@softeria/ms-365-mcp-server 0.161.2 → 0.161.4

package/README.md

@@ -633,7 +633,7 @@ npx @softeria/ms-365-mcp-server --list-presets  # See all available presets
 
 Available presets: `mail`, `calendar`, `files`, `personal`, `work`, `excel`, `contacts`, `tasks`, `onenote`, `search`, `users`, `outlook`, `onedrive`, `teams`, `teams-write`, `all`
 
-Each endpoint in `endpoints.json` declares which presets it belongs to via a `presets` array, so every preset is an exact tool-name allow-list that never over-matches across apps (e.g. `mail` does not include shared-mailbox tools; those are in `work`). The universal binary reader `download-bytes` is included in every preset except `teams-write`, so whatever an app returns (a file, an attachment, a photo, a recording) can always be fetched; `get-download-url` (a pre-authenticated URL for drive/SharePoint files) rides with the drive-backed presets. So a preset that can find a file can always read its bytes.
+Each endpoint in `endpoints.json` declares which presets it belongs to via a `presets` array, so every preset is an exact tool-name allow-list that never over-matches across apps (e.g. `mail` does not include shared-mailbox tools; those are in `work`). The universal binary reader `download-bytes` is included in every preset except `teams-write`, so whatever an app returns (a file, an attachment, a photo, a recording) can always be fetched; `get-download-url` (a pre-authenticated URL for drive/SharePoint files) rides with the drive-backed presets, and joins every other preset (bar `teams-write`) when HTTP mode runs with `--enable-attachment-urls`. So a preset that can find a file can always read its bytes.
 
 The `outlook`, `onedrive` and `teams` presets are app-scoped: they expose exactly one Microsoft app. Use these for "expose exactly one app" deployments:
 
@@ -699,7 +699,8 @@ When running as an MCP server, the following options can be used:
                   --trust-proxy-auth
 --enable-auth-tools Enable login/logout tools when using HTTP mode (disabled by default in HTTP mode)
 --enable-attachment-urls Let get-download-url mint a server-served URL for byte resources Graph
-                  exposes no pre-authenticated URL for (see "Server-Minted Attachment URLs")
+                  exposes no pre-authenticated URL for (see "Server-Minted Attachment URLs").
+                  Also adds get-download-url to any --preset that lacks it (except teams-write)
 --attachment-port <port> Serve /attachment on its own listener on this port instead of on the
                   MCP app, so a fetcher that can read attachments cannot also reach /mcp
                   (requires --enable-attachment-urls; see "Splitting the attachment listener")
@@ -761,7 +762,13 @@ agent's context. A 73 KB, 3-page PDF costs about 24,500 tokens that way, and the
 cannot parse them anyway.
 
