@chrischall/office-outlook-mcp 0.5.0 → 0.5.1

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Outlook / Microsoft 365 — mail, calendar, contacts and tasks via natural language",
-    "version": "0.5.0"
+    "version": "0.5.1"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Outlook (Microsoft 365)",
       "source": "./",
       "description": "MCP server for Outlook / Microsoft 365 — triage unread mail, reply, answer meeting invites and schedule meetings, plus folders, calendar, contacts and tasks, with confirmation before anything is sent",
-      "version": "0.5.0",
+      "version": "0.5.1",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "office-outlook-mcp",
   "displayName": "Outlook (Microsoft 365)",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Outlook / Microsoft 365 for Claude — triage unread mail, reply, answer meeting invites and schedule meetings, plus folders, calendar, contacts and tasks, with confirmation before anything is sent, using your signed-in browser session",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -180,7 +180,10 @@ An agent can work through new mail end to end without opening Outlook:
    there are more.
 2. **Act on each item** —
    - an invite: `outlook_respond_to_invite` with the message id and
-     `accept`, `tentative` or `decline` (and an optional comment);
+     `accept`, `tentative` or `decline` (and an optional comment). Once you
+     respond, Outlook moves the invite message to Deleted Items under a new
+     id, so an answered invite is already filed — skip steps 3 and 4 for it
+     (its old id would 404);
    - a message that needs an answer: `outlook_reply` (`reply`, `replyAll` or
      `forward`), or `draftOnly: true` to leave it in Drafts for you to review;
    - a request for a meeting: `outlook_find_meeting_times` for the attendees,
@@ -190,8 +193,9 @@ An agent can work through new mail end to end without opening Outlook:
    `outlook_list_categories`) and marks read up to 50 messages in one call;
    `outlook_move_message` moves one to another folder.
 4. **Mark it handled** — `outlook_mark_read` (or `isRead: true` on
-   `outlook_update_message`), so the next `outlook_get_unread` returns only
-   what is still new.
+   `outlook_update_message`) on the plain mail you handled, so the next
+   `outlook_get_unread` returns only what is still new. Answered invites are
+   already out of the inbox (see step 2).
 
 Replies, forwards, invite responses and new meetings reach other people, so
 each asks you to confirm first — except a reply saved with `draftOnly: true`

package/dist/bundle.js

@@ -37588,7 +37588,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     PACKAGE_NAME = "office-outlook-mcp";
-    VERSION = "0.5.0";
+    VERSION = "0.5.1";
   }
 });
 
