@softeria/ms-365-mcp-server 0.18.0 → 0.19.0

package/README.md

@@ -148,6 +148,30 @@ claude mcp add ms365 -- npx -y @softeria/ms-365-mcp-server
 For other interfaces that support MCPs, please refer to their respective documentation for the correct
 integration method.
 
+### Local Development
+
+For local development or testing:
+
+```bash
+# From the project directory
+claude mcp add ms -- npx tsx src/index.ts --org-mode
+```
+
+Or configure Claude Desktop manually:
+
+```json
+{
+  "mcpServers": {
+    "ms365": {
+      "command": "node",
+      "args": ["/absolute/path/to/ms-365-mcp-server/dist/index.js", "--org-mode"]
+    }
+  }
+}
+```
+
+> **Note**: Run `npm run build` after code changes to update the `dist/` folder.
+
 ### Authentication
 
 > ⚠️ You must authenticate before using tools.

package/bin/modules/simplified-openapi.mjs

@@ -244,6 +244,7 @@ function reduceProperties(schema, schemaName) {
       'body',
       'subject',
       'message',
+      'attachments',
       'error',
       'code',
       'details',

package/dist/auth-tools.js

@@ -31,7 +31,10 @@ function registerAuthTools(server, authManager) {
           content: [
             {
               type: "text",
-              text
+              text: JSON.stringify({
+                error: "device_code_required",
+                message: text.trim()
+              })
             }
           ]
         };

package/dist/endpoints.json

@@ -77,6 +77,30 @@
     "toolName": "move-mail-message",
     "scopes": ["Mail.ReadWrite"]
   },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments",
+    "method": "post",
+    "toolName": "add-mail-attachment",
+    "scopes": ["Mail.ReadWrite"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments",
+    "method": "get",
+    "toolName": "list-mail-attachments",
+    "scopes": ["Mail.Read"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments/{attachment-id}",
+    "method": "get",
+    "toolName": "get-mail-attachment",
+    "scopes": ["Mail.Read"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments/{attachment-id}",
+    "method": "delete",
+    "toolName": "delete-mail-attachment",
+    "scopes": ["Mail.ReadWrite"]
+  },
   {
     "pathPattern": "/me/events",
     "method": "get",

