@chrischall/office-outlook-mcp 0.1.4 → 0.2.0

package/dist/client.js

@@ -198,17 +198,35 @@ export class OutlookClient {
             headers: prefer.length ? { Prefer: prefer.join(', ') } : undefined,
         });
     }
-    /** GET an absolute URL — used only to follow `@odata.nextLink`. */
-    async getAbsolute(url) {
+    /**
+     * GET an absolute URL — used only to follow `@odata.nextLink`.
+     *
+     * The link is absolute and already carries the base path
+     * (`https://outlook.office.com/api/v2.0/me/messages?$skip=25`), while the
+     * underlying client appends every path to that same base. So the base path is
+     * stripped here, and a link that is not under it — another origin, or another
+     * path on the same host — is refused rather than sent the bearer token.
+     */
+    async getAbsolute(url, opts = {}) {
         this.#requireConfigured();
         const base = new URL(this.#baseUrl);
-        const target = new URL(url);
-        if (target.origin !== base.origin) {
-            throw new McpToolError(`Refusing to follow a link to ${target.origin}.`, {
-                hint: 'Pagination links must stay on the Outlook API host.',
+        let target;
+        try {
+            target = new URL(url);
+        }
+        catch {
+            throw new McpToolError(`Refusing to follow a link that is not a URL: ${url}`, {
+                hint: 'Pass the nextLink value exactly as a previous listing returned it.',
+            });
+        }
+        const prefix = base.pathname.replace(/\/+$/, '');
+        if (target.origin !== base.origin ||
+            !(target.pathname === prefix || target.pathname.startsWith(`${prefix}/`))) {
+            throw new McpToolError(`Refusing to follow a link to ${target.origin}${target.pathname}.`, {
+                hint: `Pagination links must stay under the Outlook API base (${this.#baseUrl}).`,
             });
         }
-        return this.#client().fetchJson('GET', target.pathname + target.search);
+        return this.get(target.pathname.slice(prefix.length) + target.search, opts);
     }
     /**
      * The single write path. Everything mutating goes through here so auth and

package/dist/tools/_paging.js

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+import { stripOData } from '../view.js';
+/**
+ * Paging for every list tool.
+ *
+ * Outlook caps each page (`$top`) and signals the rest with
+ * `@odata.nextLink`. A listing that drops that link is indistinguishable from a
+ * complete one, so the model says with confidence that an item does not
+ * exist. Every list tool therefore returns `nextLink` when there is more, and
+ * accepts it back to fetch the next page.
+ */
+export const nextLinkParam = z
+    .string()
+    .min(1)
+    .optional()
+    .describe('Continue a previous listing: pass its `nextLink` value unchanged to fetch the next page. When set, the paging/filter arguments are taken from the link and ignored here.');
+/** Fetch the first page at `path`, or the page a previous `nextLink` points at. */
+export function fetchPage(client, nextLink, path, opts = {}) {
+    return nextLink !== undefined ? client.getAbsolute(nextLink, opts) : client.get(path, opts);
+}
+/**
+ * Pass a collection through without a typed projection, trimming the OData
+ * envelope from each item but keeping the paging link.
+ */
+export function plainCollection(data) {
+    const items = Array.isArray(data?.value) ? data.value : [];
+    const out = { count: items.length, items: items.map(stripOData) };
+    const next = data?.['@odata.nextLink'];
+    if (next)
+        out.nextLink = next;
+    return out;
+}

