@softeria/ms-365-mcp-server 0.17.0 → 0.19.0

package/README.md

@@ -71,6 +71,13 @@ get-sharepoint-site-drive-by-id, list-sharepoint-site-items, get-sharepoint-site
 get-sharepoint-site-list, list-sharepoint-site-list-items, get-sharepoint-site-list-item,
 get-sharepoint-sites-delta</sub>
 
+**Shared Mailboxes**  
+<sub>list-shared-mailbox-messages, list-shared-mailbox-folder-messages, get-shared-mailbox-message,
+send-shared-mailbox-mail</sub>
+
+**User Management**  
+<sub>list-users</sub>
+
 ## Organization/Work Mode
 
 To access work/school features (Teams, SharePoint, etc.), enable organization mode using any of these flags:
@@ -89,6 +96,20 @@ To access work/school features (Teams, SharePoint, etc.), enable organization mo
 Organization mode must be enabled from the start to access work account features. Without this flag, only personal
 account features (email, calendar, OneDrive, etc.) are available.
 
+## Shared Mailbox Access
+
+To access shared mailboxes, you need:
+
+1. **Organization mode**: Shared mailbox tools require `--org-mode` flag (work/school accounts only)
+2. **Delegated permissions**: `Mail.Read.Shared` or `Mail.Send.Shared` scopes
+3. **Exchange permissions**: The signed-in user must have been granted access to the shared mailbox
+4. **Usage**: Use the shared mailbox's email address as the `user-id` parameter in the shared mailbox tools
+
+**Finding shared mailboxes**: Use the `list-users` tool to discover available users and shared mailboxes in your
+organization.
+
+Example: `list-shared-mailbox-messages` with `user-id` set to `shared-mailbox@company.com`
+
 ## Quick Start Example
 
 Test login in Claude Desktop:
@@ -127,6 +148,30 @@ claude mcp add ms365 -- npx -y @softeria/ms-365-mcp-server
 For other interfaces that support MCPs, please refer to their respective documentation for the correct
 integration method.
 
+### Local Development
+
+For local development or testing:
+
+```bash
+# From the project directory
+claude mcp add ms -- npx tsx src/index.ts --org-mode
+```
+
+Or configure Claude Desktop manually:
+
+```json
+{
+  "mcpServers": {
+    "ms365": {
+      "command": "node",
+      "args": ["/absolute/path/to/ms-365-mcp-server/dist/index.js", "--org-mode"]
+    }
+  }
+}
+```
+
+> **Note**: Run `npm run build` after code changes to update the `dist/` folder.
+
 ### Authentication
 
 > ⚠️ You must authenticate before using tools.

package/bin/modules/simplified-openapi.mjs

@@ -244,6 +244,7 @@ function reduceProperties(schema, schemaName) {
       'body',
       'subject',
       'message',
+      'attachments',
       'error',
       'code',
       'details',

package/dist/auth-tools.js

@@ -31,7 +31,10 @@ function registerAuthTools(server, authManager) {
           content: [
             {
               type: "text",
-              text
+              text: JSON.stringify({
+                error: "device_code_required",
+                message: text.trim()
+              })
             }
           ]
         };

package/dist/endpoints.json

@@ -29,6 +29,36 @@
     "toolName": "send-mail",
     "scopes": ["Mail.Send"]
   },
+  {
+    "pathPattern": "/users/{user-id}/messages",
+    "method": "get",
+    "toolName": "list-shared-mailbox-messages",
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders/{mailFolder-id}/messages",
+    "method": "get",
+    "toolName": "list-shared-mailbox-folder-messages",
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/messages/{message-id}",
+    "method": "get",
+    "toolName": "get-shared-mailbox-message",
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/sendMail",
+    "method": "post",
+    "toolName": "send-shared-mailbox-mail",
+    "workScopes": ["Mail.Send.Shared"]
+  },
+  {
+    "pathPattern": "/users",
+    "method": "get",
+    "toolName": "list-users",
+    "workScopes": ["User.Read.All"]
+  },
   {
     "pathPattern": "/me/messages",
     "method": "post",
@@ -47,6 +77,30 @@
     "toolName": "move-mail-message",
     "scopes": ["Mail.ReadWrite"]
   },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments",
+    "method": "post",
+    "toolName": "add-mail-attachment",
+    "scopes": ["Mail.ReadWrite"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments",
+    "method": "get",
+    "toolName": "list-mail-attachments",
+    "scopes": ["Mail.Read"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments/{attachment-id}",
+    "method": "get",
+    "toolName": "get-mail-attachment",
+    "scopes": ["Mail.Read"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments/{attachment-id}",
+    "method": "delete",
+    "toolName": "delete-mail-attachment",
+    "scopes": ["Mail.ReadWrite"]
+  },
   {
     "pathPattern": "/me/events",
     "method": "get",

