@chrischall/office-outlook-mcp 0.8.4 → 0.9.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Outlook / Microsoft 365 — mail, calendar, contacts and tasks via natural language",
-    "version": "0.8.4"
+    "version": "0.9.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Outlook (Microsoft 365)",
       "source": "./",
       "description": "MCP server for Outlook / Microsoft 365 — triage unread mail, reply, answer meeting invites and schedule meetings, plus folders, calendar, contacts and tasks, with confirmation before anything is sent",
-      "version": "0.8.4",
+      "version": "0.9.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "office-outlook-mcp",
   "displayName": "Outlook (Microsoft 365)",
-  "version": "0.8.4",
+  "version": "0.9.0",
   "description": "Outlook / Microsoft 365 for Claude — triage unread mail, reply, answer meeting invites and schedule meetings, plus folders, calendar, contacts and tasks, with confirmation before anything is sent, using your signed-in browser session",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -131,13 +131,14 @@ Everything is optional — with nothing set, the server captures from the browse
 `outlook_list_calendars`, `outlook_find_meeting_times`,
 `outlook_get_schedule`, `outlook_get_profile`,
 `outlook_get_mailbox_settings`, `outlook_list_contacts`, `outlook_list_people`,
-`outlook_list_categories`, `outlook_list_tasks`
+`outlook_list_categories`, `outlook_list_tasks`, `outlook_list_rules`
 
 **Write** (ask you to confirm first — see [Confirmations](#confirmations)) —
 `outlook_send_message`, `outlook_create_draft`, `outlook_mark_read`,
 `outlook_update_message`, `outlook_move_message`, `outlook_create_event`,
 `outlook_update_event`, `outlook_respond_to_invite`, `outlook_delete_event`,
-`outlook_reply`.
+`outlook_reply`, `outlook_create_rule`, `outlook_update_rule`,
+`outlook_delete_rule`, `outlook_set_auto_reply`.
 Some skip the confirmation because nothing reaches anyone else:
 `outlook_create_draft` (the draft stays in Drafts until you send it from
 Outlook), `outlook_reply` with `draftOnly: true` (the reply stays in Drafts),
@@ -165,10 +166,23 @@ what that decision needs in every view: `MyResponse`, `ResponseRequested`,
 `IsOrganizer`, `IsCancelled`, `Type` (SingleInstance, Occurrence, Exception or
 SeriesMaster), `ShowAs` and `IsAllDay`, plus `SeriesMasterId` in the full view.
 
+**Rules and automatic replies** — `outlook_list_rules` shows inbox rules in the
+order Outlook applies them. `outlook_create_rule` needs at least one condition
+and one action; a rule that forwards or redirects mail names those recipients in
+its confirmation, because it keeps sending mail out until removed.
+`outlook_update_rule` sends only what you pass, and `conditions`, `exceptions`
+or `actions` replace that whole group. `outlook_set_auto_reply` changes only
+what you pass, and its confirmation shows the exact text that will go out,
+including stored text you did not change. Read the current auto-reply with
+`outlook_get_mailbox_settings`.
+
 **Export** — `outlook_export_messages` (mail) and `outlook_export_events`
 (calendar) write JSONL or Markdown files, optionally with attachments, and
 return only where they are; see [Bulk export](#bulk-export).
 
+**Copilot** — `outlook_ask_copilot` puts a question to Microsoft 365 Copilot
+with your mailbox as context; see [Microsoft 365 Copilot](#microsoft-365-copilot).
+
 **Diagnostics** — `outlook_healthcheck`
 
 Every read tool takes `view: compact | full | raw`, defaulting to **compact**.
@@ -192,8 +206,8 @@ the one read a preview makes.)
 Mail and event text is written by other people, so `outlook_list_messages`,
 `outlook_get_message`, `outlook_list_unread_messages`, `outlook_get_attachment`,
 `outlook_list_events`, `outlook_get_event`, `outlook_find_meeting_times`,
-`outlook_get_schedule`, `outlook_export_messages` and `outlook_export_events`
-wrap every result (all views) in an untrusted-content
+`outlook_get_schedule`, `outlook_export_messages`, `outlook_export_events` and
+`outlook_ask_copilot` wrap every result (all views) in an untrusted-content
 envelope — `untrusted_content: true` plus a `note` telling the model to treat
 the text as data, never instructions (a `view: raw` record that carries its
 own `untrusted_content`/`note` key is nested under `data`, so it cannot
@@ -205,6 +219,37 @@ something the model passes back itself, so keep `MCP_CONFIRM_MODE=ask-user`
 (the default) and approve each preview in chat — or use a client that asks you
 before running non-read-only tools — as the real guard on outbound sends.
 
+## Microsoft 365 Copilot
+
+`outlook_ask_copilot` sends a question to **Microsoft 365 Copilot** and returns
+its answer. Copilot searches your own mail, calendar and files server-side
+(`WorkSearch`) and writes a reply — so this is for *synthesis* across many
+messages ("what needs my attention first", "summarise the thread with X") rather
+than fetching one message, which the read tools already do. Follow-up calls
+continue the same conversation; pass `newConversation: true` to start fresh. Each
+call uses one of a per-conversation quota, reported back, and the answer comes
+back in the untrusted-data envelope like every other mail-derived read.
+
+**Setup — a one-time sign-in.** Unlike the mail token (captured from your
+browser), the Copilot token is obtained by MSAL and refreshes silently, but the
+first sign-in needs a browser with MFA. Use the sibling CLI
+[`opencode-m365-copilot`](https://github.com/chrischall/opencode-copilot-plugin):
+
+```sh
+npm install -g opencode-m365-copilot
+opencode-m365 login        # one-time browser sign-in; writes an MSAL cache
+```
+
+This MCP reads that cache and refreshes from it. Override its location with
+`OUTLOOK_COPILOT_MSAL_CACHE` if you keep it elsewhere.
+
+**What it talks to.** M365 Copilot has no public API; this speaks the same
+undocumented SignalR-over-WebSocket protocol (`substrate.office.com`) that
+Microsoft's own Office web clients use, with the Office web Copilot client id.
+It reaches only Copilot on your own tenant and changes nothing in the mailbox,
+but it is reverse-engineered and may break when Microsoft changes it — and your
+organisation's acceptable-use policy still applies. Use at your discretion.
+
 ## Triage loop
 
 An agent can work through new mail end to end without opening Outlook: