@softeria/ms-365-mcp-server 0.76.0 → 0.78.0

package/dist/endpoints.json

@@ -944,6 +944,21 @@
     "toolName": "get-chat-message",
     "workScopes": ["ChatMessage.Read"]
   },
+  {
+    "pathPattern": "/chats/{chat-id}/messages/{chatMessage-id}/hostedContents",
+    "method": "get",
+    "toolName": "list-chat-message-hosted-contents",
+    "workScopes": ["ChatMessage.Read"],
+    "llmTip": "Lists hosted-content references (inline images, code snippets) attached to a Teams chat message. Returns an array of { id, contentType }. Use get-chat-message-hosted-content with the id to download the bytes. Hosted content IDs can also be parsed from the <img src> URL in the message body between /hostedContents/ and /$value."
+  },
+  {
+    "pathPattern": "/chats/{chat-id}/messages/{chatMessage-id}/hostedContents/{chatMessageHostedContent-id}/$value",
+    "method": "get",
+    "toolName": "get-chat-message-hosted-content",
+    "workScopes": ["ChatMessage.Read"],
+    "returnDownloadUrl": true,
+    "llmTip": "Returns raw bytes of a hosted content item (typically image/png or image/jpeg) attached to a Teams 1:1 or group chat message. Use list-chat-message-hosted-contents to discover IDs, or extract the ID from the <img src> URL in the message body."
+  },
   {
     "pathPattern": "/chats/{chat-id}/messages",
     "method": "post",
@@ -1005,6 +1020,21 @@
     "toolName": "get-channel-message",
     "workScopes": ["ChannelMessage.Read.All"]
   },
+  {
+    "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages/{chatMessage-id}/hostedContents",
+    "method": "get",
+    "toolName": "list-channel-message-hosted-contents",
+    "workScopes": ["ChannelMessage.Read.All"],
+    "llmTip": "Lists hosted-content references (inline images, code snippets) attached to a Teams channel message. Returns an array of { id, contentType }. Use get-channel-message-hosted-content with the id to download bytes."
+  },
+  {
+    "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages/{chatMessage-id}/hostedContents/{chatMessageHostedContent-id}/$value",
+    "method": "get",
+    "toolName": "get-channel-message-hosted-content",
+    "workScopes": ["ChannelMessage.Read.All"],
+    "returnDownloadUrl": true,
+    "llmTip": "Returns raw bytes of a hosted content item attached to a Teams channel message. Use list-channel-message-hosted-contents to discover IDs."
+  },
   {
     "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages",
     "method": "post",
@@ -1375,5 +1405,40 @@
     "toolName": "list-webinar-sessions",
     "workScopes": ["VirtualEvent.Read"],
     "llmTip": "Lists sessions for a webinar. Each session has startDateTime, endDateTime, joinWebUrl, subject, and is essentially an online meeting associated with the webinar."
+  },
+  {
+    "pathPattern": "/places/{place-id}/graph.room",
+    "method": "get",
+    "toolName": "get-room",
+    "workScopes": ["Place.Read.All"],
+    "llmTip": "Gets a place cast as a room, returning room-specific properties: displayName, emailAddress (for booking), capacity, building, floorNumber, floorLabel, isWheelChairAccessible, audioDeviceName, videoDeviceName, displayDeviceName. The place-id can be the room's ID or email address."
+  },
+  {
+    "pathPattern": "/places/{place-id}/graph.roomList",
+    "method": "get",
+    "toolName": "get-room-list",
+    "workScopes": ["Place.Read.All"],
+    "llmTip": "Gets a place cast as a room list, returning room list properties: displayName, emailAddress, address. Use the place-id (ID or email address) of the room list. Then use list-room-list-rooms to get the rooms within this list."
+  },
+  {
+    "pathPattern": "/places/{place-id}/graph.roomList/rooms",
+    "method": "get",
+    "toolName": "list-room-list-rooms",
+    "workScopes": ["Place.Read.All"],
+    "llmTip": "Lists rooms belonging to a specific room list. The place-id is the ID or email address of the room list (from get-room-list). Returns rooms with displayName, emailAddress, capacity, building, floorNumber, floorLabel, and AV equipment details. Combine with find-meeting-times to find available rooms for booking."
+  },
+  {
+    "pathPattern": "/places/{place-id}/graph.roomList/rooms/{room-id}",
+    "method": "get",
+    "toolName": "get-room-list-room",
+    "workScopes": ["Place.Read.All"],
+    "llmTip": "Gets a specific room within a room list. The place-id is the room list ID or email, and room-id is the specific room ID. Returns full room details including capacity, building, floor, and AV equipment."
+  },
+  {
+    "pathPattern": "/places/{place-id}",
+    "method": "patch",
+    "toolName": "update-place",
+    "workScopes": ["Place.ReadWrite.All"],
+    "llmTip": "Updates properties of a place (room, room list, building, floor, section, desk, workspace). Body can include: displayName, phone, capacity, building, floorNumber, floorLabel, tags, audioDeviceName, videoDeviceName, displayDeviceName, isWheelChairAccessible. Use get-room or get-room-list to verify current values before updating."
   }
 ]