package/dist/tools/calendar.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { minifiedResult, resolveView, viewParam } from '@chrischall/mcp-utils';
-import { compactEvent, fullEvent, projectCollection, stripOData, } from '../view.js';
+import { compactEvent, fullEvent, projectCollection, } from '../view.js';
+import { fetchPage, nextLinkParam, plainCollection } from './_paging.js';
 import { VIEWS } from './mail.js';
 import { mailboxTimeZone } from '../timezone.js';
 const EVENT_SELECT = 'Id,Subject,Start,End,Location,Organizer,IsAllDay,IsCancelled,ShowAs,OnlineMeetingUrl,BodyPreview';
@@ -29,10 +30,11 @@ export function registerCalendarTools(server, client) {
                 .optional()
                 .describe('Windows time-zone name for the returned times, e.g. "Eastern Standard Time". NOT an IANA name like America/New_York.'),
             limit: z.number().int().min(1).max(200).optional().describe('Max events (default 50)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, start, end, timeZone, limit }) => {
+    }, async ({ view, start, end, timeZone, limit, nextLink }) => {
         const zone = timeZone ?? (await mailboxTimeZone(client));
-        const data = await client.get(`/me/calendarview${qs({
+        const data = await fetchPage(client, nextLink, `/me/calendarview${qs({
             startDateTime: start,
             endDateTime: end,
             $select: EVENT_SELECT,
@@ -65,14 +67,12 @@ export function registerCalendarTools(server, client) {
         annotations: { readOnlyHint: true },
         inputSchema: z.object({
             view: viewParam(VIEWS),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view }) => {
-        const data = await client.get(`/me/calendars${qs({ $select: 'Id,Name,Color,CanEdit,Owner' })}`);
+    }, async ({ view, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/calendars${qs({ $select: 'Id,Name,Color,CanEdit,Owner' })}`);
         if (resolveView(view, VIEWS) === 'raw')
             return minifiedResult(data);
-        return minifiedResult({
-            count: data.value?.length ?? 0,
-            items: (data.value ?? []).map(stripOData),
-        });
+        return minifiedResult(plainCollection(data));
     });
 }

package/dist/tools/directory.js

@@ -2,6 +2,7 @@ import { z } from 'zod';
 import { minifiedResult, resolveView, viewParam } from '@chrischall/mcp-utils';
 import { stripOData } from '../view.js';
 import { VIEWS } from './mail.js';
+import { fetchPage, nextLinkParam, plainCollection } from './_paging.js';
 function qs(params) {
     const parts = [];
     for (const [k, v] of Object.entries(params)) {
@@ -14,7 +15,7 @@ function qs(params) {
 function collection(data, raw) {
     if (raw)
         return data;
-    return { count: data.value?.length ?? 0, items: (data.value ?? []).map(stripOData) };
+    return plainCollection(data);
 }
 export function registerDirectoryTools(server, client) {
     server.registerTool('outlook_get_profile', {
@@ -34,9 +35,10 @@ export function registerDirectoryTools(server, client) {
             view: viewParam(VIEWS),
             limit: z.number().int().min(1).max(200).optional().describe('Max contacts (default 50)'),
             skip: z.number().int().min(0).optional().describe('Offset for paging'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, limit, skip }) => {
-        const data = await client.get(`/me/contacts${qs({
+    }, async ({ view, limit, skip, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/contacts${qs({
             $top: limit ?? 50,
             $skip: skip,
             // `MobilePhone1`, not `MobilePhone`: the latter is the Graph name and
@@ -51,9 +53,10 @@ export function registerDirectoryTools(server, client) {
         inputSchema: z.object({
             view: viewParam(VIEWS),
             limit: z.number().int().min(1).max(100).optional().describe('Max people (default 25)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, limit }) => {
-        const data = await client.get(`/me/people${qs({
+    }, async ({ view, limit, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/people${qs({
             $top: limit ?? 25,
             $select: 'Id,DisplayName,ScoredEmailAddresses,JobTitle,CompanyName',
         })}`);
@@ -65,9 +68,10 @@ export function registerDirectoryTools(server, client) {
         inputSchema: z.object({
             view: viewParam(VIEWS),
             limit: z.number().int().min(1).max(200).optional().describe('Max tasks (default 50)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, limit }) => {
-        const data = await client.get(`/me/tasks${qs({
+    }, async ({ view, limit, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/tasks${qs({
             $top: limit ?? 50,
             $select: 'Id,Subject,Status,Importance,DueDateTime,CompletedDateTime',
         })}`);

