Microsoft 365 Admin MCP Server

Microsoft 365 administration via Graph API application permissions (read-only by default).

Local serverstdio

What is the Microsoft 365 Admin MCP Server?

Microsoft 365 Admin is an MCP integration. Microsoft 365 administration via Graph API application permissions (read-only by default).

Packages and local setup

The published npm package is @okapi-ca/ms-365-admin-mcp-server, version 0.6.3. Its declared MCP transport is stdio.

The package declares MS365_ADMIN_MCP_TENANT_ID (required): Azure AD tenant ID (specific GUID, not 'common').; MS365_ADMIN_MCP_CLIENT_ID (required): App registration client ID with the required application permissions.; MS365_ADMIN_MCP_CLIENT_SECRET (required): App registration client secret. Prefer Azure Key Vault via MS365_ADMIN_MCP_KEYVAULT_URL for production.; MS365_ADMIN_MCP_KEYVAULT_URL: Optional Azure Key Vault URL. When set, secrets are pulled from the vault and override the env-var values above.; MS365_ADMIN_MCP_CLOUD_TYPE: Cloud environment: 'global' (default) or 'china' (21Vianet).; MS365_ADMIN_MCP_MAX_TOP: Cap on the $top query parameter to limit result size.; READ_ONLY: Set to 'true' or '1' to force read-only mode (default behavior; mutations require --allow-writes).; ENABLED_TOOLS: Regex to filter the catalog of available tools..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.6.3 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
MS365_ADMIN_MCP_TENANT_IDAzure AD tenant ID (specific GUID, not 'common').Yes
MS365_ADMIN_MCP_CLIENT_IDApp registration client ID with the required application permissions.Yes
MS365_ADMIN_MCP_CLIENT_SECRETApp registration client secret. Prefer Azure Key Vault via MS365_ADMIN_MCP_KEYVAULT_URL for production.Yes
MS365_ADMIN_MCP_KEYVAULT_URLOptional Azure Key Vault URL. When set, secrets are pulled from the vault and override the env-var values above.Optional
MS365_ADMIN_MCP_CLOUD_TYPECloud environment: 'global' (default) or 'china' (21Vianet).Optional
MS365_ADMIN_MCP_MAX_TOPCap on the $top query parameter to limit result size.Optional
READ_ONLYSet to 'true' or '1' to force read-only mode (default behavior; mutations require --allow-writes).Optional
ENABLED_TOOLSRegex to filter the catalog of available tools.Optional