@softeria/ms-365-mcp-server 0.160.0 → 0.161.1

package/dist/__tests__/graph-tools.test.js

@@ -458,9 +458,10 @@ describe("graph-tools", () => {
         const server = createMockServer();
         const { registerGraphTools } = await loadModule();
         registerGraphTools(server, graphClient);
-        await server.tools.get("test-tool").handler({ fetchAllPages: true });
+        const result = await server.tools.get("test-tool").handler({ fetchAllPages: true });
         const [payload] = auditLogMock.mock.calls[0];
         expect(payload.result_count).toBe(2);
+        expect(JSON.parse(result.content[0].text)["@odata.nextLink"]).toBeUndefined();
         expect(payload.result_has_more).toBe(true);
         expect(payload.response_bytes).toBe(100);
       } finally {
@@ -471,6 +472,64 @@ describe("graph-tools", () => {
         }
       }
     });
+    it("reports result_has_more when a page is not a collection", async () => {
+      mockEndpoints.push(makeEndpoint());
+      mockEndpointsJson = [makeConfig()];
+      const pageThreeLink = "https://graph.microsoft.com/v1.0/me/messages?$skip=4";
+      const graphClient = createMockGraphClient([
+        {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                value: [{ id: "1" }, { id: "2" }],
+                "@odata.nextLink": "https://graph.microsoft.com/v1.0/me/messages?$skip=2"
+              })
+            }
+          ],
+          _meta: { http_status: 200, result_count: 2, result_has_more: true, response_bytes: 1e3 }
+        },
+        {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                value: [{ id: "3" }, { id: "4" }],
+                "@odata.nextLink": pageThreeLink
+              })
+            }
+          ],
+          _meta: { http_status: 200, result_count: 2, result_has_more: true, response_bytes: 900 }
+        },
+        {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                message: "OK!",
+                contentType: "application/json",
+                encoding: "base64",
+                contentLength: 9,
+                contentBytes: "eyJ2YWx1"
+              })
+            }
+          ],
+          _meta: { http_status: 200, response_bytes: 700 }
+        }
+      ]);
+      const server = createMockServer();
+      const { registerGraphTools } = await loadModule();
+      registerGraphTools(server, graphClient);
+      const result = await server.tools.get("test-tool").handler({ fetchAllPages: true });
+      expect(graphClient.graphRequest).toHaveBeenCalledTimes(3);
+      const body = JSON.parse(result.content[0].text);
+      expect(body.value.map((item) => item.id)).toEqual(["1", "2", "3", "4"]);
+      expect(body["@odata.nextLink"]).toBe(pageThreeLink);
+      const [payload] = auditLogMock.mock.calls[0];
+      expect(payload.result_count).toBe(4);
+      expect(payload.result_has_more).toBe(true);
+      expect(payload.response_bytes).toBe(1900);
+    });
     it("omits the volume fields when the client supplied none", async () => {
       const endpoint = makeEndpoint({ method: "get", path: "/me", alias: "get-current-user" });
       const config = makeConfig({

package/dist/endpoints.json

@@ -197,6 +197,64 @@
     "workScopes": ["Mail.Send.Shared"],
     "llmTip": "Send an existing draft from a shared mailbox. No request body needed — just call with the message ID and the shared mailbox user-id. Draft must exist in the shared mailbox's Drafts folder. Requires Send As permission on the shared mailbox in Exchange."
   },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders",
+    "method": "get",
+    "toolName": "list-shared-mailbox-folders",
+    "descriptionOverride": "List the top-level mail folders in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders/{mailFolder-id}/childFolders",
+    "method": "get",
+    "toolName": "list-shared-mailbox-child-folders",
+    "descriptionOverride": "List the child folders of a mail folder in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders",
+    "method": "post",
+    "toolName": "create-shared-mailbox-folder",
+    "descriptionOverride": "Create a top-level mail folder in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.ReadWrite.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders/{mailFolder-id}/childFolders",
+    "method": "post",
+    "toolName": "create-shared-mailbox-child-folder",
+    "descriptionOverride": "Create a subfolder inside a mail folder in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.ReadWrite.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/messages/{message-id}/attachments",
+    "method": "get",
+    "toolName": "list-shared-mailbox-attachments",
+    "descriptionOverride": "List the attachments on a message in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.Read.Shared"],
+    "llmTip": "To download the bytes, call download-bytes or get-download-url with target=/users/{user-id}/messages/{message-id}/attachments/{attachment-id}/$value."
