@chrischall/office-outlook-mcp 0.1.5 → 0.2.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Outlook / Microsoft 365 — mail, calendar, contacts and tasks via natural language",
-    "version": "0.1.5"
+    "version": "0.2.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Outlook (Microsoft 365)",
       "source": "./",
       "description": "MCP server for Outlook / Microsoft 365 — read mail, folders, calendar, contacts and tasks, and send mail with confirmation",
-      "version": "0.1.5",
+      "version": "0.2.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "office-outlook-mcp",
   "displayName": "Outlook (Microsoft 365)",
-  "version": "0.1.5",
+  "version": "0.2.0",
   "description": "Outlook / Microsoft 365 for Claude — read mail, folders, calendar, contacts and tasks, and send mail with confirmation, using your signed-in browser session",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -36027,7 +36027,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     PACKAGE_NAME = "office-outlook-mcp";
-    VERSION = "0.1.5";
+    VERSION = "0.2.0";
   }
 });
 
@@ -46223,17 +46223,33 @@ var OutlookClient = class {
       headers: prefer.length ? { Prefer: prefer.join(", ") } : void 0
     });
   }
-  /** GET an absolute URL — used only to follow `@odata.nextLink`. */
-  async getAbsolute(url2) {
+  /**
+   * GET an absolute URL — used only to follow `@odata.nextLink`.
+   *
+   * The link is absolute and already carries the base path
+   * (`https://outlook.office.com/api/v2.0/me/messages?$skip=25`), while the
+   * underlying client appends every path to that same base. So the base path is
+   * stripped here, and a link that is not under it — another origin, or another
+   * path on the same host — is refused rather than sent the bearer token.
+   */
+  async getAbsolute(url2, opts = {}) {
     this.#requireConfigured();
     const base = new URL(this.#baseUrl);
-    const target = new URL(url2);
-    if (target.origin !== base.origin) {
-      throw new McpToolError(`Refusing to follow a link to ${target.origin}.`, {
-        hint: "Pagination links must stay on the Outlook API host."
+    let target;
+    try {
+      target = new URL(url2);
+    } catch {
+      throw new McpToolError(`Refusing to follow a link that is not a URL: ${url2}`, {
+        hint: "Pass the nextLink value exactly as a previous listing returned it."
+      });
+    }
+    const prefix = base.pathname.replace(/\/+$/, "");
+    if (target.origin !== base.origin || !(target.pathname === prefix || target.pathname.startsWith(`${prefix}/`))) {
+      throw new McpToolError(`Refusing to follow a link to ${target.origin}${target.pathname}.`, {
+        hint: `Pagination links must stay under the Outlook API base (${this.#baseUrl}).`
       });
     }
-    return this.#client().fetchJson("GET", target.pathname + target.search);
+    return this.get(target.pathname.slice(prefix.length) + target.search, opts);
   }
   /**
    * The single write path. Everything mutating goes through here so auth and
@@ -46373,6 +46389,22 @@ function projectCollection(payload, project, label) {
   });
 }
 