package/dist/generated/client.js

@@ -355,7 +355,7 @@ const microsoft_graph_teamsTab = z.object({
   id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
   configuration: microsoft_graph_teamsTabConfiguration.optional(),
   displayName: z.string().describe("Name of the tab.").nullish(),
-  webUrl: z.string().describe("Deep link URL of the tab instance. Read only.").nullish(),
+  webUrl: z.string().describe("Deep link URL of the tab instance. Read-only.").nullish(),
   teamsApp: microsoft_graph_teamsApp.optional()
 }).strict();
 const microsoft_graph_chat = z.object({
@@ -1161,6 +1161,18 @@ const microsoft_graph_eventType = z.enum([
   "exception",
   "seriesMaster"
 ]);
+const microsoft_graph_attachment = z.object({
+  id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+  contentType: z.string().describe("The MIME type.").nullish(),
+  isInline: z.boolean().describe("true if the attachment is an inline attachment; otherwise, false.").optional(),
+  lastModifiedDateTime: z.string().regex(
+    /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+  ).datetime({ offset: true }).describe(
+    "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z"
+  ).nullish(),
+  name: z.string().describe("The attachment's file name.").nullish(),
+  size: z.number().gte(-2147483648).lte(2147483647).describe("The length of the attachment in bytes.").optional()
+}).strict();
 const microsoft_graph_dateTimeTimeZone = z.object({
   dateTime: z.string().describe(
     "A single point of time in a combined date and time representation ({date}T{time}; for example, 2017-08-29T04:00:00.0000000)."
@@ -1274,6 +1286,9 @@ const microsoft_graph_event = z.object({
   type: microsoft_graph_eventType.optional(),
   body: microsoft_graph_itemBody.optional(),
   subject: z.string().describe("The text of the event's subject line.").nullish(),
+  attachments: z.array(microsoft_graph_attachment).describe(
+    "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+  ).optional(),
   allowNewTimeProposals: z.boolean().describe(
     "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
   ).nullish(),
@@ -1314,10 +1329,7 @@ const microsoft_graph_event = z.object({
   onlineMeetingUrl: z.string().describe(
     "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
   ).nullish(),
-  organizer: microsoft_graph_recipient.optional(),
-  originalEndTimeZone: z.string().describe(
-    "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-  ).nullish()
+  organizer: microsoft_graph_recipient.optional()
 }).strict().passthrough();
 const microsoft_graph_multiValueLegacyExtendedProperty = z.object({
   id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
@@ -2291,6 +2303,7 @@ const microsoft_graph_internetMessageHeader = z.object({
 const microsoft_graph_message = z.object({
   body: microsoft_graph_itemBody.optional(),
   subject: z.string().describe("The subject of the message.").nullish(),
+  attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
   bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
   bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
   ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -2326,8 +2339,7 @@ const microsoft_graph_message = z.object({
   ).datetime({ offset: true }).describe(
     "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
   ).nullish(),
-  toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-  uniqueBody: microsoft_graph_itemBody.optional()
+  toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
 }).strict().passthrough();
 const microsoft_graph_mailFolder = z.lazy(
   () => z.object({
@@ -2361,6 +2373,11 @@ const microsoft_graph_messageCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_message)
 }).partial().strict();
+const microsoft_graph_attachmentCollectionResponse = z.object({
+  "@odata.count": z.number().int().nullable(),
+  "@odata.nextLink": z.string().nullable(),
+  value: z.array(microsoft_graph_attachment)
+}).partial().strict();
 const send_mail_Body = z.object({
   Message: microsoft_graph_message.describe(
     "[Note: Simplified from 30 properties to 25 most common ones]"
@@ -3104,6 +3121,11 @@ const microsoft_graph_conversationMemberCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_conversationMember)
 }).partial().strict();
+const microsoft_graph_userCollectionResponse = z.object({
+  "@odata.count": z.number().int().nullable(),
+  "@odata.nextLink": z.string().nullable(),
+  value: z.array(microsoft_graph_user)
+}).partial().strict();
 const schemas = {
   microsoft_graph_chatType,
   microsoft_graph_teamworkUserIdentityType,
@@ -3231,6 +3253,7 @@ const schemas = {
   microsoft_graph_calendarRoleType,
   microsoft_graph_calendarPermission,
   microsoft_graph_eventType,
+  microsoft_graph_attachment,
   microsoft_graph_dateTimeTimeZone,
   microsoft_graph_timeSlot,
   microsoft_graph_responseType,
@@ -3334,6 +3357,7 @@ const schemas = {
   microsoft_graph_mailFolder,
   microsoft_graph_mailFolderCollectionResponse,
   microsoft_graph_messageCollectionResponse,
+  microsoft_graph_attachmentCollectionResponse,
   send_mail_Body,
   microsoft_graph_externalLink,
   microsoft_graph_notebookLinks,
@@ -3421,7 +3445,8 @@ const schemas = {
   microsoft_graph_listItemCollectionResponse,
   BaseDeltaFunctionResponse,
   microsoft_graph_channelCollectionResponse,
-  microsoft_graph_conversationMemberCollectionResponse
+  microsoft_graph_conversationMemberCollectionResponse,
+  microsoft_graph_userCollectionResponse
 };
 const endpoints = makeApi([
   {
@@ -4161,7 +4186,7 @@ const endpoints = makeApi([
     method: "get",
