Microsoft 365 Core MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PORT | No | Port for HTTP server if needed | 3000 |
| USE_HTTP | No | Set to 'true' to use HTTP transport instead of stdio | false |
| LOG_LEVEL | No | Logging level (debug, info, warn, error) | info |
| STATELESS | No | Set to 'true' to use stateless HTTP mode (no session management) | false |
| MS_CLIENT_ID | Yes | Your Microsoft Azure client ID (application ID) | |
| MS_TENANT_ID | Yes | Your Microsoft Azure tenant ID | |
| MS_CLIENT_SECRET | Yes | Your Microsoft Azure client secret |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| prompts | {
"listChanged": true
} |
| resources | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| manage_distribution_listsB | Manage Exchange distribution lists including creation, updates, member management, and settings configuration. |
| manage_security_groupsB | Manage Azure AD security groups for access control, including group creation, membership, and security settings. |
| manage_m365_groupsB | Manage Microsoft 365 groups for team collaboration with shared resources like mailbox, calendar, and files. |
| manage_exchange_settingsB | Manage Exchange Online settings including mailbox configuration, transport rules, and organization policies. |
| manage_user_settingsB | Manage user account settings including profile information, mailbox settings, licenses, and authentication methods. |
| manage_offboardingB | Automate user offboarding processes including account disablement, license removal, data backup, and access revocation. |
| manage_sharepoint_sitesB | Manage SharePoint sites including creation, configuration, permissions, and site collection administration. |
| manage_sharepoint_listsB | Manage SharePoint lists and libraries including schema definition, items, views, and permissions. |
| manage_azure_ad_rolesB | Manage Azure AD administrative roles including role assignments, custom roles, and privilege escalation controls. |
| manage_azure_ad_appsB | Manage Azure AD application registrations including app permissions, credentials, and OAuth configurations. |
| manage_azure_ad_devicesB | Manage devices registered in Azure AD including device compliance, BitLocker keys, and device actions. |
| manage_service_principalsB | Manage service principals for application access including permissions, credentials, and enterprise applications. |
| call_microsoft_apiA | Make direct calls to any Microsoft Graph or Azure Resource Management API endpoint with full control over HTTP methods and parameters. |
| search_audit_logB | Search and analyze Azure AD unified audit logs for security events, user activities, and compliance monitoring. |
| manage_alertsB | Manage security alerts from Microsoft Defender and other security products including investigation and remediation. |
| manage_dlp_policiesB | Manage Data Loss Prevention policies to protect sensitive data across Exchange, SharePoint, OneDrive, and Teams. |
| manage_dlp_incidentsB | Investigate and manage DLP policy violations and incidents including user notifications and remediation actions. |
| manage_intune_macos_devicesB | Manage macOS devices in Intune including enrollment, compliance policies, device actions, and inventory management. |
| manage_intune_macos_policiesB | Manage macOS configuration profiles and compliance policies for device security and management settings. |
| manage_intune_macos_appsB | Manage macOS application deployment including app assignments, updates, and installation requirements. |
| manage_intune_macos_complianceB | Assess macOS device compliance status and generate reports on policy adherence and security posture. |
| manage_intune_windows_devicesB | Manage Windows devices in Intune including enrollment, autopilot deployment, device actions, and health monitoring. |
| manage_intune_windows_policiesB | Manage Windows configuration profiles and compliance policies including security baselines and update rings. |
| manage_intune_windows_appsB | Manage Windows application deployment including Win32 apps, Microsoft Store apps, and Office 365 assignments. |
| manage_intune_windows_complianceB | Assess Windows device compliance status including BitLocker encryption, antivirus status, and security configurations. |
| manage_compliance_frameworksB | Manage compliance frameworks and standards including HIPAA, GDPR, SOX, PCI-DSS, ISO 27001, and NIST configurations. |
| manage_compliance_assessmentsB | Conduct compliance assessments and generate detailed reports on regulatory adherence and security controls. |
| manage_compliance_monitoringB | Monitor ongoing compliance status with real-time alerts for policy violations and regulatory changes. |
| manage_evidence_collectionB | Collect and preserve compliance evidence including audit logs, configuration snapshots, and attestation records. |
| manage_gap_analysisB | Perform gap analysis to identify compliance deficiencies and generate remediation recommendations. |
| generate_audit_reportsB | Generate comprehensive audit reports for compliance frameworks with evidence documentation and findings. |
| manage_cis_complianceB | Manage CIS (Center for Internet Security) benchmark compliance including assessment and remediation tracking. |
| manage_retention_policiesB | Manage retention policies for content across Exchange, SharePoint, OneDrive, and Teams with lifecycle rules. |
| manage_sensitivity_labelsB | Manage sensitivity labels for information protection including encryption, content marking, and classification policies. |
| manage_information_protection_policiesB | Manage Azure Information Protection policies for data classification, encryption, and rights management. |
| manage_conditional_access_policiesB | Manage Azure AD conditional access policies for zero-trust security including MFA, device compliance, and location-based controls. |
| backup_policiesA | Export Microsoft 365 policies to JSON format for backup, disaster recovery, and migration. Supports Conditional Access, Named Locations, Authentication Strengths, Intune policies, and more. |
| manage_named_locationsA | Manage Conditional Access named locations including IP address ranges and country/region locations for location-based access control. |
| manage_authentication_strengthsB | View and manage authentication strength policies that define which authentication methods satisfy MFA requirements in Conditional Access. |
| manage_cross_tenant_accessB | Manage cross-tenant access settings for B2B collaboration, including inbound/outbound trust settings and partner configurations. |
| manage_identity_protectionA | Monitor and manage Azure AD Identity Protection including risk detections, risky users, and risk remediation actions. |
| manage_defender_policiesB | Manage Microsoft Defender for Office 365 policies including Safe Attachments, Safe Links, anti-phishing, and anti-malware. |
| manage_teams_policiesB | Manage Microsoft Teams policies for messaging, meetings, calling, apps, and live events across the organization. |
| manage_exchange_policiesB | Manage Exchange Online policies including mail flow rules, mobile device access, and organization-wide settings. |
| manage_sharepoint_governance_policiesB | Manage SharePoint governance policies including sharing controls, access restrictions, and site lifecycle management. |
| manage_security_alert_policiesC | Manage security alert policies for monitoring threats, suspicious activities, and compliance violations across Microsoft 365. |
| generate_powerpoint_presentationB | Create professional PowerPoint presentations with custom slides, charts, tables, and themes from Microsoft 365 data. |
| generate_word_documentB | Create professional Word documents with formatted sections, tables, charts, and table of contents from analysis data. |
| generate_html_reportB | Create interactive HTML reports and dashboards with responsive design, charts, and filtering capabilities. |
| generate_professional_reportB | Generate comprehensive professional reports in multiple formats (PowerPoint, Word, HTML, PDF) from Microsoft 365 data. |
| oauth_authorizeB | Manage OAuth 2.0 authorization for user-delegated access to OneDrive and SharePoint files with secure token handling. |
| execute_graph_batchB | Execute multiple Microsoft Graph API requests in a single batch operation for improved performance and efficiency. |
| execute_delta_queryA | Track incremental changes to Microsoft Graph resources using delta queries for efficient synchronization. |
| manage_graph_subscriptionsB | Manage webhook subscriptions for real-time change notifications from Microsoft Graph resources. |
| execute_graph_searchB | Execute advanced search queries across Microsoft 365 content including emails, files, messages, and calendar events. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| security_assessment | Comprehensive security posture analysis with recommendations for Microsoft 365 environment |
| compliance_review | Framework-specific compliance gap analysis for SOC2, ISO27001, NIST, GDPR, HIPAA, or CIS |
| user_access_review | Individual or organization-wide access rights analysis and recommendations |
| device_compliance_analysis | Intune device management and compliance assessment with remediation guidance |
| collaboration_governance | Microsoft Teams and SharePoint governance analysis with policy recommendations |
| generate_client_report | Generate a comprehensive professional report for clients based on Microsoft 365 data analysis |
| policy_management_guide | Comprehensive guide for managing Microsoft 365 policies across security, compliance, and governance |
| intune_policy_wizard | Interactive wizard to guide creation of Intune policies with correct structure and settings |
| intune_policy_troubleshoot | Troubleshoot common Intune policy creation and deployment issues |
| policy_backup_strategy | Comprehensive guide for backing up and managing Microsoft 365 policy configurations for disaster recovery |
| conditional_access_design | Design and implement Conditional Access policies following zero-trust principles and Microsoft best practices |
| identity_protection_response | Guide for investigating and responding to identity-based security threats and risky users |
| b2b_collaboration_setup | Configure cross-tenant access settings and B2B collaboration policies for external user access |
| zero_trust_implementation | Comprehensive guide for implementing Zero Trust security architecture in Microsoft 365 |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| Security Alerts | |
| Security Incidents | |
| Conditional Access Policies | |
| Identity Protection | |
| Threat Assessment | |
| Compliance Policies | |
| Audit Log Summary | |
| Sensitivity Labels | |
| Device Overview | |
| Device Compliance Status | |
| Intune Policies | |
| Managed Applications | |
| User Directory | |
| License Assignment | |
| Privileged Users | |
| All Groups | |
| Microsoft Teams | |
| SharePoint Sites | |
| SharePoint Permissions | |
| Exchange Mailboxes | |
| Exchange Transport Rules | |
| Teams Activity | |
| OneDrive Usage | |
| Application Registrations | |
| Service Principals | |
| Application Consent | |
| Access Reviews | |
| Entitlement Management | |
| Organization Information | |
| Verified Domains | |
| Subscriptions | |
| PowerPoint Presentations | |
| Word Documents | |
| Generated Reports | |
| Document Templates | |
| Conditional Access Policies | |
| Retention Policies | |
| Information Protection Policies | |
| Defender Policies | |
| Teams Policies | |
| Exchange Policies | |
| SharePoint Governance Policies | |
| Security Alert Policies | |
| Policy Overview |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/roycedamien/m365-core-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server