+// src/tools/_paging.ts
+init_zod();
+var nextLinkParam = external_exports.string().min(1).optional().describe(
+  "Continue a previous listing: pass its `nextLink` value unchanged to fetch the next page. When set, the paging/filter arguments are taken from the link and ignored here."
+);
+function fetchPage(client2, nextLink, path, opts = {}) {
+  return nextLink !== void 0 ? client2.getAbsolute(nextLink, opts) : client2.get(path, opts);
+}
+function plainCollection(data) {
+  const items = Array.isArray(data?.value) ? data.value : [];
+  const out = { count: items.length, items: items.map(stripOData) };
+  const next = data?.["@odata.nextLink"];
+  if (next) out.nextLink = next;
+  return out;
+}
+
 // src/tools/mail.ts
 var VIEWS2 = ["compact", "full", "raw"];
 var WELL_KNOWN = [
@@ -46405,11 +46437,14 @@ function registerMailTools(server, client2) {
       annotations: { readOnlyHint: true },
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
-        limit: external_exports.number().int().min(1).max(200).optional().describe("Max folders (default 50)")
+        limit: external_exports.number().int().min(1).max(200).optional().describe("Max folders (default 50)"),
+        nextLink: nextLinkParam
       })
     },
-    async ({ view, limit }) => {
-      const data = await client2.get(
+    async ({ view, limit, nextLink }) => {
+      const data = await fetchPage(
+        client2,
+        nextLink,
         `/me/mailfolders${qs({ $top: limit ?? 50 })}`
       );
       if (resolveView(view, VIEWS2) === "raw") return minifiedResult(data);
@@ -46419,7 +46454,7 @@ function registerMailTools(server, client2) {
   server.registerTool(
     "outlook_list_messages",
     {
-      description: "List messages in a folder, newest first. Defaults to the inbox. Use `unreadOnly` for a triage view. Bodies are NOT included \u2014 call outlook_get_message for one. Note `search` and `unreadOnly` cannot be combined (the API rejects $search with $filter); pass `search` alone to search the whole mailbox.",
+      description: "List messages in a folder, newest first. Defaults to the inbox. Use `unreadOnly` for a triage view. Bodies are NOT included \u2014 call outlook_get_message for one. Note `search` and `unreadOnly` cannot be combined on a first-page request (the API rejects $search with $filter); pass `search` alone to search the whole mailbox. When following a `nextLink`, both are ignored, so echoing them back is harmless.",
       annotations: { readOnlyHint: true },
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
@@ -46427,11 +46462,12 @@ function registerMailTools(server, client2) {
         limit: external_exports.number().int().min(1).max(100).optional().describe("Max messages (default 25)"),
         skip: external_exports.number().int().min(0).optional().describe("Offset for paging"),
         unreadOnly: external_exports.boolean().optional().describe("Only unread messages"),
-        search: external_exports.string().optional().describe("Full-text search across the whole mailbox; cannot combine with unreadOnly")
+        search: external_exports.string().optional().describe("Full-text search across the whole mailbox; cannot combine with unreadOnly on a first page (ignored with nextLink)"),
+        nextLink: nextLinkParam
       })
     },
-    async ({ view, folder, limit, skip, unreadOnly, search }) => {
-      if (search !== void 0 && unreadOnly === true) {
+    async ({ view, folder, limit, skip, unreadOnly, search, nextLink }) => {
+      if (nextLink === void 0 && search !== void 0 && unreadOnly === true) {
         throw new McpToolError("`search` and `unreadOnly` cannot be combined.", {
           hint: "Outlook rejects $search together with $filter. Search first, then filter the results."
         });
@@ -46448,7 +46484,11 @@ function registerMailTools(server, client2) {
         params.$orderby = "ReceivedDateTime desc";
         if (unreadOnly === true) params.$filter = "IsRead eq false";
       }
-      const data = await client2.get(`${base}${qs(params)}`);
+      const data = await fetchPage(
+        client2,
+        nextLink,
+        `${base}${qs(params)}`
+      );
       const v = resolveView(view, VIEWS2);
       if (v === "raw") return minifiedResult(data);
       return minifiedResult(
@@ -46482,19 +46522,19 @@ function registerMailTools(server, client2) {
       description: "List a message's attachments (name, size, content type). Metadata only \u2014 this deliberately does not download bytes.",
       annotations: { readOnlyHint: true },
       inputSchema: external_exports.object({
-        id: external_exports.string().min(1).describe("Message Id")
+        id: external_exports.string().min(1).describe("Message Id"),
+        nextLink: nextLinkParam
       })
     },
-    async ({ id }) => {
-      const data = await client2.get(
+    async ({ id, nextLink }) => {
+      const data = await fetchPage(
