outlook-mcp
Production-grade MCP server for personal Outlook (Outlook.com / Hotmail / Live). 68 typed Graph tools across mail, calendar, contacts, to-do, drafts, attachments, folders, threading, batch ops, delta-sync. Granular permissions, OS-keyring auth, /$batch-optimized triage and bulk read. Built for agent
as observed 2026-10-08T12:19:32.804Z- Identifier
outlook-mcp- Source
- ClawHub
- Version observed
- 1.25.1
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-09-04T08:09:22.338Z
- Observations recorded
- 11
- Installs (reported upstream)
- 41
- Weekly downloads (upstream)
- 2,626
- Declared license
- MIT-0
Observation history
2026-10-08T12:19:32.804Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Security follow-ups: send tools marked destructive; agents told mailbox content is never instructions; misspelt read_only/allow_categories/read_only_consent stops the server; pinn | "Patch: safe mail attachment downloads; IDs, emails and phones validated whole; batch IDs percent-encoded; recurrence ranges that end before they begin refused; multidict 6.9.1." |
latestVersion |
"1.25.0" | "1.25.1" |
2026-10-06T10:50:34.888Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Security release: read_only_consent for read-only app registrations; calendar invites need mail_send; draft tools only touch drafts; delta cursors bound to their tool; Windows net | "Security follow-ups: send tools marked destructive; agents told mailbox content is never instructions; misspelt read_only/allow_categories/read_only_consent stops the server; pinn |
latestVersion |
"1.24.0" | "1.25.0" |
2026-10-05T10:33:23.015Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Series reshapes no longer silently discard edited/cancelled occurrences; time-zone anchoring + re-anchor; To Do sub-steps & attachments; account tools removed (68 tools)" | "Security release: read_only_consent for read-only app registrations; calendar invites need mail_send; draft tools only touch drafts; delta cursors bound to their tool; Windows net |
latestVersion |
"1.23.0" | "1.24.0" |
2026-10-01T06:47:50.210Z
Fields that differed: changelog latestVersion summary
| Field | Before | After |
|---|---|---|
changelog |
"Hotfix: cap kiota <1.13 so fresh installs work (#80)" | "Series reshapes no longer silently discard edited/cancelled occurrences; time-zone anchoring + re-anchor; To Do sub-steps & attachments; account tools removed (68 tools)" |
latestVersion |
"1.22.1" | "1.23.0" |
summary |
"Production-grade MCP server for personal Outlook (Outlook.com / Hotmail / Live). 62 typed Graph tools across mail, calendar, contacts, to-do, drafts, attachments, folders, threadi | "Production-grade MCP server for personal Outlook (Outlook.com / Hotmail / Live). 68 typed Graph tools across mail, calendar, contacts, to-do, drafts, attachments, folders, threadi |
2026-09-30T05:46:36.081Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Runs on hosts with no IANA time zone database (Windows, Alpine/distroless containers), where every calendar tool previously failed silently — tzdata is now a dependency and an unr | "Hotfix: cap kiota <1.13 so fresh installs work (#80)" |
latestVersion |
"1.22.0" | "1.22.1" |
2026-09-17T19:21:47.070Z
Fields that differed: license description
| Field | Before | After |
|---|---|---|
license |
null | "MIT-0" |
description |
"Production-grade MCP server for personal Outlook (Outlook.com / Hotmail / Live). 62 typed Graph tools across mail, calendar, contacts, to-do, drafts, attachments, folders, threadi | null |
2026-09-12T14:17:54.398Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Security: attachment reads and writes confined to a configured directory. Fixes: every domain error reached the model as a bare 'Error executing tool <name>'. Adds relative dates | "Runs on hosts with no IANA time zone database (Windows, Alpine/distroless containers), where every calendar tool previously failed silently — tzdata is now a dependency and an unr |
latestVersion |
"1.20.0" | "1.22.0" |
2026-09-11T13:17:26.274Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Audit tiers 2+3: wire-level payload tests, SDK-field guard, dead-module guard, live round-trips for contacts and To Do. Removes send_message's sensitivity parameter (Graph rejects | "Security: attachment reads and writes confined to a configured directory. Fixes: every domain error reached the model as a bare 'Error executing tool <name>'. Adds relative dates |
latestVersion |
"1.19.0" | "1.20.0" |
2026-09-08T10:18:19.295Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Migration to the mcp 2.x SDK; lifts the <2 ceiling from 1.13.1. No client-visible change — all 62 tool schemas identical." | "Audit tiers 2+3: wire-level payload tests, SDK-field guard, dead-module guard, live round-trips for contacts and To Do. Removes send_message's sensitivity parameter (Graph rejects |
latestVersion |
"1.14.0" | "1.19.0" |
2026-09-05T08:21:05.203Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Correctness release: fixes 400 InefficientFilter on list_inbox from_address/classification, repairs list_thread (400 on every call, never worked), and restores KQL property restri | "Migration to the mcp 2.x SDK; lifts the <2 ceiling from 1.13.1. No client-visible change — all 62 tool schemas identical." |
latestVersion |
"1.13.0" | "1.14.0" |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.