@@ -49246,7 +49246,7 @@ function registerMailTools(server, client2) {
   server.registerTool(
     "outlook_get_unread",
     {
-      description: 'Triage batch: the unread messages in a folder (default inbox), newest first, each WITH its plain-text body (truncated to `maxBodyChars`) in one call \u2014 no follow-up outlook_get_message needed. Every item has a `kind`: "mail", "meetingRequest", "meetingCancelled" or "meetingResponse" (a reply to an invite you sent). Requests and cancellations also carry `event` (id, time, organizer, your current `responseStatus`) so the invite can be answered by its event id (when the meeting is no longer on your calendar \u2014 already declined, cancelled or deleted \u2014 the item has a `hint` instead and there is nothing to respond to). `to`/`cc` list at most 20 addresses; a longer list adds `toCount`/`ccCount` and `toTruncated`/`ccTruncated`. This does NOT mark anything read. Processing loop: read the batch \u2192 act on each item (reply, respond to the invite, file, flag \u2014 or leave it) \u2192 call outlook_mark_read on the ids you handled, so the next call returns only what is still new. Follow `nextLink` for more. ' + UNTRUSTED_DESCRIPTION_SUFFIX,
+      description: 'Triage batch: the unread messages in a folder (default inbox), newest first, each WITH its plain-text body (truncated to `maxBodyChars`) in one call \u2014 no follow-up outlook_get_message needed. Every item has a `kind`: "mail", "meetingRequest", "meetingCancelled" or "meetingResponse" (a reply to an invite you sent). Requests and cancellations also carry `event` (id, time, organizer, your current `responseStatus`) so the invite can be answered by its event id (when the meeting is no longer on your calendar \u2014 already declined, cancelled or deleted \u2014 the item has a `hint` instead and there is nothing to respond to). `to`/`cc` list at most 20 addresses; a longer list adds `toCount`/`ccCount` and `toTruncated`/`ccTruncated`. This does NOT mark anything read. Processing loop: read the batch \u2192 act on each item (reply, respond to the invite, file, flag \u2014 or leave it) \u2192 call outlook_mark_read on the plain mail you handled, so the next call returns only what is still new. An invite you answer with outlook_respond_to_invite needs no mark-read: Outlook moves it to Deleted Items under a new id, so its old id would 404. Follow `nextLink` for more. ' + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
       inputSchema: external_exports.object({
         folder: external_exports.string().min(1).optional().describe('Folder id or well-known name (default "inbox")'),
@@ -49465,7 +49465,7 @@ function registerCalendarTools(server, client2) {
   server.registerTool(
     "outlook_list_events",
     {
-      description: 'List calendar events in a date window. This uses the calendar VIEW, which expands recurring series into their individual occurrences \u2014 the right tool for "what is on my schedule". Times are returned in `timeZone` when given. ' + UNTRUSTED_DESCRIPTION_SUFFIX,
+      description: 'List calendar events in a date window. This uses the calendar VIEW, which expands recurring series into their individual occurrences \u2014 the right tool for "what is on my schedule". Times are returned in `timeZone` when given. view:"raw" returns Outlook\'s records as-is and uncapped; the list carries no Attendees in any view \u2014 outlook_get_event returns them. ' + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
@@ -49505,7 +49505,7 @@ function registerCalendarTools(server, client2) {
   server.registerTool(
     "outlook_get_event",
     {
-      description: "Get one calendar event in full, including attendees and their responses. " + UNTRUSTED_DESCRIPTION_SUFFIX,
+      description: `Get one calendar event in full, including attendees and their responses. Attendees appear in view:"full", every one of them \u2014 there is no 20-address cap as on a message's To/Cc; view:"raw" returns Outlook's untouched record, uncapped, Attendees included. ` + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
@@ -49851,6 +49851,7 @@ async function writeOrUnknown(run, checkWhere) {
 }
 var INVITE_EVENT_SELECT = "Id,Subject,IsOrganizer,IsCancelled,Start,End,Organizer,ResponseStatus";
 var DELETE_EVENT_SELECT = "Id,Subject,IsOrganizer,IsCancelled,ResponseStatus,Type,SeriesMasterId,Start,End,Organizer,Attendees";
+var INVITE_FILED_NOTE = "Outlook moves the invite message out of your inbox (to Deleted Items, under a new id) once you respond, so it is already filed: do not call outlook_mark_read or outlook_move_message on its old id.";
 var INVITE_RESPONSES = {
   accept: { verb: "accept", status: "Accepted" },
   tentative: { verb: "tentativelyaccept", status: "TentativelyAccepted" },
@@ -50327,7 +50328,7 @@ function registerWriteTools(server, client2) {
