@softeria/ms-365-mcp-server 0.85.1 → 0.86.0

package/dist/lib/microsoft-auth.js

@@ -54,17 +54,11 @@ async function exchangeCodeForToken(code, redirectUri, clientId, clientSecret, t
   if (codeVerifier) {
     params.append("code_verifier", codeVerifier);
   }
-  const headers = {
-    "Content-Type": "application/x-www-form-urlencoded"
-  };
-  try {
-    const redirectUrl = new URL(redirectUri);
-    headers["Origin"] = redirectUrl.origin;
-  } catch {
-  }
   const response = await fetch(`${cloudEndpoints.authority}/${tenantId}/oauth2/v2.0/token`, {
     method: "POST",
-    headers,
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
     body: params
   });
   if (!response.ok) {
@@ -74,7 +68,7 @@ async function exchangeCodeForToken(code, redirectUri, clientId, clientSecret, t
   }
   return response.json();
 }
-async function refreshAccessToken(refreshToken, clientId, clientSecret, tenantId = "common", cloudType = "global", origin) {
+async function refreshAccessToken(refreshToken, clientId, clientSecret, tenantId = "common", cloudType = "global") {
   const cloudEndpoints = getCloudEndpoints(cloudType);
   const params = new URLSearchParams({
     grant_type: "refresh_token",
@@ -84,15 +78,11 @@ async function refreshAccessToken(refreshToken, clientId, clientSecret, tenantId
   if (clientSecret) {
     params.append("client_secret", clientSecret);
   }
-  const headers = {
-    "Content-Type": "application/x-www-form-urlencoded"
-  };
-  if (origin) {
-    headers["Origin"] = origin;
-  }
   const response = await fetch(`${cloudEndpoints.authority}/${tenantId}/oauth2/v2.0/token`, {
     method: "POST",
-    headers,
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
     body: params
   });
   if (!response.ok) {

package/dist/server.js

@@ -351,14 +351,12 @@ class MicrosoftGraphServer {
             } else {
               logger.info("Refresh endpoint: Using public client without client_secret");
             }
-            const origin = req.get("origin") || req.get("referer") || void 0;
             const result = await refreshAccessToken(
               body.refresh_token,
               clientId,
               clientSecret,
               tenantId,
-              this.secrets.cloudType,
-              origin
+              this.secrets.cloudType
             );
             res.json(result);
           } else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.85.1",
+  "version": "0.86.0",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -640,6 +640,30 @@
     "toolName": "get-onenote-page-content",
     "scopes": ["Notes.Read"]
   },
+  {
+    "pathPattern": "/sites/{site-id}/onenote/notebooks",
+    "method": "get",
+    "toolName": "list-sharepoint-site-onenote-notebooks",
+    "workScopes": ["Notes.Read"]
+  },
+  {
+    "pathPattern": "/sites/{site-id}/onenote/notebooks/{notebook-id}/sections",
+    "method": "get",
+    "toolName": "list-sharepoint-site-onenote-notebook-sections",
+    "workScopes": ["Notes.Read"]
+  },
+  {
+    "pathPattern": "/sites/{site-id}/onenote/sections/{onenoteSection-id}/pages",
+    "method": "get",
+    "toolName": "list-sharepoint-site-onenote-section-pages",
+    "workScopes": ["Notes.Read"]
+  },
+  {
+    "pathPattern": "/sites/{site-id}/onenote/pages/{onenotePage-id}/content",
+    "method": "get",
+    "toolName": "get-sharepoint-site-onenote-page-content",
+    "workScopes": ["Notes.Read"]
+  },
   {
     "pathPattern": "/me/onenote/pages",
     "method": "post",
@@ -777,6 +801,39 @@
     "scopes": ["Tasks.ReadWrite"],
     "llmTip": "CRITICAL: Requires If-Match header with ETag from get-planner-task-details (use includeHeaders=true). Checklist items use GUID keys: {\"checklist\": {\"<guid>\": {\"title\": \"...\", \"isChecked\": false}}}."
   },
+  {
+    "pathPattern": "/planner/plans/{plannerPlan-id}/buckets",
+    "method": "get",
+    "toolName": "list-plan-buckets",
+    "scopes": ["Tasks.Read"]
+  },
+  {
+    "pathPattern": "/planner/buckets/{plannerBucket-id}",
+    "method": "get",
+    "toolName": "get-planner-bucket",
+    "scopes": ["Tasks.Read"],
+    "llmTip": "Response includes @odata.etag — required as If-Match for update-planner-bucket and delete-planner-bucket. Use includeHeaders=true."
+  },
+  {
+    "pathPattern": "/planner/buckets",
+    "method": "post",
+    "toolName": "create-planner-bucket",
+    "scopes": ["Tasks.ReadWrite"]
+  },
+  {
+    "pathPattern": "/planner/buckets/{plannerBucket-id}",
+    "method": "patch",
+    "toolName": "update-planner-bucket",
+    "scopes": ["Tasks.ReadWrite"],
+    "llmTip": "CRITICAL: Requires If-Match header with ETag from get-planner-bucket (use includeHeaders=true)."
+  },
+  {
+    "pathPattern": "/planner/buckets/{plannerBucket-id}",
+    "method": "delete",
+    "toolName": "delete-planner-bucket",
+    "scopes": ["Tasks.ReadWrite"],
+    "llmTip": "CRITICAL: Requires If-Match header with ETag from get-planner-bucket (use includeHeaders=true)."
+  },
   {
     "pathPattern": "/me/contacts",
     "method": "get",
@@ -901,6 +958,20 @@
     "workScopes": ["Group.Read.All"],
     "llmTip": "Gets a specific group's details: displayName, description, mail, visibility, groupTypes, membershipRule, createdDateTime. Use $select to limit returned properties."
   },
+  {
+    "pathPattern": "/groups/{group-id}/calendarView",
+    "method": "get",
+    "toolName": "get-group-calendar-view",
+    "workScopes": ["Group.Read.All"],
+    "supportsTimezone": true
+  },
+  {
+    "pathPattern": "/groups/{group-id}/events",
+    "method": "get",
+    "toolName": "list-group-events",
+    "workScopes": ["Group.Read.All"],
+    "supportsTimezone": true
+  },
   {
     "pathPattern": "/groups/{group-id}/members",
     "method": "get",