@softeria/ms-365-mcp-server 0.83.0 → 0.85.0

package/dist/endpoints.json

@@ -1491,5 +1491,61 @@
     "toolName": "list-calendar-view-delta",
     "scopes": ["Calendars.Read"],
     "llmTip": "Incremental sync of events within a time window. Required query params on first call: startDateTime, endDateTime (ISO 8601). Returns events in the window plus @odata.deltaLink; subsequent calls with that link return only changes. Expands recurring events to individual occurrences (unlike list-calendar-events-delta which returns the series master). Use this for calendar UIs showing a week/month view."
+  },
+  {
+    "pathPattern": "/groups",
+    "method": "post",
+    "toolName": "create-group",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Creates a new group. Required body: { displayName, mailEnabled (bool), mailNickname (no spaces), securityEnabled (bool) }. For Microsoft 365 group: mailEnabled=true, securityEnabled=false, groupTypes=['Unified']. For security group: mailEnabled=false, securityEnabled=true, groupTypes=[]. Optional: description, visibility ('Public' or 'Private'), owners@odata.bind and members@odata.bind arrays with user directoryObject URLs."
+  },
+  {
+    "pathPattern": "/groups/{group-id}",
+    "method": "patch",
+    "toolName": "update-group",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Updates group properties. Body can include: displayName, description, visibility ('Public' or 'Private'), mailNickname. Use get-group to verify current values before updating."
+  },
+  {
+    "pathPattern": "/groups/{group-id}",
+    "method": "delete",
+    "toolName": "delete-group",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Permanently deletes a group and all its associated resources (conversations, files, calendar, planner). This action is irreversible. Use get-group to verify the group before deleting."
+  },
+  {
+    "pathPattern": "/groups/{group-id}/members/$ref",
+    "method": "post",
+    "toolName": "add-group-member",
+    "workScopes": ["GroupMember.ReadWrite.All"],
+    "llmTip": "Adds a member to a group. Body: { '@odata.id': 'https://graph.microsoft.com/v1.0/directoryObjects/{user-id}' }. Use list-users to find the user ID first. The user must not already be a member."
+  },
+  {
+    "pathPattern": "/groups/{group-id}/members/{directoryObject-id}/$ref",
+    "method": "delete",
+    "toolName": "remove-group-member",
+    "workScopes": ["GroupMember.ReadWrite.All"],
+    "llmTip": "Removes a member from a group. Use list-group-members to find the member's directory object ID first. Cannot remove the last owner of a group."
+  },
+  {
+    "pathPattern": "/groups/{group-id}/owners/$ref",
+    "method": "post",
+    "toolName": "add-group-owner",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Adds an owner to a group. Body: { '@odata.id': 'https://graph.microsoft.com/v1.0/users/{user-id}' }. Use list-users to find the user ID. A group can have a maximum of 100 owners."
+  },
+  {
+    "pathPattern": "/groups/{group-id}/owners/{directoryObject-id}/$ref",
+    "method": "delete",
+    "toolName": "remove-group-owner",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Removes an owner from a group. A group must have at least one owner — this call fails if you try to remove the last owner. Use list-group-owners to find the owner's ID."
+  },
+  {
+    "pathPattern": "/chats",
+    "method": "post",
+    "toolName": "create-chat",
+    "workScopes": ["Chat.Create", "Chat.ReadWrite"],
+    "llmTip": "Creates a new 1:1 or group Teams chat. Body: { chatType ('oneOnOne' or 'group'), topic (optional, group only), members: [{ '@odata.type': '#microsoft.graph.aadUserConversationMember', roles: ['owner' | 'guest'], 'user@odata.bind': 'https://graph.microsoft.com/v1.0/users({id})' }] }. A oneOnOne chat requires exactly 2 members (self + other), both with role 'owner'. For group chats, include all participants. The signed-in user must be one of the members. Returns the created chat with its id — use that id with send-chat-message, list-chat-members, etc."