   server.registerTool(
     "outlook_respond_to_invite",
     {
-      description: "Accept, tentatively accept or decline a meeting invitation. Pass the invite's `messageId` (from outlook_get_unread, which marks it kind \"meetingRequest\") or the event's `eventId` \u2014 exactly one. The organizer is sent your response unless `sendResponse: false`, in which case only your calendar changes and no confirmation is asked. Cancelled meetings and meetings you organize are refused. The result is verified by re-reading the event's response status; a declined meeting may leave your calendar entirely. " + CONFIRM_FLOW_SENTENCE + " " + TIMEOUT_SENTENCE + " " + CONFIRM_INJECTION_RULE,
+      description: "Accept, tentatively accept or decline a meeting invitation. Pass the invite's `messageId` (from outlook_get_unread, which marks it kind \"meetingRequest\") or the event's `eventId` \u2014 exactly one. The organizer is sent your response unless `sendResponse: false`, in which case only your calendar changes and no confirmation is asked. Cancelled meetings and meetings you organize are refused. The result is verified by re-reading the event's response status; a declined meeting may leave your calendar entirely. Outlook then moves the invite message itself to Deleted Items (under a new id), so an answered invite needs no outlook_mark_read. " + CONFIRM_FLOW_SENTENCE + " " + TIMEOUT_SENTENCE + " " + CONFIRM_INJECTION_RULE,
       annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },
       inputSchema: external_exports.object({
         messageId: external_exports.string().min(1).optional().describe("Id of the invite message (resolved to its event). Give this or eventId."),
@@ -50420,14 +50421,16 @@ function registerWriteTools(server, client2) {
             eventId: id,
             response: status,
             sentResponse: notify,
-            note: "The declined meeting is no longer on your calendar."
+            note: "The declined meeting is no longer on your calendar.",
+            inviteMessage: INVITE_FILED_NOTE
           });
         }
         return minifiedResult({
           responded: null,
           eventId: id,
           sentResponse: notify,
-          warning: `Outlook accepted the response but re-reading the event failed (${e instanceof Error ? e.message : String(e)}), so it is unverified.`
+          warning: `Outlook accepted the response but re-reading the event failed (${e instanceof Error ? e.message : String(e)}), so it is unverified.`,
+          inviteMessage: INVITE_FILED_NOTE
         });
       }
       const got = after?.ResponseStatus?.Response;
@@ -50436,7 +50439,8 @@ function registerWriteTools(server, client2) {
         eventId: id,
         response: got,
         sentResponse: notify,
-        ...got === status ? {} : { warning: `Outlook accepted the response but the status did not change (still ${got ?? "unknown"}).` }
+        ...got === status ? {} : { warning: `Outlook accepted the response but the status did not change (still ${got ?? "unknown"}).` },
+        inviteMessage: INVITE_FILED_NOTE
       });
     }
   );
@@ -50557,12 +50561,26 @@ function registerWriteTools(server, client2) {
             ...forwardTo
           });
         } catch (e) {
+          const what = `your comment${mode === "forward" ? " and recipients" : ""}`;
+          const reason = e instanceof Error ? e.message : String(e);
+          if (isCredentialFailure(e)) {
+            throw new McpToolError(
+              `The reply draft was created (draftId ${created.Id}) but adding ${what} failed: ${reason}`,
+              {
+                hint: `${e instanceof McpToolError && e.hint ? `${e.hint} ` : ""}Then edit draft ${created.Id} in Drafts, or delete it before trying again.`,
+                cause: e,
+                kind: errorKindOf(e),
+                status: errorStatusOf(e)
+              }
+            );
+          }
+          const warning = e instanceof WriteOutcomeUnknownError ? `The draft was created, and ${what} may have been applied: Outlook did not confirm the edit (${e.timedOut ? "it did not answer in time" : "the connection dropped"}). Check the draft in Drafts before editing it again or trying again.` : `The draft was created but adding ${what} failed (${reason}). Edit it in Drafts, or delete it before trying again.`;
           return minifiedResult({
             drafted: true,
             mode,
             draftId: created.Id,
             WebLink: created.WebLink,
-            warning: `The draft was created but adding your comment${mode === "forward" ? " and recipients" : ""} failed (${e instanceof Error ? e.message : String(e)}). Edit it in Drafts, or delete it before trying again.`
+            warning
           });
         }
         return minifiedResult({ drafted: true, mode, draftId: created.Id, WebLink: created.WebLink });