package/dist/generated/client.js

@@ -422,6 +422,11 @@ const microsoft_graph_chatMessageCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_chatMessage)
 }).partial().passthrough();
+const microsoft_graph_chatMessageHostedContentCollectionResponse = z.object({
+  "@odata.count": z.number().int().nullable(),
+  "@odata.nextLink": z.string().nullable(),
+  value: z.array(microsoft_graph_chatMessageHostedContent)
+}).partial().passthrough();
 const microsoft_graph_pinnedChatMessageInfoCollectionResponse = z.object({
   "@odata.count": z.number().int().nullable(),
   "@odata.nextLink": z.string().nullable(),
@@ -3593,6 +3598,120 @@ const microsoft_graph_linkedResourceCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_linkedResource)
 }).partial().passthrough();
+const microsoft_graph_checkInMethod = z.enum([
+  "unspecified",
+  "manual",
+  "inferred",
+  "verified",
+  "unknownFutureValue"
+]);
+const microsoft_graph_checkInClaim = z.object({
+  calendarEventId: z.string().describe(
+    "The unique identifier for an Outlook calendar event associated with the checkInClaim object. For more information, see the iCalUId property in event."
+  ).optional(),
+  checkInMethod: microsoft_graph_checkInMethod.optional(),
+  createdDateTime: z.string().regex(
+    /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+  ).datetime({ offset: true }).describe(
+    "The date and time when the checkInClaim object was created. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z."
+  ).nullish()
+}).passthrough();
+const microsoft_graph_place = z.object({
+  id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+  address: microsoft_graph_physicalAddress.optional(),
+  displayName: z.string().describe("The name that is associated with the place.").optional(),
+  geoCoordinates: microsoft_graph_outlookGeoCoordinates.optional(),
+  isWheelChairAccessible: z.boolean().describe("Indicates whether the place is wheelchair accessible.").nullish(),
+  label: z.string().describe("User-defined description of the place.").nullish(),
+  parentId: z.string().describe("The ID of a parent place.").nullish(),
+  phone: z.string().describe("The phone number of the place.").nullish(),
+  tags: z.array(z.string()).describe("Custom tags that are associated with the place for categorization or filtering.").optional(),
+  checkIns: z.array(microsoft_graph_checkInClaim).describe(
+    "A subresource of a place object that indicates the check-in status of an Outlook calendar event booked at the place."
+  ).optional()
+}).passthrough();
+const microsoft_graph_bookingType = z.enum(["unknown", "standard", "reserved"]);
+const microsoft_graph_placeFeatureEnablement = z.enum([
+  "unknown",
+  "enabled",
+  "disabled",
+  "unknownFutureValue"
+]);
+const microsoft_graph_room = z.object({
+  id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+  address: microsoft_graph_physicalAddress.optional(),
+  displayName: z.string().describe("The name that is associated with the place.").optional(),
+  geoCoordinates: microsoft_graph_outlookGeoCoordinates.optional(),
+  isWheelChairAccessible: z.boolean().describe("Indicates whether the place is wheelchair accessible.").nullish(),
+  label: z.string().describe("User-defined description of the place.").nullish(),
+  parentId: z.string().describe("The ID of a parent place.").nullish(),
+  phone: z.string().describe("The phone number of the place.").nullish(),
+  tags: z.array(z.string()).describe("Custom tags that are associated with the place for categorization or filtering.").optional(),
+  checkIns: z.array(microsoft_graph_checkInClaim).describe(
+    "A subresource of a place object that indicates the check-in status of an Outlook calendar event booked at the place."
+  ).optional(),
+  audioDeviceName: z.string().describe("Specifies the name of the audio device in the room.").nullish(),
+  bookingType: microsoft_graph_bookingType.optional(),
+  building: z.string().describe("Specifies the building name or building number that the room is in.").nullish(),
+  capacity: z.number().gte(-2147483648).lte(2147483647).describe("Specifies the capacity of the room.").nullish(),
+  displayDeviceName: z.string().describe("Specifies the name of the display device in the room.").nullish(),
+  emailAddress: z.string().describe("Email address of the room.").nullish(),
+  floorLabel: z.string().describe("Specifies a descriptive label for the floor, for example, P.").nullish(),
