@softeria/ms-365-mcp-server 0.127.0 → 0.128.1

package/dist/endpoints.json

@@ -359,6 +359,7 @@
     "toolName": "create-calendar-event",
     "presets": ["calendar", "outlook", "personal"],
     "scopes": ["Calendars.ReadWrite"],
+    "descriptionOverride": "Create (schedule) a new calendar event — a meeting or appointment — on the user's calendar. Set subject, start/end times, time zone, location, body, and attendees; supports online meetings and recurrence.",
     "llmTip": "CRITICAL: Do not try to guess the email address of the recipients. Use the list-users tool to find the email address of the recipients."
   },
   {

package/dist/graph-client.js

@@ -75,6 +75,8 @@ class GraphClient {
         const text = await response.text();
         if (text === "") {
           result = { message: "OK!" };
+        } else if (options.rawResponse) {
+          result = { message: "OK!", rawResponse: text };
         } else {
           try {
             result = JSON.parse(text);

package/dist/graph-tools.js

@@ -170,7 +170,10 @@ const UTILITY_TOOLS = [
         if (authManager && !authManager.isOAuthModeEnabled() && !getRequestTokens()) {
           accountAccessToken = await authManager.getTokenForAccount(accountParam);
         }
-        return await graphClient.graphRequest(target, { accessToken: accountAccessToken });
+        return await graphClient.graphRequest(target, {
+          accessToken: accountAccessToken,
+          rawResponse: true
+        });
       } catch (error) {
         return {
           content: [{ type: "text", text: JSON.stringify({ error: error.message }) }],
@@ -823,7 +826,7 @@ function registerGraphTools(server, graphClient, readOnly = false, enabledToolsP
       ).optional();
     }
     let toolDescription = withApiVersionPrefix(
-      tool.description || `Execute ${tool.method.toUpperCase()} request to ${tool.path}`,
+      (endpointConfig?.descriptionOverride ?? tool.description) || `Execute ${tool.method.toUpperCase()} request to ${tool.path}`,
       endpointConfig
     );
     if (endpointConfig?.llmTip) {
@@ -920,7 +923,10 @@ function buildDiscoverySearchIndex(toolsRegistry, utilityTools = []) {
     const nt = tokenize(name);
     nameTokens.set(name, new Set(nt));
     const pathTokens = tokenize(tool.path);
-    const descTokens = tokenize(tool.description).slice(0, DESC_CAP_TOKENS);
+    const descTokens = tokenize(config?.descriptionOverride ?? tool.description).slice(
+      0,
+      DESC_CAP_TOKENS
+    );
     const tipTokens = tokenize(config?.llmTip).slice(0, TIP_EXCERPT_TOKENS);
     const tokens = [
       ...nt,
@@ -1032,7 +1038,7 @@ function registerDiscoveryTools(server, graphClient, readOnly = false, orgMode =
         method: tool.method.toUpperCase(),
         path: tool.path,
         description: withApiVersionPrefix(
-          tool.description || `${tool.method.toUpperCase()} ${tool.path}`,
+          (config?.descriptionOverride ?? tool.description) || `${tool.method.toUpperCase()} ${tool.path}`,
           config
         ),
         ...config?.llmTip ? { llmTip: config.llmTip } : {}
@@ -1111,7 +1117,11 @@ function registerDiscoveryTools(server, graphClient, readOnly = false, orgMode =
     async ({ tool_name }) => {
       const entry = toolsRegistry.get(tool_name);
       if (entry) {
-        const schema = describeToolSchema(entry.tool, entry.config?.llmTip);
+        const schema = describeToolSchema(
+          entry.tool,
+          entry.config?.llmTip,
+          entry.config?.descriptionOverride
+        );
         return {
           content: [{ type: "text", text: JSON.stringify(schema, null, 2) }]
         };