package/dist/tools/calendar.js

@@ -40,7 +40,7 @@ function trimTime(dt) {
 const attendeeList = (what) => z.array(z.string().min(3)).describe(`Email addresses of ${what}`);
 export function registerCalendarTools(server, client) {
     server.registerTool('outlook_list_events', {
-        description: 'List calendar events in a date window. This uses the calendar VIEW, which expands recurring series into their individual occurrences — the right tool for "what is on my schedule". Times are returned in `timeZone` when given.' +
+        description: 'List calendar events in a date window. This uses the calendar VIEW, which expands recurring series into their individual occurrences — the right tool for "what is on my schedule". Times are returned in `timeZone` when given. view:"raw" returns Outlook\'s records as-is and uncapped; the list carries no Attendees in any view — outlook_get_event returns them.' +
             ' ' + UNTRUSTED_DESCRIPTION_SUFFIX,
         annotations: { readOnlyHint: true, openWorldHint: true },
         inputSchema: z.object({
@@ -75,7 +75,7 @@ export function registerCalendarTools(server, client) {
         return mailboxUntrusted(projectCollection(data, v === 'full' ? fullEvent : compactEvent, 'event'));
     });
     server.registerTool('outlook_get_event', {
-        description: 'Get one calendar event in full, including attendees and their responses.' +
+        description: 'Get one calendar event in full, including attendees and their responses. Attendees appear in view:"full", every one of them — there is no 20-address cap as on a message\'s To/Cc; view:"raw" returns Outlook\'s untouched record, uncapped, Attendees included.' +
             ' ' + UNTRUSTED_DESCRIPTION_SUFFIX,
         annotations: { readOnlyHint: true, openWorldHint: true },
         inputSchema: z.object({

package/dist/tools/mail.js

@@ -240,7 +240,7 @@ export function registerMailTools(server, client) {
         return mailboxUntrusted(v === 'full' ? fullMessage(data) : compactMessage(data));
     });
     server.registerTool('outlook_get_unread', {
-        description: 'Triage batch: the unread messages in a folder (default inbox), newest first, each WITH its plain-text body (truncated to `maxBodyChars`) in one call — no follow-up outlook_get_message needed. Every item has a `kind`: "mail", "meetingRequest", "meetingCancelled" or "meetingResponse" (a reply to an invite you sent). Requests and cancellations also carry `event` (id, time, organizer, your current `responseStatus`) so the invite can be answered by its event id (when the meeting is no longer on your calendar — already declined, cancelled or deleted — the item has a `hint` instead and there is nothing to respond to). `to`/`cc` list at most 20 addresses; a longer list adds `toCount`/`ccCount` and `toTruncated`/`ccTruncated`. This does NOT mark anything read. Processing loop: read the batch → act on each item (reply, respond to the invite, file, flag — or leave it) → call outlook_mark_read on the ids you handled, so the next call returns only what is still new. Follow `nextLink` for more.' +
+        description: 'Triage batch: the unread messages in a folder (default inbox), newest first, each WITH its plain-text body (truncated to `maxBodyChars`) in one call — no follow-up outlook_get_message needed. Every item has a `kind`: "mail", "meetingRequest", "meetingCancelled" or "meetingResponse" (a reply to an invite you sent). Requests and cancellations also carry `event` (id, time, organizer, your current `responseStatus`) so the invite can be answered by its event id (when the meeting is no longer on your calendar — already declined, cancelled or deleted — the item has a `hint` instead and there is nothing to respond to). `to`/`cc` list at most 20 addresses; a longer list adds `toCount`/`ccCount` and `toTruncated`/`ccTruncated`. This does NOT mark anything read. Processing loop: read the batch → act on each item (reply, respond to the invite, file, flag — or leave it) → call outlook_mark_read on the plain mail you handled, so the next call returns only what is still new. An invite you answer with outlook_respond_to_invite needs no mark-read: Outlook moves it to Deleted Items under a new id, so its old id would 404. Follow `nextLink` for more.' +
             ' ' + UNTRUSTED_DESCRIPTION_SUFFIX,
         annotations: { readOnlyHint: true, openWorldHint: true },
         inputSchema: z.object({

