@softeria/ms-365-mcp-server 0.88.1 → 0.89.0

package/README.md

@@ -622,6 +622,10 @@ After cloning the repository, you may need to generate the client code from the
 npm run generate
 ```
 
+## Related Projects
+
+- [ms-365-admin-mcp-server](https://github.com/okapi-ca/ms-365-admin-mcp-server) by [@okapi-ca](https://github.com/okapi-ca): companion server for admin/daemon scenarios using application permissions (client credentials flow), covering security alerts, audit logs, service health, and usage reports.
+
 ## Support
 
 If you're having problems or need help:

package/dist/endpoints.json

@@ -1715,5 +1715,26 @@
     "toolName": "reauthorize-subscription",
     "scopes": [],
     "llmTip": "Reauthorizes a subscription after receiving a 'reauthorizationRequired' lifecycle notification from Microsoft Graph. No body required. Must be called within the reauthorizationRequiredDateTime window (typically 48h) to avoid subscription expiry."
+  },
+  {
+    "pathPattern": "/drives/{drive-id}/items/{driveItem-id}/extractSensitivityLabels",
+    "method": "post",
+    "toolName": "extract-drive-item-sensitivity-labels",
+    "workScopes": ["Files.Read.All"],
+    "llmTip": "Returns the Microsoft Information Protection (MIP) sensitivity labels assigned to a file. No request body. Response: { value: { labels: [{ sensitivityLabelId, assignmentMethod, tenantId }] } }. Use list-sensitivity-labels to map sensitivityLabelId to a human-readable name. Not supported for personal Microsoft accounts. May return 423 Locked if the file is double-key-encrypted or decryption is deferred."
+  },
+  {
+    "pathPattern": "/me/dataSecurityAndGovernance/sensitivityLabels",
+    "method": "get",
+    "toolName": "list-sensitivity-labels",
+    "workScopes": ["SensitivityLabel.Read"],
+    "llmTip": "Lists Microsoft Information Protection (MIP) sensitivity labels available to the signed-in user. Use to map label IDs (returned by extract-drive-item-sensitivity-labels) to human-readable names. Not supported for personal Microsoft accounts."
+  },
+  {
+    "pathPattern": "/me/dataSecurityAndGovernance/sensitivityLabels/{sensitivityLabel-id}",
+    "method": "get",
+    "toolName": "get-sensitivity-label",
+    "workScopes": ["SensitivityLabel.Read"],
+    "llmTip": "Gets a single MIP sensitivity label by id. Use list-sensitivity-labels to find ids. Not supported for personal Microsoft accounts."
   }
 ]

package/dist/generated/client.js

@@ -776,6 +776,22 @@ const microsoft_graph_uploadSession = z.object({
   uploadUrl: z.string().describe("The URL endpoint that accepts PUT requests for byte ranges of the file.").nullish()
 }).passthrough();
 const BaseDeltaFunctionResponse = z.object({ "@odata.nextLink": z.string().nullable(), "@odata.deltaLink": z.string().nullable() }).partial().passthrough();
+const microsoft_graph_sensitivityLabelAssignmentMethod = z.enum([
+  "standard",
+  "privileged",
+  "auto",
+  "unknownFutureValue"
+]);
+const microsoft_graph_sensitivityLabelAssignment = z.object({
+  assignmentMethod: microsoft_graph_sensitivityLabelAssignmentMethod.optional(),
+  sensitivityLabelId: z.string().describe("The unique identifier for the sensitivity label assigned to the file.").optional(),
+  tenantId: z.string().describe(
+    "The unique identifier for the tenant that hosts the file when this label is applied."