+        client2,
+        nextLink,
         `/me/messages/${encodeURIComponent(id)}/attachments${qs({
           $select: "Id,Name,Size,ContentType"
         })}`
       );
-      return minifiedResult({
-        count: data.value?.length ?? 0,
-        items: (data.value ?? []).map(stripOData)
-      });
+      return minifiedResult(plainCollection(data));
     }
   );
 }
@@ -46541,12 +46581,15 @@ function registerCalendarTools(server, client2) {
         timeZone: external_exports.string().optional().describe(
           'Windows time-zone name for the returned times, e.g. "Eastern Standard Time". NOT an IANA name like America/New_York.'
         ),
-        limit: external_exports.number().int().min(1).max(200).optional().describe("Max events (default 50)")
+        limit: external_exports.number().int().min(1).max(200).optional().describe("Max events (default 50)"),
+        nextLink: nextLinkParam
       })
     },
-    async ({ view, start, end, timeZone, limit }) => {
+    async ({ view, start, end, timeZone, limit, nextLink }) => {
       const zone = timeZone ?? await mailboxTimeZone(client2);
-      const data = await client2.get(
+      const data = await fetchPage(
+        client2,
+        nextLink,
         `/me/calendarview${qs2({
           startDateTime: start,
           endDateTime: end,
@@ -46591,18 +46634,14 @@ function registerCalendarTools(server, client2) {
       description: "List the calendars in the mailbox, for picking one to read or write against.",
       annotations: { readOnlyHint: true },
       inputSchema: external_exports.object({
-        view: viewParam(VIEWS2)
+        view: viewParam(VIEWS2),
+        nextLink: nextLinkParam
       })
     },
-    async ({ view }) => {
-      const data = await client2.get(
-        `/me/calendars${qs2({ $select: "Id,Name,Color,CanEdit,Owner" })}`
-      );
+    async ({ view, nextLink }) => {
+      const data = await fetchPage(client2, nextLink, `/me/calendars${qs2({ $select: "Id,Name,Color,CanEdit,Owner" })}`);
       if (resolveView(view, VIEWS2) === "raw") return minifiedResult(data);
-      return minifiedResult({
-        count: data.value?.length ?? 0,
-        items: (data.value ?? []).map(stripOData)
-      });
+      return minifiedResult(plainCollection(data));
     }
   );
 }
@@ -46620,7 +46659,7 @@ function qs3(params) {
 }
 function collection(data, raw) {
   if (raw) return data;
-  return { count: data.value?.length ?? 0, items: (data.value ?? []).map(stripOData) };
+  return plainCollection(data);
 }
 function registerDirectoryTools(server, client2) {
   server.registerTool(
@@ -46649,11 +46688,14 @@ function registerDirectoryTools(server, client2) {
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         limit: external_exports.number().int().min(1).max(200).optional().describe("Max contacts (default 50)"),
-        skip: external_exports.number().int().min(0).optional().describe("Offset for paging")
+        skip: external_exports.number().int().min(0).optional().describe("Offset for paging"),
+        nextLink: nextLinkParam
       })
     },
-    async ({ view, limit, skip }) => {
-      const data = await client2.get(
+    async ({ view, limit, skip, nextLink }) => {
+      const data = await fetchPage(
+        client2,
+        nextLink,
         `/me/contacts${qs3({
           $top: limit ?? 50,
           $skip: skip,
@@ -46672,11 +46714,14 @@ function registerDirectoryTools(server, client2) {
       annotations: { readOnlyHint: true },
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
-        limit: external_exports.number().int().min(1).max(100).optional().describe("Max people (default 25)")
+        limit: external_exports.number().int().min(1).max(100).optional().describe("Max people (default 25)"),
+        nextLink: nextLinkParam
       })
     },
-    async ({ view, limit }) => {
-      const data = await client2.get(
+    async ({ view, limit, nextLink }) => {
+      const data = await fetchPage(
+        client2,
+        nextLink,
         `/me/people${qs3({
           $top: limit ?? 25,
           $select: "Id,DisplayName,ScoredEmailAddresses,JobTitle,CompanyName"
@@ -46692,11 +46737,14 @@ function registerDirectoryTools(server, client2) {
       annotations: { readOnlyHint: true },
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
-        limit: external_exports.number().int().min(1).max(200).optional().describe("Max tasks (default 50)")
+        limit: external_exports.number().int().min(1).max(200).optional().describe("Max tasks (default 50)"),
+        nextLink: nextLinkParam
       })
     },
-    async ({ view, limit }) => {
-      const data = await client2.get(
+    async ({ view, limit, nextLink }) => {
+      const data = await fetchPage(
+        client2,
+        nextLink,
         `/me/tasks${qs3({
           $top: limit ?? 50,
           $select: "Id,Subject,Status,Importance,DueDateTime,CompletedDateTime"

