365center-mcp 1.1.0 → 1.2.0

package/README.md

@@ -1,6 +1,6 @@
 # 365center-mcp
 
-**MCP server for Microsoft 365 / SharePoint — 33 tools for full read/write access**
+**MCP server for Microsoft 365 / SharePoint — 35 tools for full read/write access**
 
 Available on [GitHub](https://github.com/Crscristi28/365center-mcp) · [npm](https://www.npmjs.com/package/365center-mcp) · [Docker Hub](https://hub.docker.com/r/crscristi28/365center-mcp) · [cristianb.cz](https://cristianb.cz)
 
@@ -9,7 +9,7 @@ Available on [GitHub](https://github.com/Crscristi28/365center-mcp) · [npm](htt
 [![License](https://img.shields.io/badge/license-BUSL--1.1-blue.svg)](https://github.com/Crscristi28/365center-mcp/blob/main/LICENSE)
 [![Node](https://img.shields.io/badge/node-%3E%3D18-brightgreen.svg)](https://nodejs.org)
 
-Full visual walkthrough: **[Setup Guide PDF](SETUP-GUIDE.pdf)** — screenshots for every Azure setup step and all 3 installation methods.
+Full visual walkthrough: **[Setup Guide PDF](https://github.com/Crscristi28/365center-mcp/blob/main/SETUP-GUIDE.pdf)** — screenshots for every Azure setup step and all 3 installation methods.
 
 ---
 
@@ -42,7 +42,7 @@ Full visual walkthrough: **[Setup Guide PDF](SETUP-GUIDE.pdf)** — screenshots
 
 `365center-mcp` is a Model Context Protocol (MCP) server that gives Claude — and any other MCP-compatible AI client — full read/write access to Microsoft 365 SharePoint sites.
 
-It exposes **33 tools** covering SharePoint sites, document libraries, documents, pages, metadata columns, navigation, and permissions. Claude can list sites, upload and download files, tag documents, create and publish pages, build navigation menus, manage permissions, and more — all through a single MCP connection.
+It exposes **35 tools** covering SharePoint sites, document libraries, documents, pages, metadata columns, navigation, and permissions. Claude can list sites, upload and download files, tag documents, create and publish pages, build navigation menus, manage permissions, and more — all through a single MCP connection.
 
 Built for manufacturing companies managing factory documentation in SharePoint, but works with any Microsoft 365 tenant.
 
@@ -56,17 +56,19 @@ Built for manufacturing companies managing factory documentation in SharePoint,
 
 ## Features
 
-**33 tools** across 7 categories. All tools use Microsoft Graph API or SharePoint REST API — no middlemen.
+**35 tools** across 7 categories. All tools use Microsoft Graph API or SharePoint REST API — no middlemen.
 
-### Sites (3 tools)
+### Sites (4 tools)
 - `list_sites` — List all SharePoint sites in the tenant
 - `get_site` — Get site by URL
 - `get_site_by_id` — Get site by ID
+- `create_site` — Create a new Communication or Team site
 
-### Documents (8 tools)
+### Documents (9 tools)
 - `list_document_libraries` — List document libraries (drives)
 - `list_documents` — List documents with both driveItemId and listItemId
-- `upload_document` — Upload files to SharePoint
+- `upload_document` — Upload a file to SharePoint (auto session upload for files over 4 MB)
+- `upload_documents` — Upload multiple files with optional metadata in one call (max 30 per call)
 - `download_document` — Download files from SharePoint to a local path
 - `search_documents` — Search across documents
 - `delete_document` — Delete a document
@@ -227,7 +229,7 @@ Replace the four `your-*` values with what you collected in Step 8 of the Azure
 
 On Windows, use `C:\\Users\\YOUR_USERNAME\\.365center-mcp:/home/mcp/.365center-mcp` as the volume mount.
 
-**4. Open Claude Desktop.** The server will appear in the MCP menu with all 33 tools loaded.
+**4. Open Claude Desktop.** The server will appear in the MCP menu with all 35 tools loaded.
 