package/dist/tools/writes.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { CONFIRM_FLOW_SENTENCE, CONFIRM_INJECTION_RULE, confirmTokenParam, confirmWrite, errorStatusOf, mapWithConcurrency, McpToolError, minifiedResult, WriteOutcomeUnknownError, } from '@chrischall/mcp-utils';
+import { CONFIRM_FLOW_SENTENCE, CONFIRM_INJECTION_RULE, confirmTokenParam, confirmWrite, errorKindOf, errorStatusOf, mapWithConcurrency, McpToolError, minifiedResult, WriteOutcomeUnknownError, } from '@chrischall/mcp-utils';
 import { isCredentialFailure } from '../client.js';
 import { mailboxTimeZone } from '../timezone.js';
 import { cappedRecipients, MAX_RECIPIENTS } from '../view.js';
@@ -90,6 +90,12 @@ async function writeOrUnknown(run, checkWhere) {
 }
 const INVITE_EVENT_SELECT = 'Id,Subject,IsOrganizer,IsCancelled,Start,End,Organizer,ResponseStatus';
 const DELETE_EVENT_SELECT = 'Id,Subject,IsOrganizer,IsCancelled,ResponseStatus,Type,SeriesMasterId,Start,End,Organizer,Attendees';
+/**
+ * What happens to the invite MESSAGE once you respond. Live 2026-10-10:
+ * Outlook moves it to Deleted Items under a new id, so the triage loop's
+ * "respond, then outlook_mark_read the ids you handled" 404'd on every invite.
+ */
+const INVITE_FILED_NOTE = 'Outlook moves the invite message out of your inbox (to Deleted Items, under a new id) once you respond, so it is already filed: do not call outlook_mark_read or outlook_move_message on its old id.';
 /** Tool input → the action segment Outlook takes and the ResponseStatus it should leave. */
 const INVITE_RESPONSES = {
     accept: { verb: 'accept', status: 'Accepted' },
@@ -655,7 +661,7 @@ export function registerWriteTools(server, client) {
         });
     });
     server.registerTool('outlook_respond_to_invite', {
-        description: 'Accept, tentatively accept or decline a meeting invitation. Pass the invite\'s `messageId` (from outlook_get_unread, which marks it kind "meetingRequest") or the event\'s `eventId` — exactly one. The organizer is sent your response unless `sendResponse: false`, in which case only your calendar changes and no confirmation is asked. Cancelled meetings and meetings you organize are refused. The result is verified by re-reading the event\'s response status; a declined meeting may leave your calendar entirely.' +
+        description: 'Accept, tentatively accept or decline a meeting invitation. Pass the invite\'s `messageId` (from outlook_get_unread, which marks it kind "meetingRequest") or the event\'s `eventId` — exactly one. The organizer is sent your response unless `sendResponse: false`, in which case only your calendar changes and no confirmation is asked. Cancelled meetings and meetings you organize are refused. The result is verified by re-reading the event\'s response status; a declined meeting may leave your calendar entirely. Outlook then moves the invite message itself to Deleted Items (under a new id), so an answered invite needs no outlook_mark_read.' +
             ' ' +
             CONFIRM_FLOW_SENTENCE +
             ' ' +
@@ -765,6 +771,7 @@ export function registerWriteTools(server, client) {
                     response: status,
                     sentResponse: notify,
                     note: 'The declined meeting is no longer on your calendar.',
+                    inviteMessage: INVITE_FILED_NOTE,
                 });
             }
             return minifiedResult({
@@ -772,6 +779,7 @@ export function registerWriteTools(server, client) {
                 eventId: id,
                 sentResponse: notify,
                 warning: `Outlook accepted the response but re-reading the event failed (${e instanceof Error ? e.message : String(e)}), so it is unverified.`,
+                inviteMessage: INVITE_FILED_NOTE,
             });
         }
         const got = after?.ResponseStatus?.Response;
@@ -783,6 +791,7 @@ export function registerWriteTools(server, client) {
             ...(got === status
                 ? {}
                 : { warning: `Outlook accepted the response but the status did not change (still ${got ?? 'unknown'}).` }),
+            inviteMessage: INVITE_FILED_NOTE,
         });
     });
     server.registerTool('outlook_delete_event', {
@@ -925,14 +934,31 @@ export function registerWriteTools(server, client) {
                 });
             }
             catch (e) {
+                const what = `your comment${mode === 'forward' ? ' and recipients' : ''}`;
+                const reason = e instanceof Error ? e.message : String(e);
+                // A rejected or missing credential is not about this draft: every
+                // next call fails the same way, so it stays the tool error — with
+                // the draft id in it, so a retry does not leave a second draft.
+                if (isCredentialFailure(e)) {
+                    throw new McpToolError(`The reply draft was created (draftId ${created.Id}) but adding ${what} failed: ${reason}`, {
+                        hint: `${e instanceof McpToolError && e.hint ? `${e.hint} ` : ''}Then edit draft ${created.Id} in Drafts, or delete it before trying again.`,
+                        cause: e,
+                        kind: errorKindOf(e),
+                        status: errorStatusOf(e),
+                    });
+                }
                 // The draft exists either way; an error here would hide its id and
-                // invite a retry that leaves a second one.
+                // invite a retry that leaves a second one. A PATCH that was sent
+                // but never answered may well have landed, so it is not "failed".
+                const warning = e instanceof WriteOutcomeUnknownError
+                    ? `The draft was created, and ${what} may have been applied: Outlook did not confirm the edit (${e.timedOut ? 'it did not answer in time' : 'the connection dropped'}). Check the draft in Drafts before editing it again or trying again.`
+                    : `The draft was created but adding ${what} failed (${reason}). Edit it in Drafts, or delete it before trying again.`;
                 return minifiedResult({
                     drafted: true,
                     mode,
                     draftId: created.Id,
                     WebLink: created.WebLink,
-                    warning: `The draft was created but adding your comment${mode === 'forward' ? ' and recipients' : ''} failed (${e instanceof Error ? e.message : String(e)}). Edit it in Drafts, or delete it before trying again.`,
+                    warning,
                 });
             }
             return minifiedResult({ drafted: true, mode, draftId: created.Id, WebLink: created.WebLink });