package/dist/client.js

@@ -198,17 +198,35 @@ export class OutlookClient {
             headers: prefer.length ? { Prefer: prefer.join(', ') } : undefined,
         });
     }
-    /** GET an absolute URL — used only to follow `@odata.nextLink`. */
-    async getAbsolute(url) {
+    /**
+     * GET an absolute URL — used only to follow `@odata.nextLink`.
+     *
+     * The link is absolute and already carries the base path
+     * (`https://outlook.office.com/api/v2.0/me/messages?$skip=25`), while the
+     * underlying client appends every path to that same base. So the base path is
+     * stripped here, and a link that is not under it — another origin, or another
+     * path on the same host — is refused rather than sent the bearer token.
+     */
+    async getAbsolute(url, opts = {}) {
         this.#requireConfigured();
         const base = new URL(this.#baseUrl);
-        const target = new URL(url);
-        if (target.origin !== base.origin) {
-            throw new McpToolError(`Refusing to follow a link to ${target.origin}.`, {
-                hint: 'Pagination links must stay on the Outlook API host.',
+        let target;
+        try {
+            target = new URL(url);
+        }
+        catch {
+            throw new McpToolError(`Refusing to follow a link that is not a URL: ${url}`, {
+                hint: 'Pass the nextLink value exactly as a previous listing returned it.',
+            });
+        }
+        const prefix = base.pathname.replace(/\/+$/, '');
+        if (target.origin !== base.origin ||
+            !(target.pathname === prefix || target.pathname.startsWith(`${prefix}/`))) {
+            throw new McpToolError(`Refusing to follow a link to ${target.origin}${target.pathname}.`, {
+                hint: `Pagination links must stay under the Outlook API base (${this.#baseUrl}).`,
             });
         }
-        return this.#client().fetchJson('GET', target.pathname + target.search);
+        return this.get(target.pathname.slice(prefix.length) + target.search, opts);
     }
     /**
      * The single write path. Everything mutating goes through here so auth and

package/dist/tools/_paging.js

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+import { stripOData } from '../view.js';
+/**
+ * Paging for every list tool.
+ *
+ * Outlook caps each page (`$top`) and signals the rest with
+ * `@odata.nextLink`. A listing that drops that link is indistinguishable from a
+ * complete one, so the model says with confidence that an item does not
+ * exist. Every list tool therefore returns `nextLink` when there is more, and
+ * accepts it back to fetch the next page.
+ */
+export const nextLinkParam = z
+    .string()
+    .min(1)
+    .optional()
+    .describe('Continue a previous listing: pass its `nextLink` value unchanged to fetch the next page. When set, the paging/filter arguments are taken from the link and ignored here.');
+/** Fetch the first page at `path`, or the page a previous `nextLink` points at. */
+export function fetchPage(client, nextLink, path, opts = {}) {
+    return nextLink !== undefined ? client.getAbsolute(nextLink, opts) : client.get(path, opts);
+}
+/**
+ * Pass a collection through without a typed projection, trimming the OData
+ * envelope from each item but keeping the paging link.
+ */
+export function plainCollection(data) {
+    const items = Array.isArray(data?.value) ? data.value : [];
+    const out = { count: items.length, items: items.map(stripOData) };
+    const next = data?.['@odata.nextLink'];
+    if (next)
+        out.nextLink = next;
+    return out;
+}