   }
 ]

package/dist/generated/client.js

@@ -1578,6 +1578,7 @@ const microsoft_graph_directoryObjectCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_directoryObject)
 }).partial().passthrough();
+const ReferenceCreate = z.record(z.object({}).partial().passthrough());
 const microsoft_graph_conversationThreadCollectionResponse = z.object({
   "@odata.count": z.number().int().nullable(),
   "@odata.nextLink": z.string().nullable(),
@@ -4464,6 +4465,7 @@ const schemas = {
   microsoft_graph_conversationCollectionResponse,
   microsoft_graph_directoryObject,
   microsoft_graph_directoryObjectCollectionResponse,
+  ReferenceCreate,
   microsoft_graph_conversationThreadCollectionResponse,
   reply_to_group_thread_Body,
   get_schedule_Body,
@@ -4742,6 +4744,22 @@ const schemas = {
   microsoft_graph_userCollectionResponse
 };
 const endpoints = makeApi([
+  {
+    method: "post",
+    path: "/chats",
+    alias: "create-chat",
+    description: `Create a new chat object.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New entity`,
+        type: "Body",
+        schema: microsoft_graph_chat
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/chats/:chatId",
@@ -5940,6 +5958,100 @@ You can search within a folder hierarchy, a whole drive, or files shared with th
     ],
     response: z.void()
   },
+  {
+    method: "post",
+    path: "/groups",
+    alias: "create-group",
+    description: `Create a new group as specified in the request body. You can create the following types of groups: This operation returns by default only a subset of the properties for each group. These default properties are noted in the Properties section. To get properties that are not returned by default, do a GET operation and specify the properties in a $select OData query option.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New entity`,
+        type: "Body",
+        schema: z.object({
+          id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+          displayName: z.string().describe(
+            "The display name for the group. This property is required when a group is created and can't be cleared during updates. Maximum length is 256 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby."
+          ).nullish(),
+          description: z.string().describe(
+            "An optional description for the group. Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith) and $search."
+          ).nullish(),
+          createdDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "Timestamp of when the group was created. The value can't be modified and is automatically populated when the group is created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on January 1, 2014 is 2014-01-01T00:00:00Z. Returned by default. Read-only."
+          ).nullish(),
+          deletedDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "Date and time when this object was deleted. Always null when the object hasn't been deleted."
+          ).nullish(),
+          allowExternalSenders: z.boolean().describe(
+            "Indicates if people external to the organization can send messages to the group. The default value is false. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          assignedLabels: z.array(microsoft_graph_assignedLabel).describe(
+            "The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Returned only on $select. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role."
+          ).optional(),
+          assignedLicenses: z.array(microsoft_graph_assignedLicense).describe(
+            "The licenses that are assigned to the group. Returned only on $select. Supports $filter (eq). Read-only."
+          ).optional(),
+          autoSubscribeNewMembers: z.boolean().describe(
+            "Indicates if new members added to the group are autosubscribed to receive email notifications. You can set this property in a PATCH request for the group; don't set it in the initial POST request that creates the group. Default value is false. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          classification: z.string().describe(
+            "Describes a classification for the group (such as low, medium, or high business impact). Valid values for this property are defined by creating a ClassificationList setting value, based on the template definition.Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith)."
+          ).nullish(),
+          expirationDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "Timestamp of when the group is set to expire. It's null for security groups, but for Microsoft 365 groups, it represents when the group is set to expire as defined in the groupLifecyclePolicy. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on January 1, 2014 is 2014-01-01T00:00:00Z. Returned by default. Supports $filter (eq, ne, not, ge, le, in). Read-only."
+          ).nullish(),
+          groupTypes: z.array(z.string()).describe(
+            "Specifies the group type and its membership. If the collection contains Unified, the group is a Microsoft 365 group; otherwise, it's either a security group or a distribution group. For details, see groups overview.If the collection includes DynamicMembership, the group has dynamic membership; otherwise, membership is static. Returned by default. Supports $filter (eq, not)."
+          ).optional(),
+          hasMembersWithLicenseErrors: z.boolean().describe(
+            "Indicates whether there are members in this group that have license errors from its group-based license assignment. This property is never returned on a GET operation. You can use it as a $filter argument to get groups that have members with license errors (that is, filter for this property being true). See an example. Supports $filter (eq)."
+          ).nullish(),
+          hideFromAddressLists: z.boolean().describe(
+            "True if the group isn't displayed in certain parts of the Outlook UI: the Address Book, address lists for selecting message recipients, and the Browse Groups dialog for searching groups; otherwise, false. The default value is false. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          hideFromOutlookClients: z.boolean().describe(
+            "True if the group isn't displayed in Outlook clients, such as Outlook for Windows and Outlook on the web; otherwise, false. The default value is false. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          isArchived: z.boolean().describe(
+            "When a group is associated with a team, this property determines whether the team is in read-only mode.To read this property, use the /group/{groupId}/team endpoint or the Get team API. To update this property, use the archiveTeam and unarchiveTeam APIs."
+          ).nullish(),
+          isAssignableToRole: z.boolean().describe(
+            "Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can't be a dynamic group (that is, groupTypes can't contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not)."
+          ).nullish(),
+          isManagementRestricted: z.boolean().describe(
+            "Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Returned only on $select."