     path: "/me",
     alias: "get-current-user",
-    description: `Retrieve the properties and relationships of user object. This operation returns by default only a subset of the more commonly used properties for each user. These default properties are noted in the Properties section. To get properties that are not returned by default, do a GET operation for the user and specify the properties in a $select OData query option. Because the user resource supports extensions, you can also use the GET operation to get custom properties and extension data in a user instance. Customers through Microsoft Entra ID for customers can also use this API operation to retrieve their details.`,
+    description: `Returns the user or organizational contact assigned as the user's manager. Optionally, you can expand the manager's chain up to the root node.`,
     requestFormat: "json",
     parameters: [
       {
@@ -5011,6 +5036,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5053,10 +5081,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       }
     ],
@@ -5069,6 +5094,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5111,10 +5139,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       },
       {
@@ -5156,6 +5181,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5198,10 +5226,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       },
       {
@@ -5231,6 +5256,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5273,10 +5301,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       }
     ],
@@ -5289,6 +5314,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5331,10 +5359,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       },
       {
@@ -5658,7 +5683,11 @@ or their delegates can book a private meeting room. If you're organizing an
     method: "post",
     path: "/me/messages",
     alias: "create-draft-email",
-    description: `Create an open extension (openTypeExtension object) and add custom properties in a new or existing instance of a resource. You can create an open extension in a resource instance and store custom data to it all in the same operation, except for specific resources. The table in the Permissions section lists the resources that support open extensions.`,
+    description: `Create a draft of a new message in either JSON or MIME format. When using JSON format, you can:
+- Include an attachment to the message.
+- Update the draft later to add content to the body or change other message properties. When using MIME format:
+- Provide the applicable Internet message headers and the MIME content, all encoded in base64 format in the request body.
+- /* Add any attachments and S/MIME properties to the MIME content. By default, this operation saves the draft in the Drafts folder. Send the draft message in a subsequent operation. Alternatively, send a new message in a single operation, or create a draft to forward, reply and reply-all to an existing message.`,
     requestFormat: "json",
     parameters: [
       {
@@ -5668,6 +5697,7 @@ or their delegates can book a private meeting room. If you're organizing an
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -5703,8 +5733,7 @@ or their delegates can book a private meeting room. If you're organizing an
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       }
     ],
@@ -5716,6 +5745,7 @@ or their delegates can book a private meeting room. If you're organizing an
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -5751,8 +5781,7 @@ or their delegates can book a private meeting room. If you're organizing an
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       },
       {
@@ -5771,13 +5800,7 @@ or their delegates can book a private meeting room. If you're organizing an
     method: "get",
     path: "/me/messages/:messageId",
     alias: "get-mail-message",
-    description: `You can get a single resource instance expanded with a specific extended property, or a collection of resource instances
-that include extended properties matching a filter. Using the query parameter $expand allows you to get the specified resource instance expanded with a specific extended
-property. Use a $filter and eq operator on the id property to specify the extended property. This is currently the only way to get the singleValueLegacyExtendedProperty object that represents an extended property. To get resource instances that have certain extended properties, use the $filter query parameter and apply an eq operator
-on the id property. In addition, for numeric extended properties, apply one of the following operators on the value property:
-eq, ne,ge, gt, le, or lt. For string-typed extended properties, apply a contains, startswith, eq, or ne operator on value. The filter is applied to all instances of the resource in the signed-in user's mailbox. Filtering the string name (Name) in the id of an extended property is case-sensitive. Filtering the value property of an extended
-property is case-insensitive. The following user resources are supported: As well as the following group resources: See Extended properties overview for more information about when to use
-open extensions or extended properties, and how to specify extended properties.`,
+    description: `Get the properties and relationships of the eventMessage object. Apply the $expand parameter on the event navigation property to get the associated event in an attendee's calendar. Currently, this operation returns event message bodies in only HTML format.`,
     requestFormat: "json",
     parameters: [
       {