 `--enable-attachment-urls` (HTTP mode, off by default) closes that gap. When Graph has no
-URL of its own, `get-download-url` mints one this server serves:
+URL of its own, `get-download-url` mints one this server serves. With it on,
+`get-download-url` is registered under every `--preset` (except the send-only `teams-write`),
+so a `--preset mail` agent that lists an attachment can mint a URL for it. A minted URL only
+works if the preset's scopes cover the resource: a contacts, tasks or excel preset has no Mail
+scopes, so a URL minted for a mail attachment fails when fetched.
+
+The minted URL looks like:
 
 ```
 GET /attachment?t=<ticket>&dgk=<key-id>&dgx=<expiry>&dgs=<signature>

package/dist/cli.js

@@ -29,7 +29,7 @@ program.name("ms-365-mcp-server").description("Microsoft 365 MCP Server").versio
   "Enable login/logout tools when using HTTP mode (disabled by default in HTTP mode)"
 ).option(
   "--enable-attachment-urls",
-  "HTTP mode only. Let get-download-url mint a short-TTL, single-use URL served by this server for Graph byte resources that expose no pre-authenticated URL of their own (mail and event attachments, meeting recordings, other $value endpoints). Requires MS365_MCP_ATTACHMENT_URL_BASE and MS365_MCP_ATTACHMENT_URL_KEY (or _KEY_FILE)"
+  "HTTP mode only. Let get-download-url mint a short-TTL, single-use URL served by this server for Graph byte resources that expose no pre-authenticated URL of their own (mail and event attachments, meeting recordings, other $value endpoints). Also adds get-download-url to any --preset that lacks it (except teams-write). Requires MS365_MCP_ATTACHMENT_URL_BASE and MS365_MCP_ATTACHMENT_URL_KEY (or _KEY_FILE)"
 ).option(
   "--attachment-port <port>",
   "HTTP mode only. Serve the attachment download route on its own listener on this port instead of on the MCP app, so a caller that can fetch attachments cannot also reach /mcp. Requires --enable-attachment-urls, and MS365_MCP_ATTACHMENT_URL_BASE must name this port. A separate port only isolates the two surfaces if they also bind separate interfaces \u2014 see --attachment-host. Equivalent env var: MS365_MCP_ATTACHMENT_PORT."
@@ -106,7 +106,9 @@ function parseArgs() {
   if (options.preset) {
     const presetNames = options.preset.split(",").map((p) => p.trim());
     try {
-      options.enabledTools = getCombinedPresetPattern(presetNames);
+      options.enabledTools = getCombinedPresetPattern(presetNames, {
+        attachmentUrls: Boolean(options.http && options.enableAttachmentUrls)
+      });
       const requiresOrgMode = presetNames.some((preset) => presetRequiresOrgMode(preset));
       if (requiresOrgMode && !options.orgMode) {
         console.warn(

package/dist/graph-tools.js

@@ -1036,6 +1036,19 @@ const UTILITY_TOOLS = [
       }
       const pathPart = target.replace(/\/+$/, "");
       if (/^(\/me|\/users\/[^/]+)\/messages\/[^/]+\/attachments\//.test(pathPart) || /^(\/me|\/users\/[^/]+)\/events\/[^/]+\/attachments\//.test(pathPart) || /^\/groups\/[^/]+\/messages\/[^/]+\/attachments\//.test(pathPart) || /^\/groups\/[^/]+\/events\/[^/]+\/attachments\//.test(pathPart)) {
+        if (getAttachmentMinting() && !pathPart.endsWith("/$value")) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify({
+                  error: "Only the /$value byte endpoint can be minted a download URL: end target with /$value, e.g. /me/messages/{message-id}/attachments/{attachment-id}/$value. The attachment resource itself returns JSON with base64 contentBytes."
+                })
+              }
+            ],
+            isError: true
+          };
+        }
         const minted = await mintDownloadUrl(pathPart, accountParam, authManager);
         if (minted) return minted;
         return {
@@ -1053,6 +1066,19 @@ const UTILITY_TOOLS = [
       if (/^(\/me|\/users\/[^/]+)\/onlineMeetings\/[^/]+\/recordings\/[^/]+(?:\/content)?$/.test(
         pathPart
       ) || /^\/communications\/calls\/[^/]+\/recordings\/[^/]+(?:\/content)?$/.test(pathPart)) {
+        if (getAttachmentMinting() && !pathPart.endsWith("/content")) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify({
+                  error: "Only the /content byte endpoint can be minted a download URL: end target with /content, e.g. /me/onlineMeetings/{meeting-id}/recordings/{recording-id}/content."
+                })
+              }
+            ],
+            isError: true
+          };
+        }
         const minted = await mintDownloadUrl(pathPart, accountParam, authManager);
         if (minted) return minted;
         return {

package/dist/tool-categories.js

@@ -101,7 +101,7 @@ const TOOL_CATEGORIES = {
     description: "All available tools"
   }
 };
-function getCombinedPresetPattern(presets) {
+function getCombinedPresetPattern(presets, { attachmentUrls = false } = {}) {
   const patterns = presets.map((preset) => {
     const category = TOOL_CATEGORIES[preset];
     if (!category) {
@@ -111,6 +111,9 @@ function getCombinedPresetPattern(presets) {
     }
     return category.pattern.source;
   });
+  if (attachmentUrls && presets.some((p) => !PRESET_META[p]?.omitUniversalUtilities) && !patterns.some((p) => new RegExp(p).test("get-download-url"))) {
+    patterns.push("^get-download-url$");
+  }
   return patterns.join("|");
 }
 function listPresets() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@softeria/ms-365-mcp-server",
   "mcpName": "io.github.Softeria/ms-365-mcp-server",
-  "version": "0.161.2",
+  "version": "0.161.4",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",