package/dist/generated/client.js

@@ -1161,6 +1161,18 @@ const microsoft_graph_eventType = z.enum([
   "exception",
   "seriesMaster"
 ]);
+const microsoft_graph_attachment = z.object({
+  id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+  contentType: z.string().describe("The MIME type.").nullish(),
+  isInline: z.boolean().describe("true if the attachment is an inline attachment; otherwise, false.").optional(),
+  lastModifiedDateTime: z.string().regex(
+    /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+  ).datetime({ offset: true }).describe(
+    "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z"
+  ).nullish(),
+  name: z.string().describe("The attachment's file name.").nullish(),
+  size: z.number().gte(-2147483648).lte(2147483647).describe("The length of the attachment in bytes.").optional()
+}).strict();
 const microsoft_graph_dateTimeTimeZone = z.object({
   dateTime: z.string().describe(
     "A single point of time in a combined date and time representation ({date}T{time}; for example, 2017-08-29T04:00:00.0000000)."
@@ -1274,6 +1286,9 @@ const microsoft_graph_event = z.object({
   type: microsoft_graph_eventType.optional(),
   body: microsoft_graph_itemBody.optional(),
   subject: z.string().describe("The text of the event's subject line.").nullish(),
+  attachments: z.array(microsoft_graph_attachment).describe(
+    "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+  ).optional(),
   allowNewTimeProposals: z.boolean().describe(
     "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
   ).nullish(),
@@ -1314,10 +1329,7 @@ const microsoft_graph_event = z.object({
   onlineMeetingUrl: z.string().describe(
     "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
   ).nullish(),
-  organizer: microsoft_graph_recipient.optional(),
-  originalEndTimeZone: z.string().describe(
-    "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-  ).nullish()
+  organizer: microsoft_graph_recipient.optional()
 }).strict().passthrough();
 const microsoft_graph_multiValueLegacyExtendedProperty = z.object({
   id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
@@ -2291,6 +2303,7 @@ const microsoft_graph_internetMessageHeader = z.object({
 const microsoft_graph_message = z.object({
   body: microsoft_graph_itemBody.optional(),
   subject: z.string().describe("The subject of the message.").nullish(),
+  attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
   bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
   bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
   ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -2326,8 +2339,7 @@ const microsoft_graph_message = z.object({
   ).datetime({ offset: true }).describe(
     "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
   ).nullish(),
-  toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-  uniqueBody: microsoft_graph_itemBody.optional()
+  toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
 }).strict().passthrough();
 const microsoft_graph_mailFolder = z.lazy(
   () => z.object({
@@ -2361,6 +2373,11 @@ const microsoft_graph_messageCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_message)
 }).partial().strict();
+const microsoft_graph_attachmentCollectionResponse = z.object({
+  "@odata.count": z.number().int().nullable(),
+  "@odata.nextLink": z.string().nullable(),
+  value: z.array(microsoft_graph_attachment)
+}).partial().strict();
 const send_mail_Body = z.object({
   Message: microsoft_graph_message.describe(
     "[Note: Simplified from 30 properties to 25 most common ones]"
@@ -3236,6 +3253,7 @@ const schemas = {
   microsoft_graph_calendarRoleType,
   microsoft_graph_calendarPermission,
   microsoft_graph_eventType,
+  microsoft_graph_attachment,
   microsoft_graph_dateTimeTimeZone,
   microsoft_graph_timeSlot,
   microsoft_graph_responseType,
@@ -3339,6 +3357,7 @@ const schemas = {
   microsoft_graph_mailFolder,
   microsoft_graph_mailFolderCollectionResponse,
   microsoft_graph_messageCollectionResponse,
+  microsoft_graph_attachmentCollectionResponse,
   send_mail_Body,
   microsoft_graph_externalLink,
   microsoft_graph_notebookLinks,
@@ -5017,6 +5036,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5059,10 +5081,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       }
     ],
@@ -5075,6 +5094,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5117,10 +5139,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       },
       {
@@ -5162,6 +5181,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5204,10 +5226,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       },
       {
@@ -5237,6 +5256,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5279,10 +5301,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       }
     ],
@@ -5295,6 +5314,9 @@ or their delegates can book a private meeting room. If you're organizing an
           type: microsoft_graph_eventType.optional(),
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The text of the event's subject line.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe(
+            "The collection of FileAttachment, ItemAttachment, and referenceAttachment attachments for the event. Navigation property. Read-only. Nullable."
+          ).optional(),
           allowNewTimeProposals: z.boolean().describe(
             "true if the meeting organizer allows invitees to propose a new time when responding; otherwise, false. Optional. The default is true."
           ).nullish(),
@@ -5337,10 +5359,7 @@ or their delegates can book a private meeting room. If you're organizing an
           onlineMeetingUrl: z.string().describe(
             "A URL for an online meeting. The property is set only when an organizer specifies in Outlook that an event is an online meeting such as Skype. Read-only.To access the URL to join an online meeting, use joinUrl which is exposed via the onlineMeeting property of the event. The onlineMeetingUrl property will be deprecated in the future."
           ).nullish(),
-          organizer: microsoft_graph_recipient.optional(),
