@chrischall/office-outlook-mcp 0.6.2 → 0.7.0

package/dist/tools/mail.js

@@ -99,7 +99,7 @@ function stripUndefined(o) {
     return Object.fromEntries(Object.entries(o).filter(([, v]) => v !== undefined));
 }
 /** Metadata probe for one attachment: never the bytes. */
-const ATTACHMENT_META_SELECT = 'Id,Name,ContentType,Size,IsInline';
+export const ATTACHMENT_META_SELECT = 'Id,Name,ContentType,Size,IsInline';
 /** Above this an attachment is never inlined, whatever its type (base64 inflates it ~4/3 again). */
 const MAX_INLINE_BYTES = 5 * 1024 * 1024;
 /** Decoded text is cut here; a longer file is marked `textTruncated`. */
@@ -110,7 +110,7 @@ const MAX_TEXT_BYTES = 200 * 1024;
  */
 const TEXT_TYPE = /^text\/|^application\/(json|xml|csv|ics|calendar)\b|\+(json|xml)$/i;
 const TEXT_EXT = /\.(txt|csv|tsv|json|xml|ics|md|log|html?)$/i;
-function attachmentKind(a) {
+export function attachmentKind(a) {
     const type = a['@odata.type'] ?? '';
     if (/ItemAttachment$/.test(type))
         return 'item';
@@ -126,7 +126,7 @@ function isText(contentType, name) {
     return TEXT_TYPE.test(contentType) || /svg/i.test(contentType) || TEXT_EXT.test(name);
 }
 /** Decoded size of a base64 string, without decoding it (an upper bound if it has stray characters). */
-function base64DecodedLength(b64) {
+export function base64DecodedLength(b64) {
     const padding = b64.endsWith('==') ? 2 : b64.endsWith('=') ? 1 : 0;
     return Math.floor((b64.length * 3) / 4) - padding;
 }
@@ -283,7 +283,7 @@ export function registerMailTools(server, client) {
             return mailboxUntrusted(data);
         return mailboxUntrusted(v === 'full' ? fullMessage(data) : compactMessage(data));
     });
-    server.registerTool('outlook_get_unread', {
+    server.registerTool('outlook_list_unread_messages', {
         description: 'Triage batch: the unread messages in a folder (default inbox), newest first, each WITH its plain-text body (truncated to `maxBodyChars`) in one call — no follow-up outlook_get_message needed. Every item has a `kind`: "mail", "meetingRequest", "meetingCancelled" or "meetingResponse" (a reply to an invite you sent). Requests and cancellations also carry `event` (id, time, organizer, your current `responseStatus`) so the invite can be answered by its event id (when the meeting is no longer on your calendar — already declined, cancelled or deleted — the item has a `hint` instead and there is nothing to respond to). `to`/`cc` list at most 20 addresses; a longer list adds `toCount`/`ccCount` and `toTruncated`/`ccTruncated`. This does NOT mark anything read. Processing loop: read the batch → act on each item (reply, respond to the invite, file, flag — or leave it) → call outlook_mark_read on the plain mail you handled, so the next call returns only what is still new. An invite you answer with outlook_respond_to_invite needs no mark-read: Outlook moves it to Deleted Items under a new id, so its old id would 404. Follow `nextLink` for more. ' +
             FROM_DESCRIPTION +
             ' Cannot combine with `sinceHours` or `nextLink`.' +