package/dist/tools/calendar.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { minifiedResult, resolveView, viewParam } from '@chrischall/mcp-utils';
-import { compactEvent, fullEvent, projectCollection, stripOData, } from '../view.js';
+import { compactEvent, fullEvent, projectCollection, } from '../view.js';
+import { fetchPage, nextLinkParam, plainCollection } from './_paging.js';
 import { VIEWS } from './mail.js';
 import { mailboxTimeZone } from '../timezone.js';
 const EVENT_SELECT = 'Id,Subject,Start,End,Location,Organizer,IsAllDay,IsCancelled,ShowAs,OnlineMeetingUrl,BodyPreview';
@@ -29,10 +30,11 @@ export function registerCalendarTools(server, client) {
                 .optional()
                 .describe('Windows time-zone name for the returned times, e.g. "Eastern Standard Time". NOT an IANA name like America/New_York.'),
             limit: z.number().int().min(1).max(200).optional().describe('Max events (default 50)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, start, end, timeZone, limit }) => {
+    }, async ({ view, start, end, timeZone, limit, nextLink }) => {
         const zone = timeZone ?? (await mailboxTimeZone(client));
-        const data = await client.get(`/me/calendarview${qs({
+        const data = await fetchPage(client, nextLink, `/me/calendarview${qs({
             startDateTime: start,
             endDateTime: end,
             $select: EVENT_SELECT,
@@ -65,14 +67,12 @@ export function registerCalendarTools(server, client) {
         annotations: { readOnlyHint: true },
         inputSchema: z.object({
             view: viewParam(VIEWS),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view }) => {
-        const data = await client.get(`/me/calendars${qs({ $select: 'Id,Name,Color,CanEdit,Owner' })}`);
+    }, async ({ view, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/calendars${qs({ $select: 'Id,Name,Color,CanEdit,Owner' })}`);
         if (resolveView(view, VIEWS) === 'raw')
             return minifiedResult(data);
-        return minifiedResult({
-            count: data.value?.length ?? 0,
-            items: (data.value ?? []).map(stripOData),
-        });
+        return minifiedResult(plainCollection(data));
     });
 }

package/dist/tools/directory.js

@@ -2,6 +2,7 @@ import { z } from 'zod';
 import { minifiedResult, resolveView, viewParam } from '@chrischall/mcp-utils';
 import { stripOData } from '../view.js';
 import { VIEWS } from './mail.js';
+import { fetchPage, nextLinkParam, plainCollection } from './_paging.js';
 function qs(params) {
     const parts = [];
     for (const [k, v] of Object.entries(params)) {
@@ -14,7 +15,7 @@ function qs(params) {
 function collection(data, raw) {
     if (raw)
         return data;
-    return { count: data.value?.length ?? 0, items: (data.value ?? []).map(stripOData) };
+    return plainCollection(data);
 }
 export function registerDirectoryTools(server, client) {
     server.registerTool('outlook_get_profile', {
@@ -34,9 +35,10 @@ export function registerDirectoryTools(server, client) {
             view: viewParam(VIEWS),
             limit: z.number().int().min(1).max(200).optional().describe('Max contacts (default 50)'),
             skip: z.number().int().min(0).optional().describe('Offset for paging'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, limit, skip }) => {
-        const data = await client.get(`/me/contacts${qs({
+    }, async ({ view, limit, skip, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/contacts${qs({
             $top: limit ?? 50,
             $skip: skip,
             // `MobilePhone1`, not `MobilePhone`: the latter is the Graph name and
@@ -51,9 +53,10 @@ export function registerDirectoryTools(server, client) {
         inputSchema: z.object({
             view: viewParam(VIEWS),
             limit: z.number().int().min(1).max(100).optional().describe('Max people (default 25)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, limit }) => {
-        const data = await client.get(`/me/people${qs({
+    }, async ({ view, limit, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/people${qs({
             $top: limit ?? 25,
             $select: 'Id,DisplayName,ScoredEmailAddresses,JobTitle,CompanyName',
         })}`);
@@ -65,9 +68,10 @@ export function registerDirectoryTools(server, client) {
         inputSchema: z.object({
             view: viewParam(VIEWS),
             limit: z.number().int().min(1).max(200).optional().describe('Max tasks (default 50)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, limit }) => {
-        const data = await client.get(`/me/tasks${qs({
+    }, async ({ view, limit, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/tasks${qs({
             $top: limit ?? 50,
             $select: 'Id,Subject,Status,Importance,DueDateTime,CompletedDateTime',
         })}`);

