io.github.okapi-ca
ms-365-admin
Microsoft 365 Admin
Microsoft 365 administration via Graph API application permissions (read-only by default).
stdiocommunityservice
Package Details
@okapi-ca/ms-365-admin-mcp-server
Transportstdio
Environment Variables
MS365_ADMIN_MCP_TENANT_ID
Required
Azure AD tenant ID (specific GUID, not 'common').
MS365_ADMIN_MCP_CLIENT_ID
Required
App registration client ID with the required application permissions.
MS365_ADMIN_MCP_CLIENT_SECRET
RequiredSecret
App registration client secret. Prefer Azure Key Vault via MS365_ADMIN_MCP_KEYVAULT_URL for production.
MS365_ADMIN_MCP_KEYVAULT_URL
Optional Azure Key Vault URL. When set, secrets are pulled from the vault and override the env-var values above.
MS365_ADMIN_MCP_CLOUD_TYPE
Cloud environment: 'global' (default) or 'china' (21Vianet).
MS365_ADMIN_MCP_MAX_TOP
Cap on the $top query parameter to limit result size.
READ_ONLY
Set to 'true' or '1' to force read-only mode (default behavior; mutations require --allow-writes).
ENABLED_TOOLS
Regex to filter the catalog of available tools.