+  },
+  {
+    "pathPattern": "/users/{user-id}/messages/{message-id}/attachments",
+    "method": "post",
+    "toolName": "add-shared-mailbox-attachment",
+    "descriptionOverride": "Add an attachment under 3MB to a draft message in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.ReadWrite.Shared"],
+    "llmTip": "Body requires @odata.type: {\"@odata.type\": \"#microsoft.graph.fileAttachment\", \"name\": \"file.pdf\", \"contentBytes\": \"<base64>\"}. Graph has no working path for 3MB and above here: upload sessions return 403 in a shared or delegated mailbox."
+  },
+  {
+    "pathPattern": "/users/{user-id}/messages/{message-id}/attachments/{attachment-id}",
+    "method": "delete",
+    "toolName": "delete-shared-mailbox-attachment",
+    "descriptionOverride": "Delete an attachment from a message in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.ReadWrite.Shared"]
+  },
   {
     "pathPattern": "/users",
     "method": "get",
@@ -2266,6 +2324,7 @@
     "pathPattern": "/groups/{group-id}/threads/{conversationThread-id}/reply",
     "method": "post",
     "toolName": "reply-to-group-thread",
+    "descriptionOverride": "Reply to a conversation thread in a Microsoft 365 group, adding a new post to the thread. Use list-group-threads to obtain the thread ID.",
     "presets": ["work"],
     "workScopes": ["Group.ReadWrite.All"],
     "llmTip": "Legacy — Microsoft recommends Teams channels instead of group threads."
@@ -2394,6 +2453,22 @@
     "scopes": ["Calendars.ReadWrite"],
     "llmTip": "Dismisses a triggered event reminder so it won't re-fire. No request body required. Pair with list-calendar-events or get-schedule to find active reminders."
   },
+  {
+    "pathPattern": "/me/events/{event-id}/attachments",
+    "method": "post",
+    "toolName": "add-calendar-event-attachment",
+    "presets": ["calendar", "outlook", "personal"],
+    "scopes": ["Calendars.ReadWrite"],
+    "llmTip": "Under 3MB only. Body requires @odata.type: {\"@odata.type\": \"#microsoft.graph.fileAttachment\", \"name\": \"file.pdf\", \"contentBytes\": \"<base64>\"}. At 3MB and above use create-calendar-event-attachment-upload-session."
+  },
+  {
+    "pathPattern": "/me/events/{event-id}/attachments/createUploadSession",
+    "method": "post",
+    "toolName": "create-calendar-event-attachment-upload-session",
+    "presets": ["calendar", "outlook", "personal"],
+    "scopes": ["Calendars.ReadWrite"],
+    "llmTip": "For attachments 3MB to 150MB; under 3MB use add-calendar-event-attachment. Body: { AttachmentItem: { attachmentType: 'file', name: 'report.pdf', size: 5000000 } }. Returns a pre-authenticated uploadUrl; the caller PUTs the bytes there itself in ranges up to 4MB."
+  },
   {
     "pathPattern": "/me/events/delta()",
     "method": "get",

package/dist/generated/client.js

@@ -2774,6 +2774,20 @@ const microsoft_graph_driveCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_drive)
 }).partial().passthrough();
+const microsoft_graph_attachmentType = z.enum(["file", "item", "reference"]);
+const microsoft_graph_attachmentItem = z.object({
+  attachmentType: microsoft_graph_attachmentType.optional(),
+  contentId: z.string().describe(
+    "The CID or Content-Id of the attachment for referencing for the in-line attachments using the <img src='cid:contentId'> tag in HTML messages. Optional."
+  ).nullish(),
+  contentType: z.string().describe("The nature of the data in the attachment. Optional.").nullish(),
+  isInline: z.boolean().describe("true if the attachment is an inline attachment; otherwise, false. Optional.").nullish(),
+  name: z.string().describe(
+    "The display name of the attachment. This can be a descriptive string and doesn't have to be the actual file name. Required."