+  floorNumber: z.number().gte(-2147483648).lte(2147483647).describe("Specifies the floor number that the room is on.").nullish(),
+  nickname: z.string().describe("Specifies a nickname for the room, for example, 'conf room'.").optional(),
+  placeId: z.string().describe("An alternative immutable unique identifier of the room. Read-only.").nullish(),
+  teamsEnabledState: microsoft_graph_placeFeatureEnablement.optional(),
+  videoDeviceName: z.string().describe("Specifies the name of the video device in the room.").nullish()
+}).passthrough();
+const microsoft_graph_placeMode = z.object({}).passthrough();
+const microsoft_graph_workspace = z.object({
+  id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+  address: microsoft_graph_physicalAddress.optional(),
+  displayName: z.string().describe("The name that is associated with the place.").optional(),
+  geoCoordinates: microsoft_graph_outlookGeoCoordinates.optional(),
+  isWheelChairAccessible: z.boolean().describe("Indicates whether the place is wheelchair accessible.").nullish(),
+  label: z.string().describe("User-defined description of the place.").nullish(),
+  parentId: z.string().describe("The ID of a parent place.").nullish(),
+  phone: z.string().describe("The phone number of the place.").nullish(),
+  tags: z.array(z.string()).describe("Custom tags that are associated with the place for categorization or filtering.").optional(),
+  checkIns: z.array(microsoft_graph_checkInClaim).describe(
+    "A subresource of a place object that indicates the check-in status of an Outlook calendar event booked at the place."
+  ).optional(),
+  capacity: z.number().gte(-2147483648).lte(2147483647).describe("The maximum number of individual desks within a workspace.").nullish(),
+  displayDeviceName: z.string().describe(
+    "The name of the display device (for example, monitor or projector) that is available in the workspace."
+  ).nullish(),
+  emailAddress: z.string().describe(
+    "The email address that is associated with the workspace. This email address is used for booking."
+  ).nullish(),
+  mode: microsoft_graph_placeMode.optional(),
+  nickname: z.string().describe(
+    "A short, friendly name for the workspace, often used for easier identification or display in the UI."
+  ).optional(),
+  placeId: z.string().describe("An alternative immutable unique identifier of the workspace. Read-only.").nullish()
+}).passthrough();
+const microsoft_graph_roomList = z.object({
+  id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+  address: microsoft_graph_physicalAddress.optional(),
+  displayName: z.string().describe("The name that is associated with the place.").optional(),
+  geoCoordinates: microsoft_graph_outlookGeoCoordinates.optional(),
+  isWheelChairAccessible: z.boolean().describe("Indicates whether the place is wheelchair accessible.").nullish(),
+  label: z.string().describe("User-defined description of the place.").nullish(),
+  parentId: z.string().describe("The ID of a parent place.").nullish(),
+  phone: z.string().describe("The phone number of the place.").nullish(),
+  tags: z.array(z.string()).describe("Custom tags that are associated with the place for categorization or filtering.").optional(),
+  checkIns: z.array(microsoft_graph_checkInClaim).describe(
+    "A subresource of a place object that indicates the check-in status of an Outlook calendar event booked at the place."
+  ).optional(),
+  emailAddress: z.string().describe("The email address of the room list.").nullish(),
+  rooms: z.array(microsoft_graph_room).optional(),
+  workspaces: z.array(microsoft_graph_workspace).optional()
+}).passthrough();
+const microsoft_graph_roomCollectionResponse = z.object({
+  "@odata.count": z.number().int().nullable(),
+  "@odata.nextLink": z.string().nullable(),
+  value: z.array(microsoft_graph_room)
+}).partial().passthrough();
 const microsoft_graph_plannerContainerType = z.enum(["group", "unknownFutureValue", "roster"]);
 const microsoft_graph_plannerPlanContainer = z.object({
   containerId: z.string().describe("The identifier of the resource that contains the plan. Optional.").nullish(),
@@ -4189,6 +4308,7 @@ const schemas = {
   microsoft_graph_ODataErrors_ODataError,
   microsoft_graph_conversationMemberCollectionResponse,
   microsoft_graph_chatMessageCollectionResponse,
+  microsoft_graph_chatMessageHostedContentCollectionResponse,
   microsoft_graph_pinnedChatMessageInfoCollectionResponse,
   microsoft_graph_outOfOfficeSettings,
   microsoft_graph_dateTimeTimeZone,
@@ -4497,6 +4617,16 @@ const schemas = {