+  ).optional()
+}).passthrough();
+const microsoft_graph_extractSensitivityLabelsResult = z.object({
+  labels: z.array(microsoft_graph_sensitivityLabelAssignment).describe("List of sensitivity labels assigned to a file.").optional()
+}).passthrough();
 const share_drive_item_Body = z.object({
   requireSignIn: z.boolean().nullable().default(false),
   roles: z.array(z.string().nullable()),
@@ -1975,6 +1991,67 @@ const microsoft_graph_contactCollectionResponse = z.object({
   "@odata.nextLink": z.string().nullable(),
   value: z.array(microsoft_graph_contact)
 }).partial().passthrough();
+const microsoft_graph_labelActionSource = z.enum([
+  "manual",
+  "automatic",
+  "recommended",
+  "none",
+  "unknownFutureValue"
+]);
+const microsoft_graph_usageRights = z.enum([
+  "unknown",
+  "docEdit",
+  "edit",
+  "comment",
+  "export",
+  "forward",
+  "owner",
+  "print",
+  "reply",
+  "replyAll",
+  "view",
+  "extract",
+  "viewRightsData",
+  "editRightsData",
+  "objModel",
+  "accessDenied",
+  "userDefinedProtectionTypeNotSupportedException",
+  "encryptedProtectionTypeNotSupportedException",
+  "purviewClaimsChallengeNotSupportedException",
+  "exception",
+  "labelNotFoundException",
+  "unknownFutureValue"
+]);
+const microsoft_graph_usageRightsIncluded = z.object({
+  id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+  ownerEmail: z.string().describe("The email of owner label rights.").nullish(),
+  userEmail: z.string().describe("The email of user with label user rights.").nullish(),
+  value: microsoft_graph_usageRights.optional()
+}).passthrough();
+const microsoft_graph_sensitivityLabel = z.lazy(
+  () => z.object({
+    id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+    actionSource: microsoft_graph_labelActionSource.optional(),
+    autoTooltip: z.string().nullish(),
+    description: z.string().nullish(),
+    displayName: z.string().nullish(),
+    hasProtection: z.boolean().nullish(),
+    isDefault: z.boolean().nullish(),
+    isEndpointProtectionEnabled: z.boolean().nullish(),
+    isScopedToUser: z.boolean().nullish(),
+    locale: z.string().nullish(),
+    name: z.string().nullish(),
+    priority: z.number().gte(-2147483648).lte(2147483647).nullish(),
+    toolTip: z.string().nullish(),
+    rights: microsoft_graph_usageRightsIncluded.optional(),
+    sublabels: z.array(microsoft_graph_sensitivityLabel).optional()
+  }).passthrough()
+);
+const microsoft_graph_sensitivityLabelCollectionResponse = z.object({
+  "@odata.count": z.number().int().nullable(),
+  "@odata.nextLink": z.string().nullable(),
+  value: z.array(microsoft_graph_sensitivityLabel)
+}).partial().passthrough();
 const microsoft_graph_storagePlanInformation = z.object({
   upgradeAvailable: z.boolean().describe("Indicates whether there are higher storage quota plans available. Read-only.").nullish()
 }).passthrough();
@@ -4404,6 +4481,9 @@ const schemas = {
   create_upload_session_Body,
   microsoft_graph_uploadSession,
   BaseDeltaFunctionResponse,
+  microsoft_graph_sensitivityLabelAssignmentMethod,
+  microsoft_graph_sensitivityLabelAssignment,
+  microsoft_graph_extractSensitivityLabelsResult,
   share_drive_item_Body,
   BaseCollectionPaginationCountResponse,
   microsoft_graph_sharePointGroupIdentity,
@@ -4520,6 +4600,11 @@ const schemas = {
   microsoft_graph_chatCollectionResponse,
   microsoft_graph_contact,
   microsoft_graph_contactCollectionResponse,
+  microsoft_graph_labelActionSource,
+  microsoft_graph_usageRights,
+  microsoft_graph_usageRightsIncluded,
+  microsoft_graph_sensitivityLabel,
+  microsoft_graph_sensitivityLabelCollectionResponse,
   microsoft_graph_storagePlanInformation,
   microsoft_graph_quota,
   microsoft_graph_systemFacet,
@@ -5472,6 +5557,14 @@ Items with this property set should be removed from your local state.`,
     ],
     response: z.void()
   },
+  {
+    method: "post",
+    path: "/drives/:driveId/items/:driveItemId/extractSensitivityLabels",
+    alias: "extract-drive-item-sensitivity-labels",
+    description: `Invoke action extractSensitivityLabels`,
+    requestFormat: "json",
+    response: z.void()
+  },
   {
     method: "post",
     path: "/drives/:driveId/items/:driveItemId/invite",
@@ -7571,6 +7664,76 @@ or from some other calendar of the user.`,
     ],
     response: z.void()
   },
+  {
+    method: "get",
+    path: "/me/dataSecurityAndGovernance/sensitivityLabels",
+    alias: "list-sensitivity-labels",