 > **Why the volume mount?** The server caches delegated auth tokens in `~/.365center-mcp/token-cache.json`. Without the volume, you would need to re-authenticate every time Docker restarts.
 

package/dist/index.js

@@ -3,11 +3,12 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { listSites, getSite, getSiteById } from "./tools/sites.js";
-import { listDocumentLibraries, listDocuments, uploadDocument, downloadDocument, searchDocuments, deleteDocument, createFolder, getDocumentVersions } from "./tools/documents.js";
+import { listDocumentLibraries, listDocuments, uploadDocument, uploadDocuments, downloadDocument, searchDocuments, deleteDocument, createFolder, getDocumentVersions } from "./tools/documents.js";
 import { listColumns, createChoiceColumn, createTextColumn, setDocumentMetadata, getDocumentMetadata } from "./tools/metadata.js";
 import { listPages, createPage, createPageWithContent, addQuickLinksWebPart, publishPage, deletePage } from "./tools/pages.js";
 import { getNavigation, addNavigationLink, deleteNavigationLink } from "./tools/navigation.js";
 import { getPageCanvasContent, setPageCanvasContent, copyPage, listSitePages } from "./tools/pages-rest.js";
+import { createSite } from "./tools/sites-rest.js";
 import { getSitePermissions, getGroupMembers, addUserToGroup, removeUserFromGroup } from "./tools/permissions.js";
 const server = new McpServer({
     name: "365center-mcp",
@@ -26,6 +27,14 @@ server.tool("get_site_by_id", "Get a SharePoint site by its ID. Site ID format:
     const site = await getSiteById(siteId);
     return { content: [{ type: "text", text: JSON.stringify(site, null, 2) }] };
 });
+server.tool("create_site", "Create a new SharePoint site. Template: 'communication' (default) for publishing/documentation sites, 'team' for collaboration. Returns siteId for use in all other tools. Site creation takes a few seconds. Uses delegated auth (device code flow on first use).", {
+    title: z.string().describe("Display name for the new site"),
+    urlSlug: z.string().describe("URL slug — the site will be at https://{domain}/sites/{urlSlug}"),
+    template: z.enum(["communication", "team"]).optional().describe("Site template: 'communication' (default) or 'team'"),
+}, async ({ title, urlSlug, template }) => {
+    const result = await createSite(title, urlSlug, template || "communication");
+    return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+});
 // ============ DOCUMENTS ============
 server.tool("list_document_libraries", "List all document libraries (drives) in a SharePoint site. Returns driveId for each library — use driveId in list_documents, upload_document, delete_document, and other document tools. Also returns listId for metadata operations.", { siteId: z.string().describe("SharePoint site ID") }, async ({ siteId }) => {
     const libraries = await listDocumentLibraries(siteId);
@@ -39,7 +48,7 @@ server.tool("list_documents", "List documents in a document library folder. Retu
     const docs = await listDocuments(siteId, driveId, folderId || "root");
     return { content: [{ type: "text", text: JSON.stringify(docs, null, 2) }] };
 });
-server.tool("upload_document", "Upload a local file to a SharePoint document library. File is uploaded to the root folder by default, or to a specific folder if folderId is provided. After upload, use set_document_metadata to set metadata fields on the document.", {
+server.tool("upload_document", "Upload a local file to a SharePoint document library. File is uploaded to the root folder by default, or to a specific folder if folderId is provided. After upload, use set_document_metadata to set metadata fields on the document. Supports files up to 250 GB (automatic session upload for files over 4 MB).", {
     siteId: z.string().describe("SharePoint site ID"),
     driveId: z.string().describe("Document library (drive) ID"),
     fileName: z.string().describe("Name for the file in SharePoint"),
@@ -58,6 +67,23 @@ server.tool("download_document", "Download a document from a SharePoint document
     const result = await downloadDocument(siteId, driveId, itemId, localPath);
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
 });
+server.tool("upload_documents", "Upload one or more files to SharePoint, optionally setting metadata on each. Max 30 files per call. Files over 4 MB use resumable upload automatically. 500ms delay between files for API rate limits. Returns per-file status for upload and metadata independently.", {
+    siteId: z.string().describe("SharePoint site ID"),
+    driveId: z.string().describe("Document library (drive) ID"),
+    listId: z.string().optional().describe("List ID — required only if setting metadata via fields"),
+    folderId: z.string().optional().describe("Target folder ID (default: root)"),
+    files: z.array(z.object({
+        fileName: z.string().describe("Name for the file in SharePoint"),
+        filePath: z.string().describe("Local file path to upload"),
+        fields: z.string().optional().describe("JSON string of metadata fields to set after upload, e.g. '{\"Oblast\":\"Linka1\",\"WS\":\"WS9\"}'"),
+    })).describe("Array of files to upload (max 30)"),
+}, async ({ siteId, driveId, listId, folderId, files }) => {
+    if (files.length > 30) {
+        return { content: [{ type: "text", text: JSON.stringify({ error: "Maximum 30 files per call. Split into multiple calls." }) }] };
+    }
+    const results = await uploadDocuments(siteId, driveId, listId, files, folderId || "root");
+    return { content: [{ type: "text", text: JSON.stringify(results, null, 2) }] };
+});
 server.tool("search_documents", "Search for documents in a SharePoint site", {
     siteId: z.string().describe("SharePoint site ID"),
     query: z.string().describe("Search query"),