   microsoft_graph_todoTaskListCollectionResponse,
   microsoft_graph_todoTaskCollectionResponse,
   microsoft_graph_linkedResourceCollectionResponse,
+  microsoft_graph_checkInMethod,
+  microsoft_graph_checkInClaim,
+  microsoft_graph_place,
+  microsoft_graph_bookingType,
+  microsoft_graph_placeFeatureEnablement,
+  microsoft_graph_room,
+  microsoft_graph_placeMode,
+  microsoft_graph_workspace,
+  microsoft_graph_roomList,
+  microsoft_graph_roomCollectionResponse,
   microsoft_graph_plannerContainerType,
   microsoft_graph_plannerPlanContainer,
   microsoft_graph_plannerBucket,
@@ -4716,6 +4846,64 @@ const endpoints = makeApi([
     ],
     response: z.void()
   },
+  {
+    method: "get",
+    path: "/chats/:chatId/messages/:chatMessageId/hostedContents",
+    alias: "list-chat-message-hosted-contents",
+    description: `Retrieve the list of chatMessageHostedContent objects from a message. This API only lists the hosted content objects. To get the content bytes, see get chatmessage hosted content.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "get",
+    path: "/chats/:chatId/messages/:chatMessageId/hostedContents/:chatMessageHostedContentId/$value",
+    alias: "get-chat-message-hosted-content",
+    description: `Retrieve the list of chatMessageHostedContent objects from a message. This API only lists the hosted content objects. To get the content bytes, see get chatmessage hosted content.`,
+    requestFormat: "json",
+    response: z.void()
+  },
   {
     method: "get",
     path: "/chats/:chatId/messages/:chatMessageId/replies",
@@ -9271,6 +9459,141 @@ For example, if the user uploads a photo that is 504x504 pixels, all but the 648
     ],
     response: z.void()
   },
+  {
+    method: "patch",
+    path: "/places/:placeId",
+    alias: "update-place",
+    description: `Update the properties of place object that can be a building, floor, section, desk, room, workspace, or roomList. You can identify the place by specifying the id property.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New property values`,
+        type: "Body",
+        schema: microsoft_graph_place
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "get",
+    path: "/places/:placeId/graph.room",
+    alias: "get-room",
+    description: `Get a collection of the specified type of place objects defined in a tenant. You can do the following for a given tenant:
+- List all buildings.
+- List all floors.
+- List all sections.
+- List all desks.
+- List all rooms.
+- List all workspaces.
+- List all room lists.
+- List rooms in a specific room list.
+- List workspaces in a specific room list.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "get",
+    path: "/places/:placeId/graph.roomList",
+    alias: "get-room-list",
+    description: `Read the properties of a place object specified by its ID. The place object can be one of the following types: The listed resources are derived from the place object.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "get",
+    path: "/places/:placeId/graph.roomList/rooms",
+    alias: "list-room-list-rooms",
+    description: `Get rooms from places`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "get",
+    path: "/places/:placeId/graph.roomList/rooms/:roomId",
+    alias: "get-room-list-room",
+    description: `Get rooms from places`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/planner/plans/:plannerPlanId",
@@ -10349,6 +10672,64 @@ To monitor future changes, call the delta API by using the @odata.deltaLink in t
     ],
     response: z.void()
   },
+  {
+    method: "get",
+    path: "/teams/:teamId/channels/:channelId/messages/:chatMessageId/hostedContents",
+    alias: "list-channel-message-hosted-contents",
+    description: `Retrieve the list of chatMessageHostedContent objects from a message. This API only lists the hosted content objects. To get the content bytes, see get chatmessage hosted content.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "get",
+    path: "/teams/:teamId/channels/:channelId/messages/:chatMessageId/hostedContents/:chatMessageHostedContentId/$value",
+    alias: "get-channel-message-hosted-content",
+    description: `Retrieve the list of chatMessageHostedContent objects from a message. This API only lists the hosted content objects. To get the content bytes, see get chatmessage hosted content.`,
+    requestFormat: "json",
+    response: z.void()
+  },
   {
     method: "get",
     path: "/teams/:teamId/channels/:channelId/messages/:chatMessageId/replies",

