Search / io.github.chrischall/office-outlook-mcp
protogridL0· runs locallyOutlook / Microsoft 365 for Claude — triage mail, reply, answer invites and book meetings, confirmed
v0.7.0 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"office-outlook-mcp": {
"command": "npx",
"args": [
"-y",
"@chrischall/[email protected]"
],
"env": {
"OUTLOOK_ACCESS_TOKEN": "${OUTLOOK_ACCESS_TOKEN}",
"MCP_CONFIRM_SECRET": "${MCP_CONFIRM_SECRET}"
}
}
}
}claude mcp add office-outlook-mcp -e "OUTLOOK_ACCESS_TOKEN=${OUTLOOK_ACCESS_TOKEN}" -e "MCP_CONFIRM_SECRET=${MCP_CONFIRM_SECRET}" -- npx -y @chrischall/[email protected][mcp_servers.office-outlook-mcp]
command = "npx"
args = ["-y", "@chrischall/[email protected]"]
env = { "OUTLOOK_ACCESS_TOKEN" = "${OUTLOOK_ACCESS_TOKEN}", "MCP_CONFIRM_SECRET" = "${MCP_CONFIRM_SECRET}" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"office-outlook-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@chrischall/[email protected]"
],
"enabled": true,
"environment": {
"OUTLOOK_ACCESS_TOKEN": "{env:OUTLOOK_ACCESS_TOKEN}",
"MCP_CONFIRM_SECRET": "{env:MCP_CONFIRM_SECRET}"
}
}
}
}{
"mcpServers": {
"office-outlook-mcp": {
"command": "npx",
"args": [
"-y",
"@chrischall/[email protected]"
],
"env": {
"OUTLOOK_ACCESS_TOKEN": "${OUTLOOK_ACCESS_TOKEN}",
"MCP_CONFIRM_SECRET": "${MCP_CONFIRM_SECRET}"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=office-outlook-mcp&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIkBjaHJpc2NoYWxsL29mZmljZS1vdXRsb29rLW1jcEAwLjcuMCJdLCJlbnYiOnsiT1VUTE9PS19BQ0NFU1NfVE9LRU4iOiIke09VVExPT0tfQUNDRVNTX1RPS0VOfSIsIk1DUF9DT05GSVJNX1NFQ1JFVCI6IiR7TUNQX0NPTkZJUk1fU0VDUkVUfSJ9fQ%3D%3D"
}{
"servers": {
"office-outlook-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@chrischall/[email protected]"
],
"env": {
"OUTLOOK_ACCESS_TOKEN": "${OUTLOOK_ACCESS_TOKEN}",
"MCP_CONFIRM_SECRET": "${MCP_CONFIRM_SECRET}"
}
}
}
}{
"mcpServers": {
"office-outlook-mcp": {
"command": "npx",
"args": [
"-y",
"@chrischall/[email protected]"
],
"env": {
"OUTLOOK_ACCESS_TOKEN": "${OUTLOOK_ACCESS_TOKEN}",
"MCP_CONFIRM_SECRET": "${MCP_CONFIRM_SECRET}"
}
}
}
}extensions:
"office-outlook-mcp":
enabled: true
name: "office-outlook-mcp"
type: stdio
cmd: "npx"
args:
- "-y"
- "@chrischall/[email protected]"
envs:
"OUTLOOK_ACCESS_TOKEN": "${OUTLOOK_ACCESS_TOKEN}"
"MCP_CONFIRM_SECRET": "${MCP_CONFIRM_SECRET}"
timeout: 300
Placeholders to fill from your own secret store: ${OUTLOOK_ACCESS_TOKEN}, ${MCP_CONFIRM_SECRET}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns, deps.mcp_sdk_version, deps.resolvabledependencies not resolved yetNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo ~liveness-unmeasured +updated-0d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
@chrischall/[email protected] npmnot resolved yet; dependencies are read once a day
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
@chrischall/office-outlook-mcp | npm | 0.7.0 | – | OUTLOOK_ACCESS_TOKEN, MCP_CONFIRM_SECRET |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
And 67 more from this publisher.
{
"name": "io.github.chrischall/office-outlook-mcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.7.0",
"packages": [
{
"version": "0.7.0",
"transport": {
"type": "stdio"
},
"identifier": "@chrischall/office-outlook-mcp",
"registryType": "npm",
"environmentVariables": [
{
"name": "OUTLOOK_ACCESS_TOKEN",
"format": "string",
"isSecret": true,
"description": "Pre-obtained Outlook bearer token. Overrides the browser bridge. Power users / CI only; tokens last about 25 hours."
},
{
"name": "OUTLOOK_DISABLE_FETCHPROXY",
"format": "string",
"description": "Set to '1' to disable browser capture, requiring OUTLOOK_ACCESS_TOKEN."
},
{
"name": "OUTLOOK_API_BASE",
"format": "string",
"description": "Override the Outlook REST base URL. Defaults to https://outlook.office.com/api/v2.0."
},
{
"name": "OUTLOOK_WS_PORT",
"format": "string",
"description": "fetchproxy concentrator port used for token capture. Defaults to 37149, the fleet-wide shared port."
},
{
"name": "OUTLOOK_CAPTURE_TIMEOUT",
"format": "string",
"description": "Seconds to wait for the Outlook tab to make a request we can read a token from. Defaults to 30."
},
{
"name": "OUTLOOK_TOKEN_CACHE",
"format": "string",
"description": "Set to 'false' to stop caching the captured token between runs. Defaults to true."
},
{
"name": "OUTLOOK_TOKEN_FILE",
"format": "string",
"description": "Path to the cached token file. Defaults to ~/.office-outlook-mcp/token.json."
},
{
"name": "OUTLOOK_OUTPUT_DIR",
"format": "string",
"description": "Absolute directory where outlook_export_messages and outlook_export_events write their files. Defaults to ~/Downloads/office-outlook-mcp. When set, a per-call dest must be inside it."
},
{
"name": "FETCHPROXY_WS_HOST",
"format": "string",
"description": "Bind interface for the fetchproxy concentrator, a literal IP only (default 127.0.0.1). Keep on loopback; it exists for hosted deployments that run each MCP in its own network namespace."
},
{
"name": "FETCHPROXY_IDENTITY_DIR",
"format": "string",
"description": "Absolute path where the fetchproxy long-term identity keypair is stored (default ~/.fetchproxy/identity/)."
},
{
"name": "MCP_CONFIRM_MODE",
"format": "string",
"description": "What outlook_send_message, outlook_reply, outlook_respond_to_invite and the other write tools do on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop): \"ask-user\" (default: the first call returns a preview and a confirmToken, and the model must get your approval in chat before using it), \"auto\" (the model may use the token after reviewing the preview itself) or \"refuse\". An unrecognised value is treated as refuse."
},
{
"name": "MCP_CONFIRM_ELICITATION",
"format": "string",
"description": "\"off\" never shows a confirmation prompt, so every client gets the MCP_CONFIRM_MODE flow. Set it for a client that says it can show prompts but never does. Defaults to on."
},
{
"name": "MCP_CONFIRM_TTL_SECONDS",
"format": "string",
"description": "How long a confirmToken stays valid, in seconds. Defaults to 600."
},
{
"name": "MCP_CONFIRM_SECRET",
"format": "string",
"isSecret": true,
"description": "Signing key for confirmTokens. Random per process by default; set it only if tokens must survive a server restart."
}
]
}
],
"repository": {
"url": "https://github.com/chrischall/office-outlook-mcp",
"source": "github"
},
"description": "Outlook / Microsoft 365 for Claude — triage mail, reply, answer invites and book meetings, confirmed"
}