@softeria/ms-365-mcp-server 0.134.3 → 0.134.5

package/README.md

@@ -596,7 +596,7 @@ Environment variables:
 - `MS365_MCP_CLOUD_TYPE=global|china`: Microsoft cloud environment (alternative to --cloud flag)
 - `LOG_LEVEL`: Set logging level (default: 'info')
 - `SILENT=true|1`: Disable console output
-- `MS365_MCP_REDACT_PII=true|1`: Scrub JWTs, Bearer headers, OAuth token fields, and email addresses from log messages before they are written (default: disabled). Useful when logs are shipped to a central store or shared host.
+- `MS365_MCP_REDACT_PII=false|0`: Disable scrubbing of JWTs, Bearer headers, OAuth token fields, and email addresses from log messages (default: enabled). The server handles live Graph bearer tokens, so redaction is on unless you opt out for fully verbose local debugging.
 - `MS365_MCP_CLIENT_ID`: Custom Azure app client ID (defaults to built-in app)
 - `MS365_MCP_TENANT_ID`: Custom tenant ID (defaults to 'common' for multi-tenant). **Personal Microsoft accounts should set this to `consumers`** - as of June 2026, refresh tokens issued via the default 'common' authority are rejected at the first refresh, so sessions die roughly an hour after login
 - `MS365_MCP_OAUTH_TOKEN`: Pre-existing OAuth token for Microsoft Graph API (BYOT method)

package/dist/endpoints.json

@@ -1944,11 +1944,13 @@
     "llmTip": "Deletes a column from a SharePoint list. This is irreversible — all data stored in this column across every list item is lost. Confirm with the user before calling. Cannot delete built-in columns (Title, Created, Modified, etc.)."
   },
   {
-    "pathPattern": "/sites/{site-id}/getByPath(path='{path}')",
+    "pathPattern": "/sites/{site-id}:/{path}",
     "method": "get",
     "toolName": "get-sharepoint-site-by-path",
     "presets": ["work"],
-    "workScopes": ["Sites.Read.All"]
+    "workScopes": ["Sites.Read.All"],
+    "skipEncoding": ["path"],
+    "llmTip": "Resolve a SharePoint site from its server-relative URL. site-id is the hostname (contoso.sharepoint.com) and path is the site path without a leading slash (sites/marketing, teams/hr). Returns the site object whose id feeds list-sharepoint-site-drives."
   },
   {
     "pathPattern": "/sites/delta()",

package/dist/generated/client.js

@@ -12968,6 +12968,26 @@ A site resource represents a team site in SharePoint.`,
     ],
     response: z.void()
   },
+  {
+    method: "get",
+    path: "/sites/:siteId:/:path",
+    alias: "get-sharepoint-site-by-path",
+    description: `Resolve a SharePoint site from its server-relative URL. site-id is the hostname (contoso.sharepoint.com) and path is the site path without a leading slash (sites/marketing, teams/hr). Returns the site object whose id feeds list-sharepoint-site-drives.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "siteId",
+        type: "Path",
+        schema: z.string().describe("Path parameter: site-id")
+      },
+      {
+        name: "path",
+        type: "Path",
+        schema: z.string().describe("Path parameter: path")
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/sites/:siteId/drives",
@@ -13038,14 +13058,6 @@ A site resource represents a team site in SharePoint.`,
     ],
     response: z.void()
   },
-  {
-    method: "get",
-    path: `/sites/:siteId/getByPath(path=':path')`,
-    alias: "get-sharepoint-site-by-path",
-    description: `Invoke function getByPath`,
-    requestFormat: "json",
-    response: z.void()
-  },
   {
     method: "get",
     path: "/sites/:siteId/items",

package/dist/lib/log-redactor.js

@@ -31,7 +31,8 @@ const REDACTIONS = [
 ];
 function redactionEnabled() {
   const raw = process.env.MS365_MCP_REDACT_PII;
-  return raw === "true" || raw === "1";
+  if (raw === void 0) return true;
+  return raw !== "false" && raw !== "0";
 }
 function redactSensitive(input) {
   let out = input;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.134.3",
+  "version": "0.134.5",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -1944,11 +1944,13 @@
     "llmTip": "Deletes a column from a SharePoint list. This is irreversible — all data stored in this column across every list item is lost. Confirm with the user before calling. Cannot delete built-in columns (Title, Created, Modified, etc.)."
   },
   {
-    "pathPattern": "/sites/{site-id}/getByPath(path='{path}')",
+    "pathPattern": "/sites/{site-id}:/{path}",
     "method": "get",
     "toolName": "get-sharepoint-site-by-path",
     "presets": ["work"],
-    "workScopes": ["Sites.Read.All"]
+    "workScopes": ["Sites.Read.All"],
+    "skipEncoding": ["path"],
+    "llmTip": "Resolve a SharePoint site from its server-relative URL. site-id is the hostname (contoso.sharepoint.com) and path is the site path without a leading slash (sites/marketing, teams/hr). Returns the site object whose id feeds list-sharepoint-site-drives."
   },
   {
     "pathPattern": "/sites/delta()",