+  ).nullish(),
+  size: z.number().describe("The length of the attachment in bytes. Required.").nullish()
+}).passthrough();
+const create_calendar_event_attachment_upload_session_Body = z.object({ AttachmentItem: microsoft_graph_attachmentItem }).partial().passthrough();
 const accept_calendar_event_Body = z.object({ SendResponse: z.boolean().nullable().default(false), Comment: z.string().nullable() }).partial().passthrough();
 const decline_calendar_event_Body = z.object({
   ProposedNewTime: z.union([microsoft_graph_timeSlot, z.object({}).partial().passthrough()]),
@@ -3299,20 +3313,6 @@ const microsoft_graph_attachmentCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_attachment)
 }).partial().passthrough();
-const microsoft_graph_attachmentType = z.enum(["file", "item", "reference"]);
-const microsoft_graph_attachmentItem = z.object({
-  attachmentType: microsoft_graph_attachmentType.optional(),
-  contentId: z.string().describe(
-    "The CID or Content-Id of the attachment for referencing for the in-line attachments using the <img src='cid:contentId'> tag in HTML messages. Optional."
-  ).nullish(),
-  contentType: z.string().describe("The nature of the data in the attachment. Optional.").nullish(),
-  isInline: z.boolean().describe("true if the attachment is an inline attachment; otherwise, false. Optional.").nullish(),
-  name: z.string().describe(
-    "The display name of the attachment. This can be a descriptive string and doesn't have to be the actual file name. Required."
-  ).nullish(),
-  size: z.number().describe("The length of the attachment in bytes. Required.").nullish()
-}).passthrough();
-const create_mail_attachment_upload_session_Body = z.object({ AttachmentItem: microsoft_graph_attachmentItem }).partial().passthrough();
 const create_forward_draft_Body = z.object({
   ToRecipients: z.array(microsoft_graph_recipient),
   Message: z.union([microsoft_graph_message, z.object({}).partial().passthrough()]),
@@ -5149,6 +5149,9 @@ const schemas = {
   microsoft_graph_list,
   microsoft_graph_drive,
   microsoft_graph_driveCollectionResponse,
+  microsoft_graph_attachmentType,
+  microsoft_graph_attachmentItem,
+  create_calendar_event_attachment_upload_session_Body,
   accept_calendar_event_Body,
   decline_calendar_event_Body,
   forward_calendar_event_Body,
@@ -5200,9 +5203,6 @@ const schemas = {
   microsoft_graph_messageRuleCollectionResponse,
   microsoft_graph_messageCollectionResponse,
   microsoft_graph_attachmentCollectionResponse,
-  microsoft_graph_attachmentType,
-  microsoft_graph_attachmentItem,
-  create_mail_attachment_upload_session_Body,
   create_forward_draft_Body,
   create_reply_draft_Body,
   microsoft_graph_attendeeBase,
@@ -9377,6 +9377,38 @@ open extensions or extended properties, and how to specify extended properties.`
     ],
     response: z.void()
   },
+  {
+    method: "post",
+    path: "/me/events/:eventId/attachments",
+    alias: "add-calendar-event-attachment",
+    description: `Use this API to add an attachment to an existing event. This operation limits the size of the attachment you can add to under 3 MB. If an organizer adds an attachment to a meeting event, the organizer can subsequently update the event to send the attachment and update the event for each attendee as well.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property`,
+        type: "Body",
+        schema: microsoft_graph_attachment
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "post",
+    path: "/me/events/:eventId/attachments/createUploadSession",
+    alias: "create-calendar-event-attachment-upload-session",
+    description: `Create an upload session that allows an app to iteratively upload ranges of a file, so as to attach the file to the specified Outlook item. The item can be a message or event. Use this approach to attach a file if the file size is between 3 MB and 150 MB. To attach a file that's smaller than 3 MB, do a POST operation on the attachments navigation property of the Outlook item; see how to do this for a message or for an event. As part of the response, this action returns an upload URL that you can use in subsequent sequential PUT queries. Request headers for each PUT operation let you specify the exact range of bytes to be uploaded. This allows transfer to be resumed, in case the network connection is dropped during upload. The following are the steps to attach a file to an Outlook item using an upload session: See attach large files to Outlook messages or events for an example.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `Action parameters`,