-          originalEndTimeZone: z.string().describe(
-            "The end time zone that was set when the event was created. A value of tzone://Microsoft/Custom indicates that a legacy custom time zone was set in desktop Outlook."
-          ).nullish()
+          organizer: microsoft_graph_recipient.optional()
         }).strict().passthrough()
       },
       {
@@ -5678,6 +5697,7 @@ or their delegates can book a private meeting room. If you're organizing an
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -5713,8 +5733,7 @@ or their delegates can book a private meeting room. If you're organizing an
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       }
     ],
@@ -5726,6 +5745,7 @@ or their delegates can book a private meeting room. If you're organizing an
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -5761,8 +5781,7 @@ or their delegates can book a private meeting room. If you're organizing an
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       },
       {
@@ -5803,6 +5822,7 @@ or their delegates can book a private meeting room. If you're organizing an
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -5838,8 +5858,7 @@ or their delegates can book a private meeting room. If you're organizing an
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       },
       {
@@ -5881,6 +5900,172 @@ or their delegates can book a private meeting room. If you're organizing an
       }
     ]
   },
+  {
+    method: "get",
+    path: "/me/messages/:messageId/attachments",
+    alias: "list-mail-attachments",
+    description: `Retrieve a list of attachment objects attached to a message.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Retrieved collection`,
+        schema: microsoft_graph_attachmentCollectionResponse
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "post",
+    path: "/me/messages/:messageId/attachments",
+    alias: "add-mail-attachment",
+    description: `Use this API to add an attachment to a message. An attachment can be one of the following types: All these types of attachment resources are derived from the attachment
+resource. You can add an attachment to an existing message by posting to its attachments collection, or you can
+add an attachment to a message that is being created and sent on the fly. This operation limits the size of the attachment you can add to under 3 MB.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property`,
+        type: "Body",
+        schema: microsoft_graph_attachment
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Created navigation property.`,
+        schema: microsoft_graph_attachment
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "get",
+    path: "/me/messages/:messageId/attachments/:attachmentId",
+    alias: "get-mail-attachment",
+    description: `Read the properties, relationships, or raw contents of an attachment that is attached to a user event, message, or group post. An attachment can be one of the following types: All these types of attachments are derived from the attachment resource.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `Retrieved navigation property`,
+        schema: microsoft_graph_attachment
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
+  {
+    method: "delete",
+    path: "/me/messages/:messageId/attachments/:attachmentId",
+    alias: "delete-mail-attachment",
+    description: `Delete navigation property attachments for me`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "If-Match",
+        type: "Header",
+        schema: z.string().describe("ETag").optional()
+      }
+    ],
+    response: z.void(),
+    errors: [
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      },
+      {
+        status: NaN,
+        description: `error`,
+        schema: microsoft_graph_ODataErrors_ODataError
+      }
+    ]
+  },
   {
     method: "post",
     path: "/me/messages/:messageId/move",
@@ -5903,6 +6088,7 @@ or their delegates can book a private meeting room. If you're organizing an
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -5938,8 +6124,7 @@ or their delegates can book a private meeting room. If you're organizing an
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       },
       {
@@ -8463,6 +8648,7 @@ To monitor future changes, call the delta API by using the @odata.deltaLink in t
         schema: z.object({
           body: microsoft_graph_itemBody.optional(),
           subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
           bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
           bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
           ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
@@ -8498,8 +8684,7 @@ To monitor future changes, call the delta API by using the @odata.deltaLink in t
           ).datetime({ offset: true }).describe(
             "The date and time the message was sent.  The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
           ).nullish(),
-          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
-          uniqueBody: microsoft_graph_itemBody.optional()
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional()
         }).strict().passthrough()
       },
       {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -77,6 +77,30 @@
     "toolName": "move-mail-message",
     "scopes": ["Mail.ReadWrite"]
   },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments",
+    "method": "post",
+    "toolName": "add-mail-attachment",
+    "scopes": ["Mail.ReadWrite"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments",
+    "method": "get",
+    "toolName": "list-mail-attachments",
+    "scopes": ["Mail.Read"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments/{attachment-id}",
+    "method": "get",
+    "toolName": "get-mail-attachment",
+    "scopes": ["Mail.Read"]
+  },
+  {
+    "pathPattern": "/me/messages/{message-id}/attachments/{attachment-id}",
+    "method": "delete",
+    "toolName": "delete-mail-attachment",
+    "scopes": ["Mail.ReadWrite"]
+  },
   {
     "pathPattern": "/me/events",
     "method": "get",