package/dist/tools/documents.d.ts

@@ -24,3 +24,15 @@ export declare function createFolder(siteId: string, driveId: string, folderName
     url: any;
 }>;
 export declare function getDocumentVersions(siteId: string, driveId: string, itemId: string): Promise<any>;
+export declare function uploadDocuments(siteId: string, driveId: string, listId: string | undefined, files: Array<{
+    fileName: string;
+    filePath: string;
+    fields?: string;
+}>, folderId?: string): Promise<{
+    fileName: string;
+    status: "ok" | "error";
+    id?: string;
+    error?: string;
+    metadataStatus?: "ok" | "error" | "skipped";
+    metadataError?: string;
+}[]>;

package/dist/tools/documents.js

@@ -1,4 +1,5 @@
 import { graphClient } from "../auth.js";
+import { setDocumentMetadata } from "./metadata.js";
 import fs from "fs";
 import path from "path";
 import { Readable } from "stream";
@@ -30,15 +31,62 @@ export async function listDocuments(siteId, driveId, folderId = "root") {
     }));
 }
 export async function uploadDocument(siteId, driveId, fileName, filePath, folderId = "root") {
-    const fileContent = fs.readFileSync(filePath);
-    const result = await graphClient
-        .api(`/sites/${siteId}/drives/${driveId}/items/${folderId}:/${fileName}:/content`)
-        .putStream(fileContent);
+    const fileSize = fs.statSync(filePath).size;
+    const FOUR_MB = 4 * 1024 * 1024;
+    if (fileSize <= FOUR_MB) {
+        const fileContent = fs.readFileSync(filePath);
+        const result = await graphClient
+            .api(`/sites/${siteId}/drives/${driveId}/items/${folderId}:/${fileName}:/content`)
+            .putStream(fileContent);
+        return {
+            id: result.id,
+            name: result.name,
+            url: result.webUrl,
+            size: result.size,
+        };
+    }
+    const session = await graphClient
+        .api(`/sites/${siteId}/drives/${driveId}/items/${folderId}:/${fileName}:/createUploadSession`)
+        .post({
+        item: { "@microsoft.graph.conflictBehavior": "rename" },
+    });
+    const uploadUrl = session.uploadUrl;
+    const CHUNK_SIZE = 10 * 1024 * 1024;
+    const fd = fs.openSync(filePath, "r");
+    let offset = 0;
+    let finalResult;
+    try {
+        while (offset < fileSize) {
+            const length = Math.min(CHUNK_SIZE, fileSize - offset);
+            const buffer = Buffer.alloc(length);
+            fs.readSync(fd, buffer, 0, length, offset);
+            const end = offset + length - 1;
+            const response = await fetch(uploadUrl, {
+                method: "PUT",
+                headers: {
+                    "Content-Length": length.toString(),
+                    "Content-Range": `bytes ${offset}-${end}/${fileSize}`,
+                },
+                body: buffer,
+            });
+            if (response.status === 200 || response.status === 201) {
+                finalResult = await response.json();
+            }
+            else if (response.status !== 202) {
+                const errorText = await response.text();
+                throw new Error(`Upload chunk failed: ${response.status} ${errorText}`);
+            }
+            offset += length;
+        }
+    }
+    finally {
+        fs.closeSync(fd);
+    }
     return {
-        id: result.id,
-        name: result.name,
-        url: result.webUrl,
-        size: result.size,
+        id: finalResult.id,
+        name: finalResult.name,
+        url: finalResult.webUrl,
+        size: finalResult.size,
     };
 }
 export async function downloadDocument(siteId, driveId, itemId, localPath) {
@@ -122,3 +170,35 @@ export async function getDocumentVersions(siteId, driveId, itemId) {
         size: v.size,
     }));
 }
+export async function uploadDocuments(siteId, driveId, listId, files, folderId = "root") {
+    const results = [];
+    for (const file of files) {
+        const entry = { fileName: file.fileName, status: "ok" };
+        try {
+            const uploaded = await uploadDocument(siteId, driveId, file.fileName, file.filePath, folderId);
+            entry.id = uploaded.id;
+            if (file.fields && listId) {
+                try {
+                    const fields = JSON.parse(file.fields);
+                    await setDocumentMetadata(siteId, listId, uploaded.id, fields, driveId);
+                    entry.metadataStatus = "ok";
+                }
+                catch (metaErr) {
+                    entry.metadataStatus = "error";
+                    entry.metadataError = metaErr.message || String(metaErr);
+                }
+            }
+            else {
+                entry.metadataStatus = "skipped";
+            }
+        }
+        catch (err) {
+            entry.status = "error";
+            entry.error = err.message || String(err);
+            entry.metadataStatus = "skipped";
+        }
+        results.push(entry);
+        await new Promise((r) => setTimeout(r, 500));
+    }
+    return results;
+}