package/dist/tools/mail.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { minifiedResult, resolveView, viewParam, McpToolError } from '@chrischall/mcp-utils';
-import { compactFolder, compactMessage, fullMessage, projectCollection, stripOData, } from '../view.js';
+import { compactFolder, compactMessage, fullMessage, projectCollection, } from '../view.js';
+import { fetchPage, nextLinkParam, plainCollection } from './_paging.js';
 export const VIEWS = ['compact', 'full', 'raw'];
 /**
  * Well-known folder names the API accepts wherever a folder id is taken.
@@ -40,15 +41,16 @@ export function registerMailTools(server, client) {
         inputSchema: z.object({
             view: viewParam(VIEWS),
             limit: z.number().int().min(1).max(200).optional().describe('Max folders (default 50)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, limit }) => {
-        const data = await client.get(`/me/mailfolders${qs({ $top: limit ?? 50 })}`);
+    }, async ({ view, limit, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/mailfolders${qs({ $top: limit ?? 50 })}`);
         if (resolveView(view, VIEWS) === 'raw')
             return minifiedResult(data);
         return minifiedResult(projectCollection(data, compactFolder, 'mail folder'));
     });
     server.registerTool('outlook_list_messages', {
-        description: "List messages in a folder, newest first. Defaults to the inbox. Use `unreadOnly` for a triage view. Bodies are NOT included — call outlook_get_message for one. Note `search` and `unreadOnly` cannot be combined (the API rejects $search with $filter); pass `search` alone to search the whole mailbox.",
+        description: "List messages in a folder, newest first. Defaults to the inbox. Use `unreadOnly` for a triage view. Bodies are NOT included — call outlook_get_message for one. Note `search` and `unreadOnly` cannot be combined on a first-page request (the API rejects $search with $filter); pass `search` alone to search the whole mailbox. When following a `nextLink`, both are ignored, so echoing them back is harmless.",
         annotations: { readOnlyHint: true },
         inputSchema: z.object({
             view: viewParam(VIEWS),
@@ -62,10 +64,13 @@ export function registerMailTools(server, client) {
             search: z
                 .string()
                 .optional()
-                .describe('Full-text search across the whole mailbox; cannot combine with unreadOnly'),
+                .describe('Full-text search across the whole mailbox; cannot combine with unreadOnly on a first page (ignored with nextLink)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, folder, limit, skip, unreadOnly, search }) => {
-        if (search !== undefined && unreadOnly === true) {
+    }, async ({ view, folder, limit, skip, unreadOnly, search, nextLink }) => {
+        // With nextLink the filters come from the link and are ignored here, so
+        // the conflict only matters for a first-page request.
+        if (nextLink === undefined && search !== undefined && unreadOnly === true) {
             throw new McpToolError('`search` and `unreadOnly` cannot be combined.', {
                 hint: 'Outlook rejects $search together with $filter. Search first, then filter the results.',
             });
@@ -86,7 +91,7 @@ export function registerMailTools(server, client) {
             if (unreadOnly === true)
                 params.$filter = 'IsRead eq false';
         }
-        const data = await client.get(`${base}${qs(params)}`);
+        const data = await fetchPage(client, nextLink, `${base}${qs(params)}`);
         const v = resolveView(view, VIEWS);
         if (v === 'raw')
             return minifiedResult(data);
@@ -117,14 +122,12 @@ export function registerMailTools(server, client) {
         annotations: { readOnlyHint: true },
         inputSchema: z.object({
             id: z.string().min(1).describe('Message Id'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ id }) => {
-        const data = await client.get(`/me/messages/${encodeURIComponent(id)}/attachments${qs({
+    }, async ({ id, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/messages/${encodeURIComponent(id)}/attachments${qs({
             $select: 'Id,Name,Size,ContentType',
         })}`);
-        return minifiedResult({
-            count: data.value?.length ?? 0,
-            items: (data.value ?? []).map(stripOData),
-        });
+        return minifiedResult(plainCollection(data));
     });
 }

package/dist/version.js

@@ -10,4 +10,4 @@
  * line below and nowhere else — not even in prose.
  */
 export const PACKAGE_NAME = 'office-outlook-mcp';
-export const VERSION = '0.1.4'; // x-release-please-version
+export const VERSION = '0.2.0'; // x-release-please-version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrischall/office-outlook-mcp",
-  "version": "0.1.4",
+  "version": "0.2.0",
   "mcpName": "io.github.chrischall/office-outlook-mcp",
   "description": "Outlook / Microsoft 365 MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -45,11 +45,11 @@
     "typecheck": "tsc -p tsconfig.check.json"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^2.0.0",
-    "@fetchproxy/server": "^3.0.1",
+    "@chrischall/mcp-utils": "^2.4.0",
+    "@fetchproxy/server": "^3.2.0",
     "@modelcontextprotocol/server": "^2.0.0",
     "dotenv": "^18.0.1",
-    "zod": "^4.6.2"
+    "zod": "^4.6.5"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "^2.0.0",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/office-outlook-mcp",
     "source": "github"
   },
-  "version": "0.1.4",
+  "version": "0.2.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@chrischall/office-outlook-mcp",
-      "version": "0.1.4",
+      "version": "0.2.0",
       "transport": {
         "type": "stdio"
       },