package/dist/lib/microsoft-auth.js

@@ -1,9 +1,17 @@
 import logger from "../logger.js";
 import { getCloudEndpoints } from "../cloud-config.js";
-function buildWwwAuthenticate(req, error, description) {
+function buildResourceMetadataUrl(req, publicUrl) {
+  if (publicUrl) {
+    const parsed = new URL(publicUrl);
+    const path = parsed.pathname.replace(/\/$/, "");
+    return `${parsed.origin}/.well-known/oauth-protected-resource${path}`;
+  }
   const protocol = req.secure ? "https" : "http";
   const origin = `${protocol}://${req.get("host")}`;
-  const resourceMetadata = `${origin}/.well-known/oauth-protected-resource`;
+  return `${origin}/.well-known/oauth-protected-resource`;
+}
+function buildWwwAuthenticate(req, error, description, publicUrl) {
+  const resourceMetadata = buildResourceMetadataUrl(req, publicUrl);
   return `Bearer resource_metadata="${resourceMetadata}", error="${error}", error_description="${description}"`;
 }
 function isJwtExpired(token) {
@@ -46,7 +54,12 @@ const microsoftBearerTokenAuthMiddleware = (opts = {}) => (req, res, next) => {
     }
     res.status(401).set(
       "WWW-Authenticate",
-      buildWwwAuthenticate(req, "invalid_token", "Missing or malformed Authorization header")
+      buildWwwAuthenticate(
+        req,
+        "invalid_token",
+        "Missing or malformed Authorization header",
+        opts.publicUrl
+      )
     ).json({
       error: "invalid_token",
       error_description: "Missing or malformed Authorization header"
@@ -57,7 +70,7 @@ const microsoftBearerTokenAuthMiddleware = (opts = {}) => (req, res, next) => {
   if (isJwtExpired(accessToken)) {
     res.status(401).set(
       "WWW-Authenticate",
-      buildWwwAuthenticate(req, "invalid_token", "The access token has expired")
+      buildWwwAuthenticate(req, "invalid_token", "The access token has expired", opts.publicUrl)
     ).json({ error: "invalid_token", error_description: "The access token has expired" });
     return;
   }

package/dist/lib/tool-schema.js

@@ -7,7 +7,7 @@ function unwrapOptional(schema) {
   }
   return { inner: schema, optional: false };
 }
-function describeToolSchema(tool, llmTip) {
+function describeToolSchema(tool, llmTip, descriptionOverride) {
   const params = (tool.parameters ?? []).map((p) => {
     const { inner, optional } = unwrapOptional(p.schema);
     const isPath = p.type === "Path";
@@ -25,7 +25,7 @@ function describeToolSchema(tool, llmTip) {
     name: tool.alias,
     method: tool.method.toUpperCase(),
     path: tool.path,
-    description: tool.description ?? "",
+    description: descriptionOverride ?? tool.description ?? "",
     ...llmTip ? { llmTip } : {},
     parameters: params
   };

package/dist/server.js

@@ -229,7 +229,7 @@ class MicrosoftGraphServer {
         const metadata = {
           issuer: browserBase,
           authorization_endpoint: `${browserBase}/authorize`,
-          token_endpoint: `${requestOrigin}/token`,
+          token_endpoint: `${browserBase}/token`,
           response_types_supported: ["code"],
           response_modes_supported: ["query"],
           grant_types_supported: ["authorization_code", "refresh_token"],
@@ -238,23 +238,25 @@ class MicrosoftGraphServer {
           scopes_supported: scopes
         };
         if (this.options.enableDynamicRegistration) {
-          metadata.registration_endpoint = `${requestOrigin}/register`;
+          metadata.registration_endpoint = `${browserBase}/register`;
         }
         res.json(metadata);
       });
-      app.get("/.well-known/oauth-protected-resource", async (req, res) => {
+      const protectedResourcesHandler = async (req, res) => {
         const protocol = req.secure ? "https" : "http";
         const requestOrigin = `${protocol}://${req.get("host")}`;
         const browserBase = publicBase ?? requestOrigin;
         const scopes = this.options.obo ? [`${this.secrets.clientId}/access_as_user`] : resolveAuthScopes(this.options);
         res.json({
-          resource: `${requestOrigin}/mcp`,
+          resource: `${browserBase}/mcp`,
           authorization_servers: [browserBase],
           scopes_supported: scopes,
           bearer_methods_supported: ["header"],
           resource_documentation: browserBase
         });
-      });
+      };
+      app.get("/.well-known/oauth-protected-resource", protectedResourcesHandler);
+      app.get("/.well-known/oauth-protected-resource/*path", protectedResourcesHandler);
       if (this.options.enableDynamicRegistration) {
         app.post("/register", async (req, res) => {
           const body = req.body;
@@ -470,7 +472,8 @@ class MicrosoftGraphServer {
       );
       const mcpAuth = microsoftBearerTokenAuthMiddleware({
         trustProxyAuth: this.options.trustProxyAuth,
-        allowUnauthenticatedDiscovery: this.options.allowUnauthenticatedDiscovery
+        allowUnauthenticatedDiscovery: this.options.allowUnauthenticatedDiscovery,
+        publicUrl: publicBase
       });
       app.get(
         "/mcp",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.127.0",
+  "version": "0.128.1",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -359,6 +359,7 @@
     "toolName": "create-calendar-event",
     "presets": ["calendar", "outlook", "personal"],
     "scopes": ["Calendars.ReadWrite"],
+    "descriptionOverride": "Create (schedule) a new calendar event — a meeting or appointment — on the user's calendar. Set subject, start/end times, time zone, location, body, and attendees; supports online meetings and recurrence.",
     "llmTip": "CRITICAL: Do not try to guess the email address of the recipients. Use the list-users tool to find the email address of the recipients."
   },
   {