+        type: "Body",
+        schema: create_calendar_event_attachment_upload_session_Body
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "post",
     path: "/me/events/:eventId/cancel",
@@ -10591,7 +10623,7 @@ resource.`,
         name: "body",
         description: `Action parameters`,
         type: "Body",
-        schema: create_mail_attachment_upload_session_Body
+        schema: create_calendar_event_attachment_upload_session_Body
       }
     ],
     response: z.void()
@@ -15013,6 +15045,148 @@ Only the policyViolation property of a chatMessage can be updated in application
     ],
     response: z.void()
   },
+  {
+    method: "get",
+    path: "/users/:userId/mailFolders",
+    alias: "list-shared-mailbox-folders",
+    description: `The user's mail folders. Read-only. Nullable.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "includeHiddenFolders",
+        type: "Query",
+        schema: z.string().describe("Include Hidden Folders").optional()
+      },
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "post",
+    path: "/users/:userId/mailFolders",
+    alias: "create-shared-mailbox-folder",
+    description: `Create a shared mailbox folder.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property`,
+        type: "Body",
+        schema: microsoft_graph_mailFolder
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "get",
+    path: "/users/:userId/mailFolders/:mailFolderId/childFolders",
+    alias: "list-shared-mailbox-child-folders",
+    description: `The collection of child folders in the mailFolder.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "includeHiddenFolders",
+        type: "Query",
+        schema: z.string().describe("Include Hidden Folders").optional()
+      },
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "post",
+    path: "/users/:userId/mailFolders/:mailFolderId/childFolders",
+    alias: "create-shared-mailbox-child-folder",
+    description: `Create a shared mailbox child folder.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property`,
+        type: "Body",
+        schema: microsoft_graph_mailFolder
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/users/:userId/mailFolders/:mailFolderId/messages",
@@ -15294,6 +15468,87 @@ Only the policyViolation property of a chatMessage can be updated in application
     ],
     response: z.void()
   },
+  {
+    method: "get",
+    path: "/users/:userId/messages/:messageId/attachments",
+    alias: "list-shared-mailbox-attachments",
+    description: `The fileAttachment and itemAttachment attachments for the message.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "post",
+    path: "/users/:userId/messages/:messageId/attachments",
+    alias: "add-shared-mailbox-attachment",
+    description: `Add a shared mailbox attachment.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property`,
+        type: "Body",
+        schema: microsoft_graph_attachment
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "delete",
+    path: "/users/:userId/messages/:messageId/attachments/:attachmentId",
+    alias: "delete-shared-mailbox-attachment",
+    description: `Delete a shared mailbox attachment.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "If-Match",
+        type: "Header",
+        schema: z.string().describe("ETag").optional()
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "post",
     path: "/users/:userId/messages/:messageId/createForward",

package/dist/graph-tools.js

@@ -554,8 +554,9 @@ function uploadError(message) {
 async function mintUploadUrl(target, name, contentType, accountParam, authManager) {
   const minting = getAttachmentMinting();
   if (!minting) {
+    const smallFileTool = target.includes("/events/") ? "add-calendar-event-attachment" : target.startsWith("/users/") ? "add-shared-mailbox-attachment" : "add-mail-attachment";
     return uploadError(
-      "This server is not running with --enable-attachment-urls, so no upload URL can be minted. Attach small files with add-mail-attachment (base64 contentBytes)."