+          ).nullish(),
+          isSubscribedByMail: z.boolean().describe(
+            "Indicates whether the signed-in user is subscribed to receive email conversations. The default value is true. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          licenseProcessingState: microsoft_graph_licenseProcessingState.optional(),
+          mail: z.string().describe(
+            "The SMTP address for the group, for example, 'serviceadmins@contoso.com'. Returned by default. Read-only. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values)."
+          ).nullish(),
+          mailEnabled: z.boolean().describe(
+            "Specifies whether the group is mail-enabled. Required. Returned by default. Supports $filter (eq, ne, not)."
+          ).nullish(),
+          mailNickname: z.string().describe(
+            "The mail alias for the group, unique for Microsoft 365 groups in the organization. Maximum length is 64 characters. This property can contain only characters in the ASCII character set 0 - 127 except the following characters: @ () / [] ' ; : <> , SPACE. Required. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values)."
+          ).nullish(),
+          membershipRule: z.string().describe(
+            "The rule that determines members for this group if the group is a dynamic group (groupTypes contains DynamicMembership). For more information about the syntax of the membership rule, see Membership Rules syntax. Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith)."
+          ).nullish(),
+          membershipRuleProcessingState: z.string().describe(
+            "Indicates whether the dynamic membership processing is on or paused. Possible values are On or Paused. Returned by default. Supports $filter (eq, ne, not, in)."
+          ).nullish()
+        }).passthrough().passthrough()
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/groups/:groupId",
@@ -5960,6 +6072,116 @@ You can search within a folder hierarchy, a whole drive, or files shared with th
     ],
     response: z.void()
   },
+  {
+    method: "patch",
+    path: "/groups/:groupId",
+    alias: "update-group",
+    description: `Create a new group object if it doesn't exist, or update the properties of an existing group object.
+You can create or update the following types of group: By default, this operation returns only a subset of the properties for each group. For a list of properties that are returned by default, see the Properties section of the group resource. To get properties that are not returned by default, do a GET operation and specify the properties in a $select OData query option.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New property values`,
+        type: "Body",
+        schema: z.object({
+          id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+          displayName: z.string().describe(
+            "The display name for the group. This property is required when a group is created and can't be cleared during updates. Maximum length is 256 characters. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby."
+          ).nullish(),
+          description: z.string().describe(
+            "An optional description for the group. Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith) and $search."
+          ).nullish(),
+          createdDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "Timestamp of when the group was created. The value can't be modified and is automatically populated when the group is created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on January 1, 2014 is 2014-01-01T00:00:00Z. Returned by default. Read-only."
+          ).nullish(),
+          deletedDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "Date and time when this object was deleted. Always null when the object hasn't been deleted."
+          ).nullish(),
+          allowExternalSenders: z.boolean().describe(
+            "Indicates if people external to the organization can send messages to the group. The default value is false. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          assignedLabels: z.array(microsoft_graph_assignedLabel).describe(
+            "The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group. Returned only on $select. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role."
+          ).optional(),
+          assignedLicenses: z.array(microsoft_graph_assignedLicense).describe(
+            "The licenses that are assigned to the group. Returned only on $select. Supports $filter (eq). Read-only."
+          ).optional(),
+          autoSubscribeNewMembers: z.boolean().describe(
+            "Indicates if new members added to the group are autosubscribed to receive email notifications. You can set this property in a PATCH request for the group; don't set it in the initial POST request that creates the group. Default value is false. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          classification: z.string().describe(
+            "Describes a classification for the group (such as low, medium, or high business impact). Valid values for this property are defined by creating a ClassificationList setting value, based on the template definition.Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith)."
+          ).nullish(),
+          expirationDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "Timestamp of when the group is set to expire. It's null for security groups, but for Microsoft 365 groups, it represents when the group is set to expire as defined in the groupLifecyclePolicy. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on January 1, 2014 is 2014-01-01T00:00:00Z. Returned by default. Supports $filter (eq, ne, not, ge, le, in). Read-only."
+          ).nullish(),
+          groupTypes: z.array(z.string()).describe(
+            "Specifies the group type and its membership. If the collection contains Unified, the group is a Microsoft 365 group; otherwise, it's either a security group or a distribution group. For details, see groups overview.If the collection includes DynamicMembership, the group has dynamic membership; otherwise, membership is static. Returned by default. Supports $filter (eq, not)."
+          ).optional(),
+          hasMembersWithLicenseErrors: z.boolean().describe(
+            "Indicates whether there are members in this group that have license errors from its group-based license assignment. This property is never returned on a GET operation. You can use it as a $filter argument to get groups that have members with license errors (that is, filter for this property being true). See an example. Supports $filter (eq)."
