@softeria/ms-365-mcp-server 0.4.1 → 0.4.3

package/README.md

@@ -21,9 +21,6 @@ A Model Context Protocol (MCP) server for interacting with Microsoft 365 service
 - To Do tasks and task lists
 - Planner plans and tasks
 - Outlook contacts
-- User management
-- Dynamic tools powered by Microsoft Graph OpenAPI spec
-- Built on the Model Context Protocol
 
 ## Quick Start Example
 
@@ -82,6 +79,31 @@ integration method.
 
 Tokens are cached securely in your OS credential store (fallback to file).
 
+## CLI Options
+
+The following options can be used when running ms-365-mcp-server directly from the command line:
+
+```
+--login           Login using device code flow
+--logout          Log out and clear saved credentials
+--verify-login    Verify login without starting the server
+```
+
+### Server Options
+
+When running as an MCP server, the following options can be used:
+
+```
+-v                Enable verbose logging
+--read-only       Start server in read-only mode, disabling write operations
+```
+
+Environment variables:
+
+- `READ_ONLY=true|1`: Alternative to --read-only flag
+- `LOG_LEVEL`: Set logging level (default: 'info')
+- `SILENT=true`: Disable console output
+
 ## License
 
 MIT © 2025 Softeria

package/bin/modules/simplified-openapi.mjs

@@ -6,6 +6,13 @@ export function createAndSaveSimplifiedOpenAPI(endpointsFile, openapiFile, opena
 
   const spec = fs.readFileSync(openapiFile, 'utf8');
   const openApiSpec = yaml.load(spec);
+
+  for (const endpoint of endpoints) {
+    if (!openApiSpec.paths[endpoint.pathPattern]) {
+      throw new Error(`Path "${endpoint.pathPattern}" not found in OpenAPI spec.`);
+    }
+  }
+
   for (const [key, value] of Object.entries(openApiSpec.paths)) {
     const e = endpoints.filter((ep) => ep.pathPattern === key);
     if (e.length === 0) {

package/dist/auth.js

@@ -124,6 +124,7 @@ class AuthManager {
         };
         try {
             logger.info('Requesting device code...');
+            logger.info(`Scopes are: ${this.scopes.join(', ')}`);
             const response = await this.msalApp.acquireTokenByDeviceCode(deviceCodeRequest);
             logger.info('Device code login successful');
             this.accessToken = response?.accessToken || null;

package/dist/cli.js

@@ -14,8 +14,13 @@ program
     .option('-v', 'Enable verbose logging')
     .option('--login', 'Login using device code flow')
     .option('--logout', 'Log out and clear saved credentials')
-    .option('--verify-login', 'Verify login without starting the server');
+    .option('--verify-login', 'Verify login without starting the server')
+    .option('--read-only', 'Start server in read-only mode, disabling write operations');
 export function parseArgs() {
     program.parse();
-    return program.opts();
+    const options = program.opts();
+    if (process.env.READ_ONLY === 'true' || process.env.READ_ONLY === '1') {
+        options.readOnly = true;
+    }
+    return options;
 }

package/dist/endpoints.json

@@ -104,7 +104,7 @@
         ]
     },
     {
-        "pathPattern": "/drives",
+        "pathPattern": "/me/drives",
         "method": "get",
         "toolName": "list-drives",
         "scopes": [
@@ -196,6 +196,14 @@
             "Files.Read"
         ]
     },
+    {
+        "pathPattern": "/drives/{drive-id}/items/{driveItem-id}/children",
+        "method": "post",
+        "toolName": "create-folder",
+        "scopes": [
+            "Files.ReadWrite"
+        ]
+    },
     {
         "pathPattern": "/me/onenote/notebooks",
         "method": "get",