+      `This server is not running with --enable-attachment-urls, so no upload URL can be minted. Attach small files with ${smallFileTool} (base64 contentBytes).`
     );
   }
   if (!UPLOAD_TARGET.test(target) || !isPlainGraphPath(target)) {
@@ -1725,6 +1726,7 @@ async function executeGraphTool(tool, config, graphClient, params, authManager,
           const maxPages = positiveIntFromEnv("MS365_MCP_MAX_PAGES", DEFAULT_MAX_PAGES);
           const maxItems = positiveIntFromEnv("MS365_MCP_MAX_ITEMS", DEFAULT_MAX_ITEMS);
           let deltaLink = combinedResponse["@odata.deltaLink"];
+          let unmergeablePage = false;
           while (nextLink && pageCount < maxPages && allItems.length < maxItems) {
             logger.info(`Fetching page ${pageCount + 1} from: ${nextLink}`);
             const url = new URL(nextLink);
@@ -1738,9 +1740,14 @@ async function executeGraphTool(tool, config, graphClient, params, authManager,
             }
             if (nextResponse?.content?.[0]?.text) {
               const nextJsonResponse = JSON.parse(nextResponse.content[0].text);
-              if (Array.isArray(nextJsonResponse.value)) {
-                allItems = allItems.concat(nextJsonResponse.value);
+              if (!Array.isArray(nextJsonResponse.value)) {
+                logger.warn(
+                  `Pagination stopped at page ${pageCount + 1}: response was not a collection`
+                );
+                unmergeablePage = true;
+                break;
               }
+              allItems = allItems.concat(nextJsonResponse.value);
               nextLink = nextJsonResponse["@odata.nextLink"];
               if (typeof totalResponseBytes === "number" && typeof nextResponse._meta?.response_bytes === "number") {
                 totalResponseBytes += nextResponse._meta.response_bytes;
@@ -1750,6 +1757,7 @@ async function executeGraphTool(tool, config, graphClient, params, authManager,
               }
               pageCount++;
             } else {
+              unmergeablePage = true;
               break;
             }
           }
@@ -1766,7 +1774,11 @@ async function executeGraphTool(tool, config, graphClient, params, authManager,
             if (combinedResponse["@odata.count"]) {
               combinedResponse["@odata.count"] = allItems.length;
             }
-            delete combinedResponse["@odata.nextLink"];
+            if (unmergeablePage && nextLink) {
+              combinedResponse["@odata.nextLink"] = nextLink;
+            } else {
+              delete combinedResponse["@odata.nextLink"];
+            }
             response._meta = {
               ...response._meta,
               result_count: allItems.length,
@@ -1777,7 +1789,7 @@ async function executeGraphTool(tool, config, graphClient, params, authManager,
               combinedResponse["@odata.deltaLink"] = deltaLink;
             }
             logger.info(
-              `Pagination complete: collected ${allItems.length} items across ${pageCount} pages`
+              `Pagination ${nextLink ? "incomplete" : "complete"}: collected ${allItems.length} items across ${pageCount} pages`
             );
           }
         }

package/dist/lib/param-descriptions.js

@@ -31,7 +31,7 @@ function isFetchAllPagesApplicable(tool) {
 const FILTER_PARAM_DESCRIPTION = "OData filter expression. Add $count=true for advanced filters (flag/flagStatus, contains()). Cannot combine with $search.";
 const SEARCH_PARAM_DESCRIPTION = "KQL search query in one pair of double quotes; directory (users/groups) instead quotes each clause with no outer pair. Cannot combine with $filter.";
 const SELECT_PARAM_DESCRIPTION = "Comma-separated fields to return, e.g. id,subject,from,receivedDateTime";
-const EXPAND_PARAM_DESCRIPTION = 'Navigation properties to inline, e.g. attachments on a message or event. Only navigation properties can be expanded: expanding a non-navigation property such as a message body fails with "Parsing OData Select and Expand failed", and an unsupported value may be ignored rather than reported. Request ordinary fields with $select instead.';
+const EXPAND_PARAM_DESCRIPTION = 'Navigation properties to inline, e.g. attachments on a message or event. Only navigation properties can be expanded: expanding a non-navigation property such as a message body fails with "Parsing OData Select and Expand failed". Request ordinary fields with $select instead. Some APIs accept only one relationship per request, so prefer a single value. Some relationships support nested selection, e.g. children($select=id,name).';
 const ORDERBY_PARAM_DESCRIPTION = "Sort expression, e.g. receivedDateTime desc";
 const TOP_PARAM_DESCRIPTION = "Page size (Graph $top). Start small (e.g. 5\u201315) so responses fit the model context; raise only if needed. Use $select to return fewer fields per item. For more rows, use @odata.nextLink from the response instead of a very large $top.";
 const SKIP_PARAM_DESCRIPTION = "Items to skip for pagination. Not supported with $search.";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@softeria/ms-365-mcp-server",
   "mcpName": "io.github.Softeria/ms-365-mcp-server",
-  "version": "0.160.0",
+  "version": "0.161.1",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -197,6 +197,64 @@
     "workScopes": ["Mail.Send.Shared"],
     "llmTip": "Send an existing draft from a shared mailbox. No request body needed — just call with the message ID and the shared mailbox user-id. Draft must exist in the shared mailbox's Drafts folder. Requires Send As permission on the shared mailbox in Exchange."