package/dist/version.js

@@ -10,4 +10,4 @@
  * line below and nowhere else — not even in prose.
  */
 export const PACKAGE_NAME = 'office-outlook-mcp';
-export const VERSION = '0.5.0'; // x-release-please-version
+export const VERSION = '0.5.1'; // x-release-please-version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrischall/office-outlook-mcp",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "mcpName": "io.github.chrischall/office-outlook-mcp",
   "description": "Outlook / Microsoft 365 MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/office-outlook-mcp",
     "source": "github"
   },
-  "version": "0.5.0",
+  "version": "0.5.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@chrischall/office-outlook-mcp",
-      "version": "0.5.0",
+      "version": "0.5.1",
       "transport": {
         "type": "stdio"
       },
@@ -70,6 +70,34 @@
           "description": "Absolute path where the fetchproxy long-term identity keypair is stored (default ~/.fetchproxy/identity/).",
           "isRequired": false,
           "format": "string"
+        },
+        {
+          "name": "MCP_CONFIRM_MODE",
+          "description": "What outlook_send_mail, outlook_reply, outlook_respond_to_invite and the other write tools do on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop): \"ask-user\" (default: the first call returns a preview and a confirmToken, and the model must get your approval in chat before using it), \"auto\" (the model may use the token after reviewing the preview itself) or \"refuse\". An unrecognised value is treated as refuse.",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
+        },
+        {
+          "name": "MCP_CONFIRM_ELICITATION",
+          "description": "\"off\" never shows a confirmation prompt, so every client gets the MCP_CONFIRM_MODE flow. Set it for a client that says it can show prompts but never does. Defaults to on.",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
+        },
+        {
+          "name": "MCP_CONFIRM_TTL_SECONDS",
+          "description": "How long a confirmToken stays valid, in seconds. Defaults to 600.",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false
+        },
+        {
+          "name": "MCP_CONFIRM_SECRET",
+          "description": "Signing key for confirmTokens. Random per process by default; set it only if tokens must survive a server restart.",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": true
         }
       ]
     }