@chrischall/office-outlook-mcp 0.8.3 → 0.9.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Outlook / Microsoft 365 — mail, calendar, contacts and tasks via natural language",
-    "version": "0.8.3"
+    "version": "0.9.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Outlook (Microsoft 365)",
       "source": "./",
       "description": "MCP server for Outlook / Microsoft 365 — triage unread mail, reply, answer meeting invites and schedule meetings, plus folders, calendar, contacts and tasks, with confirmation before anything is sent",
-      "version": "0.8.3",
+      "version": "0.9.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "office-outlook-mcp",
   "displayName": "Outlook (Microsoft 365)",
-  "version": "0.8.3",
+  "version": "0.9.0",
   "description": "Outlook / Microsoft 365 for Claude — triage unread mail, reply, answer meeting invites and schedule meetings, plus folders, calendar, contacts and tasks, with confirmation before anything is sent, using your signed-in browser session",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -121,7 +121,7 @@ Everything is optional — with nothing set, the server captures from the browse
 | `OUTLOOK_CAPTURE_TIMEOUT` | Seconds to wait for the tab to make a readable request. Defaults to `30`. |
 | `OUTLOOK_TOKEN_CACHE` | `false` to stop caching the token between runs. |
 | `OUTLOOK_TOKEN_FILE` | Path to the cached token. Defaults to `~/.office-outlook-mcp/token.json`. |
-| `OUTLOOK_OUTPUT_DIR` | Absolute directory `outlook_export_messages` and `outlook_export_events` write into. Defaults to `~/Downloads/office-outlook-mcp`. When set, a per-call `dest` must be inside it. See [Bulk export](#bulk-export). |
+| `OUTLOOK_OUTPUT_DIR` | Absolute directory `outlook_export_messages` and `outlook_export_events` write into, and where a local install saves the files `outlook_get_attachment` cannot return inline. Defaults to `~/Downloads/office-outlook-mcp` (for attachments, only when `~/Downloads` exists). When set, a per-call `dest` must be inside it. See [Bulk export](#bulk-export). |
 
 ## Tools
 
@@ -131,13 +131,14 @@ Everything is optional — with nothing set, the server captures from the browse
 `outlook_list_calendars`, `outlook_find_meeting_times`,
 `outlook_get_schedule`, `outlook_get_profile`,
 `outlook_get_mailbox_settings`, `outlook_list_contacts`, `outlook_list_people`,
-`outlook_list_categories`, `outlook_list_tasks`
+`outlook_list_categories`, `outlook_list_tasks`, `outlook_list_rules`
 
 **Write** (ask you to confirm first — see [Confirmations](#confirmations)) —
 `outlook_send_message`, `outlook_create_draft`, `outlook_mark_read`,
 `outlook_update_message`, `outlook_move_message`, `outlook_create_event`,
 `outlook_update_event`, `outlook_respond_to_invite`, `outlook_delete_event`,
-`outlook_reply`.
+`outlook_reply`, `outlook_create_rule`, `outlook_update_rule`,
+`outlook_delete_rule`, `outlook_set_auto_reply`.
 Some skip the confirmation because nothing reaches anyone else:
 `outlook_create_draft` (the draft stays in Drafts until you send it from
 Outlook), `outlook_reply` with `draftOnly: true` (the reply stays in Drafts),
@@ -165,10 +166,23 @@ what that decision needs in every view: `MyResponse`, `ResponseRequested`,
 `IsOrganizer`, `IsCancelled`, `Type` (SingleInstance, Occurrence, Exception or
 SeriesMaster), `ShowAs` and `IsAllDay`, plus `SeriesMasterId` in the full view.
 
+**Rules and automatic replies** — `outlook_list_rules` shows inbox rules in the
+order Outlook applies them. `outlook_create_rule` needs at least one condition
+and one action; a rule that forwards or redirects mail names those recipients in
+its confirmation, because it keeps sending mail out until removed.
+`outlook_update_rule` sends only what you pass, and `conditions`, `exceptions`
+or `actions` replace that whole group. `outlook_set_auto_reply` changes only
+what you pass, and its confirmation shows the exact text that will go out,
+including stored text you did not change. Read the current auto-reply with
+`outlook_get_mailbox_settings`.
+
 **Export** — `outlook_export_messages` (mail) and `outlook_export_events`
 (calendar) write JSONL or Markdown files, optionally with attachments, and
 return only where they are; see [Bulk export](#bulk-export).
 