package/dist/tools/metadata.js

@@ -1,4 +1,4 @@
-import { graphClient } from "../auth.js";
+import { graphClient, callSharePointRest } from "../auth.js";
 // Translate drive item ID to list item ID if needed
 async function resolveListItemId(siteId, listId, itemId, driveId) {
     // If it's already a numeric ID, use it directly
@@ -39,26 +39,41 @@ export async function listColumns(siteId, listId) {
     }));
 }
 export async function createChoiceColumn(siteId, listId, name, displayName, choices, allowMultiple = false) {
-    const columnDef = {
-        name,
-        displayName,
-        choice: {
-            allowTextEntry: false,
-            choices,
-            displayAs: allowMultiple ? "checkBoxes" : "dropDownMenu",
-        },
-    };
-    if (allowMultiple) {
-        columnDef.indexed = false;
+    if (!allowMultiple) {
+        const columnDef = {
+            name,
+            displayName,
+            choice: {
+                allowTextEntry: false,
+                choices,
+                displayAs: "dropDownMenu",
+            },
+        };
+        const result = await graphClient
+            .api(`/sites/${siteId}/lists/${listId}/columns`)
+            .post(columnDef);
+        return {
+            id: result.id,
+            name: result.name,
+            displayName: result.displayName,
+            allowMultiple: false,
+        };
     }
-    const result = await graphClient
-        .api(`/sites/${siteId}/lists/${listId}/columns`)
-        .post(columnDef);
+    const site = await graphClient.api(`/sites/${siteId}`).select("webUrl").get();
+    const siteUrl = site.webUrl;
+    const result = await callSharePointRest(siteUrl, `/_api/web/lists/getByTitle('${listId}')/fields`, "POST", {
+        __metadata: { type: "SP.FieldMultiChoice" },
+        FieldTypeKind: 15,
+        Title: displayName,
+        StaticName: name,
+        InternalName: name,
+        Choices: { results: choices },
+    });
     return {
-        id: result.id,
-        name: result.name,
-        displayName: result.displayName,
-        allowMultiple,
+        id: result.d?.Id || result.Id,
+        name: name,
+        displayName: displayName,
+        allowMultiple: true,
     };
 }
 export async function createTextColumn(siteId, listId, name, displayName) {
@@ -80,9 +95,19 @@ export async function createTextColumn(siteId, listId, name, displayName) {
 }
 export async function setDocumentMetadata(siteId, listId, itemId, fields, driveId) {
     const resolvedId = await resolveListItemId(siteId, listId, itemId, driveId);
+    const patchFields = {};
+    for (const [key, value] of Object.entries(fields)) {
+        if (Array.isArray(value)) {
+            patchFields[`${key}@odata.type`] = "Collection(Edm.String)";
+            patchFields[key] = value;
+        }
+        else {
+            patchFields[key] = value;
+        }
+    }
     const result = await graphClient
         .api(`/sites/${siteId}/lists/${listId}/items/${resolvedId}/fields`)
-        .patch(fields);
+        .patch(patchFields);
     return result;
 }
 export async function getDocumentMetadata(siteId, listId, itemId, driveId) {

package/dist/tools/sites-rest.d.ts

@@ -0,0 +1,5 @@
+export declare function createSite(title: string, urlSlug: string, template?: "communication" | "team"): Promise<{
+    siteId: any;
+    url: string;
+    title: string;
+}>;

package/dist/tools/sites-rest.js

@@ -0,0 +1,21 @@
+import { callSharePointRest } from "../auth.js";
+export async function createSite(title, urlSlug, template = "communication") {
+    const domain = process.env.SHAREPOINT_DOMAIN;
+    const adminUrl = `https://${domain.replace(".sharepoint.com", "-admin.sharepoint.com")}`;
+    const siteUrl = `https://${domain}/sites/${urlSlug}`;
+    const webTemplate = template === "communication"
+        ? "SITEPAGEPUBLISHING#0"
+        : "STS#3";
+    const result = await callSharePointRest(adminUrl, "/_api/SPSiteManager/create", "POST", {
+        request: {
+            Title: title,
+            Url: siteUrl,
+            WebTemplate: webTemplate,
+        },
+    });
+    return {
+        siteId: result.d?.SiteId || result.SiteId,
+        url: siteUrl,
+        title: title,
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "365center-mcp",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "MCP server for Microsoft 365 / Office 365 SharePoint — 32 tools for full read-write access to sites, documents, pages, metadata, navigation, and permissions",
   "type": "module",
   "main": "dist/index.js",