+    description: `Get sensitivityLabels from me`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$top",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Show only the first n items").optional()
+      },
+      {
+        name: "$skip",
+        type: "Query",
+        schema: z.number().int().gte(0).describe("Skip the first n items").optional()
+      },
+      {
+        name: "$search",
+        type: "Query",
+        schema: z.string().describe("Search items by search phrases").optional()
+      },
+      {
+        name: "$filter",
+        type: "Query",
+        schema: z.string().describe("Filter items by property values").optional()
+      },
+      {
+        name: "$count",
+        type: "Query",
+        schema: z.boolean().describe("Include count of items").optional()
+      },
+      {
+        name: "$orderby",
+        type: "Query",
+        schema: z.array(z.string()).describe("Order items by property values").optional()
+      },
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
+  {
+    method: "get",
+    path: "/me/dataSecurityAndGovernance/sensitivityLabels/:sensitivityLabelId",
+    alias: "get-sensitivity-label",
+    description: `Get sensitivityLabels from me`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "$select",
+        type: "Query",
+        schema: z.array(z.string()).describe("Select properties to be returned").optional()
+      },
+      {
+        name: "$expand",
+        type: "Query",
+        schema: z.array(z.string()).describe("Expand related entities").optional()
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/me/directReports",

package/dist/graph-tools.js

@@ -221,13 +221,8 @@ async function executeGraphTool(tool, config, graphClient, params, authManager)
         while (nextLink && pageCount < maxPages && allItems.length < maxItems) {
           logger.info(`Fetching page ${pageCount + 1} from: ${nextLink}`);
           const url = new URL(nextLink);
-          const nextPath = url.pathname.replace("/v1.0", "");
+          const nextPath = url.pathname.replace("/v1.0", "") + url.search;
           const nextOptions = { ...options };
-          const nextQueryParams = {};
-          for (const [key, value] of url.searchParams.entries()) {
-            nextQueryParams[key] = value;
-          }
-          nextOptions.queryParams = nextQueryParams;
           const nextResponse = await graphClient.graphRequest(nextPath, nextOptions);
           if (nextResponse?.content?.[0]?.text) {
             const nextJsonResponse = JSON.parse(nextResponse.content[0].text);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.88.1",
+  "version": "0.89.0",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -1715,5 +1715,26 @@
     "toolName": "reauthorize-subscription",
     "scopes": [],
     "llmTip": "Reauthorizes a subscription after receiving a 'reauthorizationRequired' lifecycle notification from Microsoft Graph. No body required. Must be called within the reauthorizationRequiredDateTime window (typically 48h) to avoid subscription expiry."
+  },
+  {
+    "pathPattern": "/drives/{drive-id}/items/{driveItem-id}/extractSensitivityLabels",
+    "method": "post",
+    "toolName": "extract-drive-item-sensitivity-labels",
+    "workScopes": ["Files.Read.All"],
+    "llmTip": "Returns the Microsoft Information Protection (MIP) sensitivity labels assigned to a file. No request body. Response: { value: { labels: [{ sensitivityLabelId, assignmentMethod, tenantId }] } }. Use list-sensitivity-labels to map sensitivityLabelId to a human-readable name. Not supported for personal Microsoft accounts. May return 423 Locked if the file is double-key-encrypted or decryption is deferred."
+  },
+  {
+    "pathPattern": "/me/dataSecurityAndGovernance/sensitivityLabels",
+    "method": "get",
+    "toolName": "list-sensitivity-labels",
+    "workScopes": ["SensitivityLabel.Read"],
+    "llmTip": "Lists Microsoft Information Protection (MIP) sensitivity labels available to the signed-in user. Use to map label IDs (returned by extract-drive-item-sensitivity-labels) to human-readable names. Not supported for personal Microsoft accounts."
+  },
+  {
+    "pathPattern": "/me/dataSecurityAndGovernance/sensitivityLabels/{sensitivityLabel-id}",
+    "method": "get",
+    "toolName": "get-sensitivity-label",
+    "workScopes": ["SensitivityLabel.Read"],
+    "llmTip": "Gets a single MIP sensitivity label by id. Use list-sensitivity-labels to find ids. Not supported for personal Microsoft accounts."
   }
 ]