@@ -5799,6 +5822,7 @@ open extensions or extended properties, and how to specify extended properties.`
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -5834,8 +5858,7 @@ open extensions or extended properties, and how to specify extended properties.`
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       },
       {
@@ -5877,6 +5900,172 @@ open extensions or extended properties, and how to specify extended properties.`
       }
     ]
   },
+  {
+    method: "get",
+    path: "/me/messages/:messageId/attachments",
+    alias: "list-mail-attachments",
+    description: `Retrieve a list of attachment objects attached to a message.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Retrieved collection`,
+        schema: microsoft_graph_attachmentCollectionResponse
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "post",
+    path: "/me/messages/:messageId/attachments",
+    alias: "add-mail-attachment",
+    description: `Use this API to add an attachment to a message. An attachment can be one of the following types: All these types of attachment resources are derived from the attachment
+resource. You can add an attachment to an existing message by posting to its attachments collection, or you can
+add an attachment to a message that is being created and sent on the fly. This operation limits the size of the attachment you can add to under 3 MB.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property`,
+        type: "Body",
+        schema: microsoft_graph_attachment
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Created navigation property.`,
+        schema: microsoft_graph_attachment
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "get",
+    path: "/me/messages/:messageId/attachments/:attachmentId",
+    alias: "get-mail-attachment",
+    description: `Read the properties, relationships, or raw contents of an attachment that is attached to a user event, message, or group post. An attachment can be one of the following types: All these types of attachments are derived from the attachment resource.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Retrieved navigation property`,
+        schema: microsoft_graph_attachment
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "delete",
+    path: "/me/messages/:messageId/attachments/:attachmentId",
+    alias: "delete-mail-attachment",
+    description: `Delete navigation property attachments for me`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "If-Match",
+        type: "Header",
+        schema: z.string().describe("ETag").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
   {
     method: "post",
     path: "/me/messages/:messageId/move",
@@ -5899,6 +6088,7 @@ open extensions or extended properties, and how to specify extended properties.`
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -5934,8 +6124,7 @@ open extensions or extended properties, and how to specify extended properties.`
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       },
       {
@@ -6545,7 +6734,7 @@ open extensions or extended properties, and how to specify extended properties.`
     method: "delete",
     path: "/me/todo/lists/:todoTaskListId/tasks/:todoTaskId",
     alias: "delete-todo-task",
-    description: `Deletes a todoTask object.`,
+    description: `Delete a todoTask object.`,
     requestFormat: "json",
     parameters: [
       {
@@ -8219,6 +8408,324 @@ To monitor future changes, call the delta API by using the @odata.deltaLink in t
         schema: microsoft_graph_ODataErrors_ODataError
       }
     ]
+  },
+  {
+    method: "get",
+    path: "/users",
+    alias: "list-users",
+    description: `List properties and relationships of the user objects.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "ConsistencyLevel",
+        type: "Header",
+        schema: z.string().describe(
+          "Indicates the requested consistency level. Documentation URL: https://docs.microsoft.com/graph/aad-advanced-queries"
+        ).optional()
+      },
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Retrieved collection`,
+        schema: microsoft_graph_userCollectionResponse
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "get",
+    path: "/users/:userId/mailFolders/:mailFolderId/messages",
+    alias: "list-shared-mailbox-folder-messages",
+    description: `The collection of messages in the mailFolder.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Retrieved collection`,
+        schema: microsoft_graph_messageCollectionResponse
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "get",
+    path: "/users/:userId/messages",
+    alias: "list-shared-mailbox-messages",
+    description: `The messages in a mailbox or folder. Read-only. Nullable.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "includeHiddenMessages",
+        type: "Query",
+        schema: z.string().describe("Include Hidden Messages").optional()
+      },
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Retrieved collection`,
+        schema: microsoft_graph_messageCollectionResponse
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "get",
+    path: "/users/:userId/messages/:messageId",
+    alias: "get-shared-mailbox-message",
+    description: `The messages in a mailbox or folder. Read-only. Nullable.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "includeHiddenMessages",
+        type: "Query",
+        schema: z.string().describe("Include Hidden Messages").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Retrieved navigation property`,
+        schema: z.object({
+          body: microsoft_graph_itemBody.optional(),