package/dist/tools/writes.js

@@ -190,7 +190,7 @@ export const createEventInput = z.object({
     confirmToken: confirmTokenParam,
 });
 export function registerWriteTools(server, client) {
-    server.registerTool('outlook_send_mail', {
+    server.registerTool('outlook_send_message', {
         description: 'Send an email from the signed-in mailbox.' +
             ' ' +
             CONFIRM_FLOW_SENTENCE +
@@ -221,7 +221,7 @@ export function registerWriteTools(server, client) {
         };
         const recipients = [...(to ?? []), ...(cc ?? []), ...(bcc ?? [])].join(', ');
         const gate = await confirmWrite(ctx, {
-            tool: 'outlook_send_mail',
+            tool: 'outlook_send_message',
             action: 'mail.send',
             message: 'Review and confirm this email before it is sent:',
             summary: `Send mail "${subject}" to ${recipients || '(no recipients)'}`,
@@ -305,7 +305,7 @@ export function registerWriteTools(server, client) {
         });
     });
     server.registerTool('outlook_update_message', {
-        description: 'Flag, categorise and/or mark read up to 50 messages at once — the filing step of the triage loop (outlook_get_unread → act → update). `flag`: "flagged", "complete" or "none". `categories` replaces a message\'s categories; `addCategories`/`removeCategories` edit each message\'s current list instead (names from outlook_list_categories). Duplicate ids are collapsed, so each message is written once. Each id gets its own result `{ id, ok, error? }`, verified against what Outlook stored; one failure does not stop the rest, but a rejected or missing credential fails the whole call. Only your mailbox changes — nobody is notified.' +
+        description: 'Flag, categorise and/or mark read up to 50 messages at once — the filing step of the triage loop (outlook_list_unread_messages → act → update). `flag`: "flagged", "complete" or "none". `categories` replaces a message\'s categories; `addCategories`/`removeCategories` edit each message\'s current list instead (names from outlook_list_categories). Duplicate ids are collapsed, so each message is written once. Each id gets its own result `{ id, ok, error? }`, verified against what Outlook stored; one failure does not stop the rest, but a rejected or missing credential fails the whole call. Only your mailbox changes — nobody is notified.' +
             ' ' +
             CONFIRM_FLOW_SENTENCE,
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },
@@ -661,7 +661,7 @@ export function registerWriteTools(server, client) {
         });
     });
     server.registerTool('outlook_respond_to_invite', {
-        description: 'Accept, tentatively accept or decline a meeting invitation. Pass the invite\'s `messageId` (from outlook_get_unread, which marks it kind "meetingRequest") or the event\'s `eventId` — exactly one. The organizer is sent your response unless `sendResponse: false`, in which case only your calendar changes and no confirmation is asked. Cancelled meetings and meetings you organize are refused. The result is verified by re-reading the event\'s response status; a declined meeting may leave your calendar entirely. Outlook then moves the invite message itself to Deleted Items (under a new id), so an answered invite needs no outlook_mark_read.' +
+        description: 'Accept, tentatively accept or decline a meeting invitation. Pass the invite\'s `messageId` (from outlook_list_unread_messages, which marks it kind "meetingRequest") or the event\'s `eventId` — exactly one. The organizer is sent your response unless `sendResponse: false`, in which case only your calendar changes and no confirmation is asked. Cancelled meetings and meetings you organize are refused. The result is verified by re-reading the event\'s response status; a declined meeting may leave your calendar entirely. Outlook then moves the invite message itself to Deleted Items (under a new id), so an answered invite needs no outlook_mark_read.' +
             ' ' +
             CONFIRM_FLOW_SENTENCE +
             ' ' +
@@ -702,7 +702,7 @@ export function registerWriteTools(server, client) {
                     throw new McpToolError("This invite's meeting is no longer on your calendar (already declined, cancelled or deleted) — there is nothing to respond to.", { hint: "Mark the invite read or file it; answering it again is not possible." });
                 }
                 throw new McpToolError('That message is not a meeting invite.', {
-                    hint: 'Only messages outlook_get_unread marks kind "meetingRequest" carry an event to answer.',
+                    hint: 'Only messages outlook_list_unread_messages marks kind "meetingRequest" carry an event to answer.',
                 });
             }
         }
@@ -907,7 +907,7 @@ export function registerWriteTools(server, client) {
         }
         if (mode !== 'forward' && to?.length) {
             throw new McpToolError('`to` applies only to a forward.', {
-                hint: 'A reply goes where Outlook computes; use mode "forward" to send it somewhere else, or outlook_send_mail.',
+                hint: 'A reply goes where Outlook computes; use mode "forward" to send it somewhere else, or outlook_send_message.',
             });
         }
         const { send, draft, prefix } = REPLY_MODES[mode];