package/dist/tools/mail.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { minifiedResult, resolveView, viewParam, McpToolError } from '@chrischall/mcp-utils';
-import { compactFolder, compactMessage, fullMessage, projectCollection, stripOData, } from '../view.js';
+import { compactFolder, compactMessage, fullMessage, projectCollection, } from '../view.js';
+import { fetchPage, nextLinkParam, plainCollection } from './_paging.js';
 export const VIEWS = ['compact', 'full', 'raw'];
 /**
  * Well-known folder names the API accepts wherever a folder id is taken.
@@ -40,15 +41,16 @@ export function registerMailTools(server, client) {
         inputSchema: z.object({
             view: viewParam(VIEWS),
             limit: z.number().int().min(1).max(200).optional().describe('Max folders (default 50)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, limit }) => {
-        const data = await client.get(`/me/mailfolders${qs({ $top: limit ?? 50 })}`);
+    }, async ({ view, limit, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/mailfolders${qs({ $top: limit ?? 50 })}`);
         if (resolveView(view, VIEWS) === 'raw')
             return minifiedResult(data);
         return minifiedResult(projectCollection(data, compactFolder, 'mail folder'));
     });
     server.registerTool('outlook_list_messages', {
-        description: "List messages in a folder, newest first. Defaults to the inbox. Use `unreadOnly` for a triage view. Bodies are NOT included — call outlook_get_message for one. Note `search` and `unreadOnly` cannot be combined (the API rejects $search with $filter); pass `search` alone to search the whole mailbox.",
+        description: "List messages in a folder, newest first. Defaults to the inbox. Use `unreadOnly` for a triage view. Bodies are NOT included — call outlook_get_message for one. Note `search` and `unreadOnly` cannot be combined on a first-page request (the API rejects $search with $filter); pass `search` alone to search the whole mailbox. When following a `nextLink`, both are ignored, so echoing them back is harmless.",
         annotations: { readOnlyHint: true },
         inputSchema: z.object({
             view: viewParam(VIEWS),
@@ -62,10 +64,13 @@ export function registerMailTools(server, client) {
             search: z
                 .string()
                 .optional()
-                .describe('Full-text search across the whole mailbox; cannot combine with unreadOnly'),
+                .describe('Full-text search across the whole mailbox; cannot combine with unreadOnly on a first page (ignored with nextLink)'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ view, folder, limit, skip, unreadOnly, search }) => {
-        if (search !== undefined && unreadOnly === true) {
+    }, async ({ view, folder, limit, skip, unreadOnly, search, nextLink }) => {
+        // With nextLink the filters come from the link and are ignored here, so
+        // the conflict only matters for a first-page request.
+        if (nextLink === undefined && search !== undefined && unreadOnly === true) {
             throw new McpToolError('`search` and `unreadOnly` cannot be combined.', {
                 hint: 'Outlook rejects $search together with $filter. Search first, then filter the results.',
             });
@@ -86,7 +91,7 @@ export function registerMailTools(server, client) {
             if (unreadOnly === true)
                 params.$filter = 'IsRead eq false';
         }
-        const data = await client.get(`${base}${qs(params)}`);
+        const data = await fetchPage(client, nextLink, `${base}${qs(params)}`);
         const v = resolveView(view, VIEWS);
         if (v === 'raw')
             return minifiedResult(data);
@@ -117,14 +122,12 @@ export function registerMailTools(server, client) {
         annotations: { readOnlyHint: true },
         inputSchema: z.object({
             id: z.string().min(1).describe('Message Id'),
+            nextLink: nextLinkParam,
         }),
-    }, async ({ id }) => {
-        const data = await client.get(`/me/messages/${encodeURIComponent(id)}/attachments${qs({
+    }, async ({ id, nextLink }) => {
+        const data = await fetchPage(client, nextLink, `/me/messages/${encodeURIComponent(id)}/attachments${qs({
             $select: 'Id,Name,Size,ContentType',
         })}`);
-        return minifiedResult({
-            count: data.value?.length ?? 0,
-            items: (data.value ?? []).map(stripOData),
-        });
+        return minifiedResult(plainCollection(data));
     });
 }

package/dist/version.js

@@ -10,4 +10,4 @@
  * line below and nowhere else — not even in prose.
  */
 export const PACKAGE_NAME = 'office-outlook-mcp';
-export const VERSION = '0.1.5'; // x-release-please-version
+export const VERSION = '0.2.0'; // x-release-please-version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrischall/office-outlook-mcp",
-  "version": "0.1.5",
+  "version": "0.2.0",
   "mcpName": "io.github.chrischall/office-outlook-mcp",
   "description": "Outlook / Microsoft 365 MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/office-outlook-mcp",
     "source": "github"
   },
-  "version": "0.1.5",
+  "version": "0.2.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@chrischall/office-outlook-mcp",
-      "version": "0.1.5",
+      "version": "0.2.0",
       "transport": {
         "type": "stdio"
       },