+          ).nullish(),
+          hideFromAddressLists: z.boolean().describe(
+            "True if the group isn't displayed in certain parts of the Outlook UI: the Address Book, address lists for selecting message recipients, and the Browse Groups dialog for searching groups; otherwise, false. The default value is false. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          hideFromOutlookClients: z.boolean().describe(
+            "True if the group isn't displayed in Outlook clients, such as Outlook for Windows and Outlook on the web; otherwise, false. The default value is false. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          isArchived: z.boolean().describe(
+            "When a group is associated with a team, this property determines whether the team is in read-only mode.To read this property, use the /group/{groupId}/team endpoint or the Get team API. To update this property, use the archiveTeam and unarchiveTeam APIs."
+          ).nullish(),
+          isAssignableToRole: z.boolean().describe(
+            "Indicates whether this group can be assigned to a Microsoft Entra role. Optional. This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group can't be a dynamic group (that is, groupTypes can't contain DynamicMembership). Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignmentsUsing this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not)."
+          ).nullish(),
+          isManagementRestricted: z.boolean().describe(
+            "Indicates whether the group is a member of a restricted management administrative unit. If not set, the default value is null and the default behavior is false. Read-only.  To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit. Returned only on $select."
+          ).nullish(),
+          isSubscribedByMail: z.boolean().describe(
+            "Indicates whether the signed-in user is subscribed to receive email conversations. The default value is true. Returned only on $select. Supported only on the Get group API (GET /groups/{ID})."
+          ).nullish(),
+          licenseProcessingState: microsoft_graph_licenseProcessingState.optional(),
+          mail: z.string().describe(
+            "The SMTP address for the group, for example, 'serviceadmins@contoso.com'. Returned by default. Read-only. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values)."
+          ).nullish(),
+          mailEnabled: z.boolean().describe(
+            "Specifies whether the group is mail-enabled. Required. Returned by default. Supports $filter (eq, ne, not)."
+          ).nullish(),
+          mailNickname: z.string().describe(
+            "The mail alias for the group, unique for Microsoft 365 groups in the organization. Maximum length is 64 characters. This property can contain only characters in the ASCII character set 0 - 127 except the following characters: @ () / [] ' ; : <> , SPACE. Required. Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values)."
+          ).nullish(),
+          membershipRule: z.string().describe(
+            "The rule that determines members for this group if the group is a dynamic group (groupTypes contains DynamicMembership). For more information about the syntax of the membership rule, see Membership Rules syntax. Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith)."
+          ).nullish(),
+          membershipRuleProcessingState: z.string().describe(
+            "Indicates whether the dynamic membership processing is on or paused. Possible values are On or Paused. Returned by default. Supports $filter (eq, ne, not, in)."
+          ).nullish()
+        }).passthrough().passthrough()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "delete",
+    path: "/groups/:groupId",
+    alias: "delete-group",
+    description: `Delete a group. When deleted, both Microsoft 365 and security groups are moved to a temporary container and can be restored within 30 days. After that time, they're permanently deleted. This doesn't apply to Distribution groups which are permanently deleted immediately. To learn more, see deletedItems.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "If-Match",
+        type: "Header",
+        schema: z.string().describe("ETag").optional()
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/groups/:groupId/conversations",
@@ -6067,6 +6289,37 @@ You can search within a folder hierarchy, a whole drive, or files shared with th
     ],
     response: z.void()
   },
+  {
+    method: "delete",
+    path: "/groups/:groupId/members/:directoryObjectId/$ref",
+    alias: "remove-group-member",
+    description: `Remove a member from a group via the members navigation property. You can't remove a member from groups with dynamic memberships.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "If-Match",
+        type: "Header",
+        schema: z.string().describe("ETag").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "post",
+    path: "/groups/:groupId/members/$ref",
+    alias: "add-group-member",
+    description: `Add a member to a security or Microsoft 365 group. When using the API to add multiple members in one request, you can add up to only 20 members.  The following table shows the types of members that can be added to either security groups or Microsoft 365 groups.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property ref value`,
+        type: "Body",
+        schema: z.record(z.object({}).partial().passthrough())
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/groups/:groupId/owners",
@@ -6124,6 +6377,37 @@ You can search within a folder hierarchy, a whole drive, or files shared with th
     ],
     response: z.void()
   },
+  {
+    method: "delete",
+    path: "/groups/:groupId/owners/:directoryObjectId/$ref",
+    alias: "remove-group-owner",
+    description: `Remove an owner from a Microsoft 365 group or a security group through the owners navigation property. Once owners are assigned to a group, the last owner (a user object) of the group cannot be removed.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "If-Match",
+        type: "Header",
+        schema: z.string().describe("ETag").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "post",
+    path: "/groups/:groupId/owners/$ref",
+    alias: "add-group-owner",
+    description: `Add a user or service principal to a Microsoft 365 or security group's owners. The owners are a set of users or service principals who are allowed to modify the group object.`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property ref value`,
+        type: "Body",
+        schema: z.record(z.object({}).partial().passthrough())
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/groups/:groupId/threads",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.83.0",
+  "version": "0.85.0",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -1491,5 +1491,61 @@
     "toolName": "list-calendar-view-delta",
     "scopes": ["Calendars.Read"],
     "llmTip": "Incremental sync of events within a time window. Required query params on first call: startDateTime, endDateTime (ISO 8601). Returns events in the window plus @odata.deltaLink; subsequent calls with that link return only changes. Expands recurring events to individual occurrences (unlike list-calendar-events-delta which returns the series master). Use this for calendar UIs showing a week/month view."
+  },
+  {
+    "pathPattern": "/groups",
+    "method": "post",
+    "toolName": "create-group",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Creates a new group. Required body: { displayName, mailEnabled (bool), mailNickname (no spaces), securityEnabled (bool) }. For Microsoft 365 group: mailEnabled=true, securityEnabled=false, groupTypes=['Unified']. For security group: mailEnabled=false, securityEnabled=true, groupTypes=[]. Optional: description, visibility ('Public' or 'Private'), owners@odata.bind and members@odata.bind arrays with user directoryObject URLs."
+  },
+  {
+    "pathPattern": "/groups/{group-id}",
+    "method": "patch",
+    "toolName": "update-group",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Updates group properties. Body can include: displayName, description, visibility ('Public' or 'Private'), mailNickname. Use get-group to verify current values before updating."
+  },
+  {
+    "pathPattern": "/groups/{group-id}",
+    "method": "delete",
+    "toolName": "delete-group",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Permanently deletes a group and all its associated resources (conversations, files, calendar, planner). This action is irreversible. Use get-group to verify the group before deleting."
+  },
+  {
+    "pathPattern": "/groups/{group-id}/members/$ref",
+    "method": "post",
+    "toolName": "add-group-member",
+    "workScopes": ["GroupMember.ReadWrite.All"],
+    "llmTip": "Adds a member to a group. Body: { '@odata.id': 'https://graph.microsoft.com/v1.0/directoryObjects/{user-id}' }. Use list-users to find the user ID first. The user must not already be a member."
+  },
+  {
+    "pathPattern": "/groups/{group-id}/members/{directoryObject-id}/$ref",
+    "method": "delete",
+    "toolName": "remove-group-member",
+    "workScopes": ["GroupMember.ReadWrite.All"],
+    "llmTip": "Removes a member from a group. Use list-group-members to find the member's directory object ID first. Cannot remove the last owner of a group."
+  },
+  {
+    "pathPattern": "/groups/{group-id}/owners/$ref",
+    "method": "post",
+    "toolName": "add-group-owner",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Adds an owner to a group. Body: { '@odata.id': 'https://graph.microsoft.com/v1.0/users/{user-id}' }. Use list-users to find the user ID. A group can have a maximum of 100 owners."
+  },
+  {
+    "pathPattern": "/groups/{group-id}/owners/{directoryObject-id}/$ref",
+    "method": "delete",
+    "toolName": "remove-group-owner",
+    "workScopes": ["Group.ReadWrite.All"],
+    "llmTip": "Removes an owner from a group. A group must have at least one owner — this call fails if you try to remove the last owner. Use list-group-owners to find the owner's ID."
+  },
+  {
+    "pathPattern": "/chats",
+    "method": "post",
+    "toolName": "create-chat",
+    "workScopes": ["Chat.Create", "Chat.ReadWrite"],
+    "llmTip": "Creates a new 1:1 or group Teams chat. Body: { chatType ('oneOnOne' or 'group'), topic (optional, group only), members: [{ '@odata.type': '#microsoft.graph.aadUserConversationMember', roles: ['owner' | 'guest'], 'user@odata.bind': 'https://graph.microsoft.com/v1.0/users({id})' }] }. A oneOnOne chat requires exactly 2 members (self + other), both with role 'owner'. For group chats, include all participants. The signed-in user must be one of the members. Returns the created chat with its id — use that id with send-chat-message, list-chat-members, etc."
   }
 ]