@softeria/ms-365-mcp-server 0.114.2 → 0.114.3

package/dist/tool-categories.js

@@ -1,61 +1,74 @@
-const TOOL_CATEGORIES = {
+import { readFileSync } from "fs";
+import { fileURLToPath } from "url";
+import path from "path";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const endpointEntries = JSON.parse(
+  readFileSync(path.join(__dirname, "endpoints.json"), "utf8")
+);
+const PRESET_META = {
   mail: {
-    name: "mail",
-    pattern: /mail|attachment|draft|download-bytes/i,
     description: "Email operations (read, send, manage folders, attachments)"
   },
   calendar: {
-    name: "calendar",
-    pattern: /calendar|event|schedule|meeting/i,
     description: "Calendar and event management"
   },
   files: {
-    name: "files",
-    pattern: /drive|file|upload|download|folder|item/i,
     description: "OneDrive file and folder operations"
   },
   personal: {
-    name: "personal",
-    pattern: /mail|calendar|drive|contact|todo|onenote|attachment|draft|event|file|folder|search|query|download-bytes|parse-teams-url/i,
     description: "Personal productivity tools (mail, calendar, files, contacts, tasks, notes, search)"
   },
   work: {
-    name: "work",
-    pattern: /team|channel|chat|sharepoint|planner|site|list|shared|search|query|download-bytes|schedule|meeting/i,
     description: "Organization/work tools (Teams, SharePoint, shared mailboxes, search)",
     requiresOrgMode: true
   },
   excel: {
-    name: "excel",
-    pattern: /excel|worksheet|workbook|range|chart/i,
     description: "Excel spreadsheet operations"
   },
   contacts: {
-    name: "contacts",
-    pattern: /contact/i,
     description: "Outlook contacts management"
   },
   tasks: {
-    name: "tasks",
-    pattern: /todo|planner|task/i,
     description: "Task and planning tools (To Do, Planner)"
   },
   onenote: {
-    name: "onenote",
-    pattern: /onenote|notebook|section|page/i,
     description: "OneNote notebook operations"
   },
   search: {
-    name: "search",
-    pattern: /search|query/i,
     description: "Microsoft Search capabilities"
   },
   users: {
-    name: "users",
-    pattern: /user|list-users|download-bytes/i,
     description: "User directory access",
     requiresOrgMode: true
   },
+  outlook: {
+    description: "Outlook app only: mail, calendar and contacts"
+  },
+  onedrive: {
+    description: "OneDrive app only: drive and file operations, excluding Excel"
+  },
+  teams: {
+    description: "Teams app only: chats, channels, meetings and presence",
+    requiresOrgMode: true
+  }
+};
+function presetPattern(preset) {
+  const names = [
+    ...new Set(endpointEntries.filter((e) => e.presets?.includes(preset)).map((e) => e.toolName))
+  ];
+  if (names.length === 0) {
+    throw new Error(`Preset "${preset}" matches no endpoints in endpoints.json`);
+  }
+  return new RegExp(`^(?:${names.join("|")})$`);
+}
+const TOOL_CATEGORIES = {
+  ...Object.fromEntries(
+    Object.entries(PRESET_META).map(([name, meta]) => [
+      name,
+      { name, pattern: presetPattern(name), ...meta }
+    ])
+  ),
   all: {
     name: "all",
     pattern: /.*/,

package/docs/deployment.md

@@ -123,7 +123,11 @@ When deploying for an organization, create a dedicated app registration instead
 1. **Create the app** in [Azure Portal](https://portal.azure.com) > App registrations > New registration
    - Name: `MS365 MCP Server`
    - Supported account types: **Accounts in this organizational directory only** (single tenant)
-   - Redirect URI: your server's callback URL
+   - Redirect URI (platform type **Web**): the **MCP client's** OAuth callback URL, not the server's own domain. The server proxies the OAuth flow and forwards the client's `redirect_uri` to Microsoft Entra, so Entra delivers the authorization code directly to the client. Register one redirect URI per MCP client you want to support, for example:
+     - Claude (claude.ai, Desktop, Cowork): `https://claude.ai/api/mcp/auth_callback`
+     - Other clients: check the `redirect_uri` query parameter your client sends to the server's `/authorize` endpoint (visible in the server logs)
+
+   > **Common pitfall**: registering `https://your-server-domain/callback` here breaks sign-in with `AADSTS50011` (redirect URI mismatch) after the user authenticates. The server has no callback endpoint of its own; the authorization code always goes to the MCP client.
 
 2. **Add API permissions** > Microsoft Graph > Delegated permissions
    Run `npx @softeria/ms-365-mcp-server --org-mode --list-permissions` to print the exact list of permissions required for your enabled tools.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.114.2",
+  "version": "0.114.3",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",