email, etc. Folders accept well-known names (Inbox, Sent Items, Drafts, ...) or slash paths like Inbox/Receipts or you@company.com/Inbox to target a specific account.

Example prompts

• "Show my unread emails"

• "Search my inbox for emails from Alice about the Q3 budget"

• "Reply to that email saying I'll review it by Friday"

• "Save the attachments from that email to C:\Users\me\Downloads"

• "What's on my calendar this week?"

• "Set up a 30-minute meeting with bob@example.com tomorrow at 2pm"

Notes & troubleshooting

• Security prompts: depending on your organization's policy, Outlook may show an "Allow access?" dialog when a program reads addresses or sends mail programmatically. Your admin controls this via Group Policy ("Programmatic Access" settings in Trust Center).

• "New Outlook" toggle: if tool calls fail with "class not registered" or Outlook opens but nothing happens, you are likely on new Outlook. Switch back to classic Outlook.

• Bitness/permissions: run the MCP server as the same user (and not elevated differently) as Outlook, or COM will refuse to connect to the running instance.