+          subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
+          bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
+          bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
+          ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
+          conversationId: z.string().describe("The ID of the conversation the email belongs to.").nullish(),
+          conversationIndex: z.string().describe("Indicates the position of the message within the conversation.").nullish(),
+          flag: microsoft_graph_followupFlag.optional(),
+          from: microsoft_graph_recipient.optional(),
+          hasAttachments: z.boolean().describe(
+            "Indicates whether the message has attachments. This property doesn't include inline attachments, so if a message contains only inline attachments, this property is false. To verify the existence of inline attachments, parse the body property to look for a src attribute, such as <IMG src='cid:image001.jpg@01D26CD8.6C05F070'>."
+          ).nullish(),
+          importance: microsoft_graph_importance.optional(),
+          inferenceClassification: microsoft_graph_inferenceClassificationType.optional(),
+          internetMessageHeaders: z.array(microsoft_graph_internetMessageHeader).describe(
+            "A collection of message headers defined by RFC5322. The set includes message headers indicating the network path taken by a message from the sender to the recipient. It can also contain custom message headers that hold app data for the message.  Returned only on applying a $select query option. Read-only."
+          ).optional(),
+          internetMessageId: z.string().describe("The message ID in the format specified by RFC2822.").nullish(),
+          isDeliveryReceiptRequested: z.boolean().describe("Indicates whether a read receipt is requested for the message.").nullish(),
+          isDraft: z.boolean().describe(
+            "Indicates whether the message is a draft. A message is a draft if it hasn't been sent yet."
+          ).nullish(),
+          isRead: z.boolean().describe("Indicates whether the message has been read.").nullish(),
+          isReadReceiptRequested: z.boolean().describe("Indicates whether a read receipt is requested for the message.").nullish(),
+          parentFolderId: z.string().describe("The unique identifier for the message's parent mailFolder.").nullish(),
+          receivedDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "The date and time the message was received.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
+          ).nullish(),
+          replyTo: z.array(microsoft_graph_recipient).describe("The email addresses to use when replying.").optional(),
+          sender: microsoft_graph_recipient.optional(),
+          sentDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
+          ).nullish(),
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
+        }).strict().passthrough()
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "post",
+    path: "/users/:userId/sendMail",
+    alias: "send-shared-mailbox-mail",
+    description: `Send the message specified in the request body using either JSON or MIME format. When using JSON format, you can include a file attachment in the same sendMail action call. When using MIME format: This method saves the message in the Sent Items folder. Alternatively, create a draft message to send later. To learn more about the steps involved in the backend before a mail is delivered to recipients, see here.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `Action parameters`,
+        type: "Body",
+        schema: send_mail_Body
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
   }
 ]);
 const api = new Zodios(endpoints);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -29,6 +29,36 @@
     "toolName": "send-mail",
     "scopes": ["Mail.Send"]
   },
+  {
+    "pathPattern": "/users/{user-id}/messages",
+    "method": "get",
+    "toolName": "list-shared-mailbox-messages",
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/mailFolders/{mailFolder-id}/messages",
+    "method": "get",
+    "toolName": "list-shared-mailbox-folder-messages",
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/messages/{message-id}",
+    "method": "get",
+    "toolName": "get-shared-mailbox-message",
+    "workScopes": ["Mail.Read.Shared"]
+  },
+  {
+    "pathPattern": "/users/{user-id}/sendMail",
+    "method": "post",
+    "toolName": "send-shared-mailbox-mail",
+    "workScopes": ["Mail.Send.Shared"]
+  },
+  {
+    "pathPattern": "/users",
+    "method": "get",
+    "toolName": "list-users",
+    "workScopes": ["User.Read.All"]
+  },
   {
     "pathPattern": "/me/messages",
     "method": "post",
@@ -47,6 +77,30 @@
     "toolName": "move-mail-message",
     "scopes": ["Mail.ReadWrite"]
   },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments",
+    "method": "post",
+    "toolName": "add-mail-attachment",
+    "scopes": ["Mail.ReadWrite"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments",
+    "method": "get",
+    "toolName": "list-mail-attachments",
+    "scopes": ["Mail.Read"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments/{attachment-id}",
+    "method": "get",
+    "toolName": "get-mail-attachment",
+    "scopes": ["Mail.Read"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments/{attachment-id}",
+    "method": "delete",
+    "toolName": "delete-mail-attachment",
+    "scopes": ["Mail.ReadWrite"]
+  },
   {
     "pathPattern": "/me/events",
     "method": "get",