package/dist/graph-client.js

@@ -3,6 +3,27 @@ import { refreshAccessToken } from "./lib/microsoft-auth.js";
 import { encode as toonEncode } from "@toon-format/toon";
 import { getCloudEndpoints } from "./cloud-config.js";
 import { getRequestTokens } from "./request-context.js";
+function isBinaryContentType(contentType) {
+  if (!contentType) return false;
+  const lower = contentType.toLowerCase().split(";")[0].trim();
+  if (!lower) return false;
+  if (lower.startsWith("image/") || lower.startsWith("video/") || lower.startsWith("audio/") || lower.startsWith("font/")) {
+    return true;
+  }
+  if (lower === "application/octet-stream" || lower === "application/pdf") {
+    return true;
+  }
+  if (lower.startsWith("application/zip") || lower.startsWith("application/x-zip")) {
+    return true;
+  }
+  if (lower.startsWith("application/vnd.") || lower.startsWith("application/x-")) {
+    if (lower.endsWith("+json") || lower.endsWith("+xml") || lower.endsWith("+text")) {
+      return false;
+    }
+    return true;
+  }
+  return false;
+}
 class GraphClient {
   constructor(authManager, secrets, outputFormat = "json") {
     this.outputFormat = "json";
@@ -40,15 +61,28 @@ class GraphClient {
           `Microsoft Graph API error: ${response.status} ${response.statusText} - ${await response.text()}`
         );
       }
-      const text = await response.text();
+      const contentTypeHeader = response.headers?.get?.("content-type") || "";
+      const isBinaryResponse = isBinaryContentType(contentTypeHeader);
       let result;
-      if (text === "") {
-        result = { message: "OK!" };
+      if (isBinaryResponse) {
+        const buffer = Buffer.from(await response.arrayBuffer());
+        result = {
+          message: "OK!",
+          contentType: contentTypeHeader,
+          encoding: "base64",
+          contentLength: buffer.byteLength,
+          contentBytes: buffer.toString("base64")
+        };
       } else {
-        try {
-          result = JSON.parse(text);
-        } catch {
-          result = { message: "OK!", rawResponse: text };
+        const text = await response.text();
+        if (text === "") {
+          result = { message: "OK!" };
+        } else {
+          try {
+            result = JSON.parse(text);
+          } catch {
+            result = { message: "OK!", rawResponse: text };
+          }
         }
       }
       if (options.includeHeaders) {
@@ -205,5 +239,6 @@ class GraphClient {
 }
 var graph_client_default = GraphClient;
 export {
-  graph_client_default as default
+  graph_client_default as default,
+  isBinaryContentType
 };

package/dist/mcp-instructions.js

@@ -0,0 +1,25 @@
+function buildGeneralMcpInstructions(opts) {
+  const parts = [
+    "Microsoft 365 MCP exposes Microsoft Graph through MCP tools. Use each tool name, description, and parameter schema as the source of truth.",
+    "Microsoft Graph OData: do not combine $filter with $search on the same request. For lists, prefer modest $top (or top) and $select; avoid very large pages unless the user needs them.",
+    "Mail and message $search uses KQL; the $search query parameter value must be double-quoted per Graph (see search-query-parameter in Microsoft Graph docs).",
+    "When you need an organizational user or recipient address, resolve it with list-users (or another directory tool); do not invent SMTP addresses.",
+    "Directory $search on collections such as /users or /groups requires ConsistencyLevel: eventual when the tool exposes that header.",
+    "Teams chat and channel messages: prefer HTML contentType in the body; plain text is often mangled by Graph."
+  ];
+  if (opts.readOnly) parts.push("This server is read-only; write operations are disabled.");
+  if (opts.multiAccount)
+    parts.push("Multiple accounts: pass the account parameter when required (see list-accounts).");
+  if (!opts.orgMode)
+    parts.push("Work/school-only tools require starting the server with --org-mode.");
+  return parts.join(" ");
+}
+const DISCOVERY_MODE_INSTRUCTIONS_ADDON = "DISCOVERY MODE ADD-ON: Graph is reached via search-tools then execute-tool (plus auth helpers). Call search-tools with short keywords, then execute-tool with tool_name exactly as returned; put Graph parameters in the parameters object. If search-tools returns no matches, retry with shorter or different keywords.";
+function buildMcpServerInstructions(opts) {
+  const general = buildGeneralMcpInstructions(opts);
+  if (!opts.discovery) return general;
+  return `${general} ${DISCOVERY_MODE_INSTRUCTIONS_ADDON}`;
+}
+export {
+  buildMcpServerInstructions
+};

package/dist/server.js

@@ -6,6 +6,7 @@ import express from "express";
 import logger, { enableConsoleLogging } from "./logger.js";
 import { registerAuthTools } from "./auth-tools.js";
 import { registerGraphTools, registerDiscoveryTools } from "./graph-tools.js";
+import { buildMcpServerInstructions } from "./mcp-instructions.js";
 import GraphClient from "./graph-client.js";
 import { buildScopesFromEndpoints } from "./auth.js";
 import { MicrosoftOAuthProvider } from "./oauth-provider.js";
@@ -46,10 +47,20 @@ class MicrosoftGraphServer {
     this.secrets = null;
   }
   createMcpServer() {
-    const server = new McpServer({
-      name: "Microsoft365MCP",
-      version: this.version
-    });
+    const server = new McpServer(
+      {
+        name: "Microsoft365MCP",
+        version: this.version
+      },
+      {
+        instructions: buildMcpServerInstructions({
+          discovery: Boolean(this.options.discovery),
+          orgMode: Boolean(this.options.orgMode),
+          readOnly: Boolean(this.options.readOnly),
+          multiAccount: this.multiAccount
+        })
+      }
+    );
     const shouldRegisterAuthTools = !this.options.http || this.options.enableAuthTools;
     if (shouldRegisterAuthTools) {
       registerAuthTools(server, this.authManager);

package/logs/mcp-server.log

@@ -1,10 +1,11 @@
-2026-04-13 16:18:48 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me
-2026-04-13 16:18:49 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me
-2026-04-13 16:18:49 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me
-2026-04-13 16:18:49 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me/messages
-2026-04-13 16:18:49 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me/calendar
-2026-04-13 16:18:50 INFO: Using environment variables for secrets
-2026-04-13 16:18:50 INFO: Using environment variables for secrets
-2026-04-13 16:18:50 INFO: Using environment variables for secrets
-2026-04-13 16:18:50 INFO: Using environment variables for secrets
-2026-04-13 16:18:50 INFO: Using environment variables for secrets
+2026-04-14 20:54:17 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me
+2026-04-14 20:54:17 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me
+2026-04-14 20:54:17 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me
+2026-04-14 20:54:17 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me/messages
+2026-04-14 20:54:17 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me/calendar
+2026-04-14 20:54:17 INFO: [GRAPH CLIENT] Final URL being sent to Microsoft: https://graph.microsoft.com/v1.0/me/photo/$value
+2026-04-14 20:54:18 INFO: Using environment variables for secrets
+2026-04-14 20:54:18 INFO: Using environment variables for secrets
+2026-04-14 20:54:18 INFO: Using environment variables for secrets
+2026-04-14 20:54:18 INFO: Using environment variables for secrets
+2026-04-14 20:54:18 INFO: Using environment variables for secrets

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.76.0",
+  "version": "0.78.0",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -944,6 +944,21 @@
     "toolName": "get-chat-message",
     "workScopes": ["ChatMessage.Read"]
   },
+  {
+    "pathPattern": "/chats/{chat-id}/messages/{chatMessage-id}/hostedContents",
+    "method": "get",
+    "toolName": "list-chat-message-hosted-contents",
+    "workScopes": ["ChatMessage.Read"],
+    "llmTip": "Lists hosted-content references (inline images, code snippets) attached to a Teams chat message. Returns an array of { id, contentType }. Use get-chat-message-hosted-content with the id to download the bytes. Hosted content IDs can also be parsed from the <img src> URL in the message body between /hostedContents/ and /$value."
+  },
+  {
+    "pathPattern": "/chats/{chat-id}/messages/{chatMessage-id}/hostedContents/{chatMessageHostedContent-id}/$value",
+    "method": "get",
+    "toolName": "get-chat-message-hosted-content",
+    "workScopes": ["ChatMessage.Read"],
+    "returnDownloadUrl": true,
+    "llmTip": "Returns raw bytes of a hosted content item (typically image/png or image/jpeg) attached to a Teams 1:1 or group chat message. Use list-chat-message-hosted-contents to discover IDs, or extract the ID from the <img src> URL in the message body."
+  },
   {
     "pathPattern": "/chats/{chat-id}/messages",
     "method": "post",
@@ -1005,6 +1020,21 @@
     "toolName": "get-channel-message",
     "workScopes": ["ChannelMessage.Read.All"]
   },
+  {
+    "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages/{chatMessage-id}/hostedContents",
+    "method": "get",
+    "toolName": "list-channel-message-hosted-contents",
+    "workScopes": ["ChannelMessage.Read.All"],
+    "llmTip": "Lists hosted-content references (inline images, code snippets) attached to a Teams channel message. Returns an array of { id, contentType }. Use get-channel-message-hosted-content with the id to download bytes."
+  },
+  {
+    "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages/{chatMessage-id}/hostedContents/{chatMessageHostedContent-id}/$value",
+    "method": "get",
+    "toolName": "get-channel-message-hosted-content",
+    "workScopes": ["ChannelMessage.Read.All"],
+    "returnDownloadUrl": true,
+    "llmTip": "Returns raw bytes of a hosted content item attached to a Teams channel message. Use list-channel-message-hosted-contents to discover IDs."
+  },
   {
     "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages",
     "method": "post",
@@ -1375,5 +1405,40 @@
     "toolName": "list-webinar-sessions",
     "workScopes": ["VirtualEvent.Read"],
     "llmTip": "Lists sessions for a webinar. Each session has startDateTime, endDateTime, joinWebUrl, subject, and is essentially an online meeting associated with the webinar."
+  },
+  {
+    "pathPattern": "/places/{place-id}/graph.room",
+    "method": "get",
+    "toolName": "get-room",
+    "workScopes": ["Place.Read.All"],
+    "llmTip": "Gets a place cast as a room, returning room-specific properties: displayName, emailAddress (for booking), capacity, building, floorNumber, floorLabel, isWheelChairAccessible, audioDeviceName, videoDeviceName, displayDeviceName. The place-id can be the room's ID or email address."
+  },
+  {
+    "pathPattern": "/places/{place-id}/graph.roomList",
+    "method": "get",
+    "toolName": "get-room-list",
+    "workScopes": ["Place.Read.All"],
+    "llmTip": "Gets a place cast as a room list, returning room list properties: displayName, emailAddress, address. Use the place-id (ID or email address) of the room list. Then use list-room-list-rooms to get the rooms within this list."
+  },
+  {
+    "pathPattern": "/places/{place-id}/graph.roomList/rooms",
+    "method": "get",
+    "toolName": "list-room-list-rooms",
+    "workScopes": ["Place.Read.All"],
+    "llmTip": "Lists rooms belonging to a specific room list. The place-id is the ID or email address of the room list (from get-room-list). Returns rooms with displayName, emailAddress, capacity, building, floorNumber, floorLabel, and AV equipment details. Combine with find-meeting-times to find available rooms for booking."
+  },
+  {
+    "pathPattern": "/places/{place-id}/graph.roomList/rooms/{room-id}",
+    "method": "get",
+    "toolName": "get-room-list-room",
+    "workScopes": ["Place.Read.All"],
+    "llmTip": "Gets a specific room within a room list. The place-id is the room list ID or email, and room-id is the specific room ID. Returns full room details including capacity, building, floor, and AV equipment."
+  },
+  {
+    "pathPattern": "/places/{place-id}",
+    "method": "patch",
+    "toolName": "update-place",
+    "workScopes": ["Place.ReadWrite.All"],
+    "llmTip": "Updates properties of a place (room, room list, building, floor, section, desk, workspace). Body can include: displayName, phone, capacity, building, floorNumber, floorLabel, tags, audioDeviceName, videoDeviceName, displayDeviceName, isWheelChairAccessible. Use get-room or get-room-list to verify current values before updating."
   }
 ]