   },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders",
+    "method": "get",
+    "toolName": "list-shared-mailbox-folders",
+    "descriptionOverride": "List the top-level mail folders in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders/{mailFolder-id}/childFolders",
+    "method": "get",
+    "toolName": "list-shared-mailbox-child-folders",
+    "descriptionOverride": "List the child folders of a mail folder in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders",
+    "method": "post",
+    "toolName": "create-shared-mailbox-folder",
+    "descriptionOverride": "Create a top-level mail folder in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.ReadWrite.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders/{mailFolder-id}/childFolders",
+    "method": "post",
+    "toolName": "create-shared-mailbox-child-folder",
+    "descriptionOverride": "Create a subfolder inside a mail folder in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.ReadWrite.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/messages/{message-id}/attachments",
+    "method": "get",
+    "toolName": "list-shared-mailbox-attachments",
+    "descriptionOverride": "List the attachments on a message in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.Read.Shared"],
+    "llmTip": "To download the bytes, call download-bytes or get-download-url with target=/users/{user-id}/messages/{message-id}/attachments/{attachment-id}/$value."
+  },
+  {
+    "pathPattern": "/users/{user-id}/messages/{message-id}/attachments",
+    "method": "post",
+    "toolName": "add-shared-mailbox-attachment",
+    "descriptionOverride": "Add an attachment under 3MB to a draft message in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.ReadWrite.Shared"],
+    "llmTip": "Body requires @odata.type: {\"@odata.type\": \"#microsoft.graph.fileAttachment\", \"name\": \"file.pdf\", \"contentBytes\": \"<base64>\"}. Graph has no working path for 3MB and above here: upload sessions return 403 in a shared or delegated mailbox."
+  },
+  {
+    "pathPattern": "/users/{user-id}/messages/{message-id}/attachments/{attachment-id}",
+    "method": "delete",
+    "toolName": "delete-shared-mailbox-attachment",
+    "descriptionOverride": "Delete an attachment from a message in another user's mailbox or a shared mailbox. The user-id is the mailbox owner's ID or email address, and delegated access to that mailbox is required.",
+    "presets": ["work"],
+    "workScopes": ["Mail.ReadWrite.Shared"]
+  },
   {
     "pathPattern": "/users",
     "method": "get",
@@ -2266,6 +2324,7 @@
     "pathPattern": "/groups/{group-id}/threads/{conversationThread-id}/reply",
     "method": "post",
     "toolName": "reply-to-group-thread",
+    "descriptionOverride": "Reply to a conversation thread in a Microsoft 365 group, adding a new post to the thread. Use list-group-threads to obtain the thread ID.",
     "presets": ["work"],
     "workScopes": ["Group.ReadWrite.All"],
     "llmTip": "Legacy — Microsoft recommends Teams channels instead of group threads."
@@ -2394,6 +2453,22 @@
     "scopes": ["Calendars.ReadWrite"],
     "llmTip": "Dismisses a triggered event reminder so it won't re-fire. No request body required. Pair with list-calendar-events or get-schedule to find active reminders."
   },
+  {
+    "pathPattern": "/me/events/{event-id}/attachments",
+    "method": "post",
+    "toolName": "add-calendar-event-attachment",
+    "presets": ["calendar", "outlook", "personal"],
+    "scopes": ["Calendars.ReadWrite"],
+    "llmTip": "Under 3MB only. Body requires @odata.type: {\"@odata.type\": \"#microsoft.graph.fileAttachment\", \"name\": \"file.pdf\", \"contentBytes\": \"<base64>\"}. At 3MB and above use create-calendar-event-attachment-upload-session."
+  },
+  {
+    "pathPattern": "/me/events/{event-id}/attachments/createUploadSession",
+    "method": "post",
+    "toolName": "create-calendar-event-attachment-upload-session",
+    "presets": ["calendar", "outlook", "personal"],
+    "scopes": ["Calendars.ReadWrite"],
+    "llmTip": "For attachments 3MB to 150MB; under 3MB use add-calendar-event-attachment. Body: { AttachmentItem: { attachmentType: 'file', name: 'report.pdf', size: 5000000 } }. Returns a pre-authenticated uploadUrl; the caller PUTs the bytes there itself in ranges up to 4MB."
+  },
   {
     "pathPattern": "/me/events/delta()",
     "method": "get",