+**Copilot** — `outlook_ask_copilot` puts a question to Microsoft 365 Copilot
+with your mailbox as context; see [Microsoft 365 Copilot](#microsoft-365-copilot).
+
 **Diagnostics** — `outlook_healthcheck`
 
 Every read tool takes `view: compact | full | raw`, defaulting to **compact**.
@@ -192,8 +206,8 @@ the one read a preview makes.)
 Mail and event text is written by other people, so `outlook_list_messages`,
 `outlook_get_message`, `outlook_list_unread_messages`, `outlook_get_attachment`,
 `outlook_list_events`, `outlook_get_event`, `outlook_find_meeting_times`,
-`outlook_get_schedule`, `outlook_export_messages` and `outlook_export_events`
-wrap every result (all views) in an untrusted-content
+`outlook_get_schedule`, `outlook_export_messages`, `outlook_export_events` and
+`outlook_ask_copilot` wrap every result (all views) in an untrusted-content
 envelope — `untrusted_content: true` plus a `note` telling the model to treat
 the text as data, never instructions (a `view: raw` record that carries its
 own `untrusted_content`/`note` key is nested under `data`, so it cannot
@@ -205,6 +219,37 @@ something the model passes back itself, so keep `MCP_CONFIRM_MODE=ask-user`
 (the default) and approve each preview in chat — or use a client that asks you
 before running non-read-only tools — as the real guard on outbound sends.
 
+## Microsoft 365 Copilot
+
+`outlook_ask_copilot` sends a question to **Microsoft 365 Copilot** and returns
+its answer. Copilot searches your own mail, calendar and files server-side
+(`WorkSearch`) and writes a reply — so this is for *synthesis* across many
+messages ("what needs my attention first", "summarise the thread with X") rather
+than fetching one message, which the read tools already do. Follow-up calls
+continue the same conversation; pass `newConversation: true` to start fresh. Each
+call uses one of a per-conversation quota, reported back, and the answer comes
+back in the untrusted-data envelope like every other mail-derived read.
+
+**Setup — a one-time sign-in.** Unlike the mail token (captured from your
+browser), the Copilot token is obtained by MSAL and refreshes silently, but the
+first sign-in needs a browser with MFA. Use the sibling CLI
+[`opencode-m365-copilot`](https://github.com/chrischall/opencode-copilot-plugin):
+
+```sh
+npm install -g opencode-m365-copilot
+opencode-m365 login        # one-time browser sign-in; writes an MSAL cache
+```
+
+This MCP reads that cache and refreshes from it. Override its location with
+`OUTLOOK_COPILOT_MSAL_CACHE` if you keep it elsewhere.
+
+**What it talks to.** M365 Copilot has no public API; this speaks the same
+undocumented SignalR-over-WebSocket protocol (`substrate.office.com`) that
+Microsoft's own Office web clients use, with the Office web Copilot client id.
+It reaches only Copilot on your own tenant and changes nothing in the mailbox,
+but it is reverse-engineered and may break when Microsoft changes it — and your
+organisation's acceptable-use policy still applies. Use at your discretion.
+
 ## Triage loop
 
 An agent can work through new mail end to end without opening Outlook:
@@ -354,6 +399,34 @@ a fresh preview.
   as a four-hour error on an Eastern mailbox.
 - Contact phone fields are `MobilePhone1`, not Graph's `MobilePhone`. The v2.0
   Contact type rejects the Graph name with a 400.
+- `outlook_get_attachment` decodes a text-like file up to 5 MB and returns an
+  image up to 5 MB inline. Anything else, up to 50 MB, comes back as the file:
+  a signed download link valid for 1 hour when hosted (mcp-host sets
+  `MCP_BLOB_BASE_URL` and `MCP_BLOB_SIGNING_KEY`), or a new `0600` file under
+  `OUTLOOK_OUTPUT_DIR` (else `~/Downloads/office-outlook-mcp`) on a local
+  install. A hosted server never writes to its own disk; nobody in your
+  session could open the path.
+
+## Upgrading
+
+### To the next release
+
+`outlook_get_attachment` used to return PDFs, Office files and anything over
+5 MB as metadata only, so the file was unreachable. It now hands the bytes over.
+The existing fields (`name`, `contentType`, `size`, `kind`, `inlined`, `text`,
+`textTruncated`, `hint`) are unchanged. New fields appear when bytes are
+delivered:
+
+- `via`: `image`, `resource`, `link` or `disk`.
+- `downloadUrl` and `downloadExpiresAt`: hosted. Treat the link as a secret;
+  anyone holding it can download until it expires.
+- `path`: local, where the file was saved.
+- `deliveryNote`: why that route was chosen, when it was not the obvious one.
+
+A local install with a `~/Downloads` folder (or `OUTLOOK_OUTPUT_DIR` set) now
+**saves** such attachments to disk instead of returning metadata only. Without
+either, the old metadata-only answer remains. The `hint` text on that path now
+names `OUTLOOK_OUTPUT_DIR`.
 
 ## The lightweight alternative