package/dist/version.js

@@ -10,4 +10,4 @@
  * line below and nowhere else — not even in prose.
  */
 export const PACKAGE_NAME = 'office-outlook-mcp';
-export const VERSION = '0.6.2'; // x-release-please-version
+export const VERSION = '0.7.0'; // x-release-please-version

package/mint.yaml

@@ -5,6 +5,13 @@ summary: >-
   Outlook / Microsoft 365 for Claude — triage unread mail, reply, answer meeting
   invites and schedule meetings, plus folders, calendar, contacts and tasks,
   with confirmation before anything is sent
+examples:
+  - prompt: Go through my unread Outlook inbox and summarise what needs a reply today.
+    note: Reads unread mail with bodies in one batch; nothing is marked read.
+  - prompt: What's on my work calendar for the rest of this week?
+    note: Recurring meetings are expanded into their individual occurrences.
+  - prompt: Which of my Outlook tasks are due this week?
+    note: Lists tasks with their status and due dates, read-only; Claude picks out the ones due this week.
 #
 # Hosting note (a comment, not user-facing summary text): this MCP mints its
 # credential through the fetchproxy BROWSER BRIDGE. It is not a full-bridge

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrischall/office-outlook-mcp",
-  "version": "0.6.2",
+  "version": "0.7.0",
   "mcpName": "io.github.chrischall/office-outlook-mcp",
   "description": "Outlook / Microsoft 365 MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -45,7 +45,7 @@
     "typecheck": "tsc -p tsconfig.check.json"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^3.1.0",
+    "@chrischall/mcp-utils": "^3.3.0",
     "@fetchproxy/server": "^3.6.2",
     "@modelcontextprotocol/server": "^2.3.0",
     "dotenv": "^18.0.1",
@@ -58,5 +58,9 @@
     "esbuild": "^0.28.1",
     "typescript": "^7.0.2",
     "vitest": "^5.0.0"
+  },
+  "allowScripts": {
+    "esbuild": false,
+    "fsevents": false
   }
 }

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/office-outlook-mcp",
     "source": "github"
   },
-  "version": "0.6.2",
+  "version": "0.7.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@chrischall/office-outlook-mcp",
-      "version": "0.6.2",
+      "version": "0.7.0",
       "transport": {
         "type": "stdio"
       },
@@ -59,6 +59,12 @@
           "isRequired": false,
           "format": "string"
         },
+        {
+          "name": "OUTLOOK_OUTPUT_DIR",
+          "description": "Absolute directory where outlook_export_messages and outlook_export_events write their files. Defaults to ~/Downloads/office-outlook-mcp. When set, a per-call dest must be inside it.",
+          "isRequired": false,
+          "format": "string"
+        },
         {
           "name": "FETCHPROXY_WS_HOST",
           "description": "Bind interface for the fetchproxy concentrator, a literal IP only (default 127.0.0.1). Keep on loopback; it exists for hosted deployments that run each MCP in its own network namespace.",
@@ -73,7 +79,7 @@
         },
         {
           "name": "MCP_CONFIRM_MODE",
-          "description": "What outlook_send_mail, outlook_reply, outlook_respond_to_invite and the other write tools do on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop): \"ask-user\" (default: the first call returns a preview and a confirmToken, and the model must get your approval in chat before using it), \"auto\" (the model may use the token after reviewing the preview itself) or \"refuse\". An unrecognised value is treated as refuse.",
+          "description": "What outlook_send_message, outlook_reply, outlook_respond_to_invite and the other write tools do on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop): \"ask-user\" (default: the first call returns a preview and a confirmToken, and the model must get your approval in chat before using it), \"auto\" (the model may use the token after reviewing the preview itself) or \"refuse\". An unrecognised value is treated as refuse.",
           "isRequired": false,
           "format": "string",
           "isSecret": false