@softeria/ms-365-mcp-server 0.9.0 → 0.9.2

package/README.md

@@ -132,11 +132,13 @@ When running as an MCP server, the following options can be used:
 --http [port]     Use Streamable HTTP transport instead of stdio (optionally specify port, default: 3000)
                   Starts Express.js server with MCP endpoint at /mcp
 --enable-auth-tools Enable login/logout tools when using HTTP mode (disabled by default in HTTP mode)
+--enabled-tools <pattern> Filter tools using regex pattern (e.g., "excel|contact" to enable Excel and Contact tools)
 ```
 
 Environment variables:
 
 - `READ_ONLY=true|1`: Alternative to --read-only flag
+- `ENABLED_TOOLS`: Filter tools using regex pattern (alternative to --enabled-tools flag)
 - `LOG_LEVEL`: Set logging level (default: 'info')
 - `SILENT=true`: Disable console output
 - `MS365_MCP_CLIENT_ID`: Custom Azure app client ID (defaults to built-in app)

package/dist/auth.js

@@ -24,9 +24,12 @@ const SCOPE_HIERARCHY = {
     'Tasks.ReadWrite': ['Tasks.Read'],
     'Contacts.ReadWrite': ['Contacts.Read'],
 };
-function buildScopesFromEndpoints() {
+function buildScopesFromEndpoints(includeWorkAccountScopes = false) {
     const scopesSet = new Set();
     endpoints.default.forEach((endpoint) => {
+        if (endpoint.requiresWorkAccount && !includeWorkAccountScopes) {
+            return;
+        }
         if (endpoint.scopes && Array.isArray(endpoint.scopes)) {
             endpoint.scopes.forEach((scope) => scopesSet.add(scope));
         }
@@ -39,6 +42,9 @@ function buildScopesFromEndpoints() {
     });
     return Array.from(scopesSet);
 }
+function buildAllScopes() {
+    return buildScopesFromEndpoints(true);
+}
 class AuthManager {
     constructor(config = DEFAULT_CONFIG, scopes = buildScopesFromEndpoints()) {
         logger.info(`And scopes are ${scopes.join(', ')}`, scopes);
@@ -226,5 +232,71 @@ class AuthManager {
             throw error;
         }
     }
+    async hasWorkAccountPermissions() {
+        try {
+            const accounts = await this.msalApp.getTokenCache().getAllAccounts();
+            if (accounts.length === 0) {
+                return false;
+            }
+            const workScopes = endpoints.default
+                .filter((e) => e.requiresWorkAccount)
+                .flatMap((e) => e.scopes || []);
+            try {
+                await this.msalApp.acquireTokenSilent({
+                    scopes: workScopes.slice(0, 1),
+                    account: accounts[0],
+                });
+                return true;
+            }
+            catch {
+                return false;
+            }
+        }
+        catch (error) {
+            logger.error(`Error checking work account permissions: ${error.message}`);
+            return false;
+        }
+    }
+    async expandToWorkAccountScopes(hack) {
+        try {
+            logger.info('Expanding to work account scopes...');
+            const allScopes = buildAllScopes();
+            const deviceCodeRequest = {
+                scopes: allScopes,
+                deviceCodeCallback: (response) => {
+                    const text = [
+                        '\n',
+                        '🔄 This feature requires additional permissions (work account scopes)',
+                        '\n',
+                        response.message,
+                        '\n',
+                    ].join('');
+                    if (hack) {
+                        hack(text + 'After login run the "verify login" command');
+                    }
+                    else {
+                        console.log(text);
+                    }
+                    logger.info('Work account scope expansion initiated');
+                },
+            };
+            const response = await this.msalApp.acquireTokenByDeviceCode(deviceCodeRequest);
+            logger.info('Work account scope expansion successful');
+            this.accessToken = response?.accessToken || null;
+            this.tokenExpiry = response?.expiresOn ? new Date(response.expiresOn).getTime() : null;
+            this.scopes = allScopes;
+            await this.saveTokenCache();
+            return true;
+        }
+        catch (error) {
+            logger.error(`Error expanding to work account scopes: ${error.message}`);
+            return false;
+        }
+    }
+    requiresWorkAccountScope(toolName) {
+        const endpoint = endpoints.default.find((e) => e.toolName === toolName);
+        return endpoint?.requiresWorkAccount === true;
+    }
 }
 export default AuthManager;
+export { buildScopesFromEndpoints, buildAllScopes };

package/dist/cli.js

@@ -17,12 +17,16 @@ program
     .option('--verify-login', 'Verify login without starting the server')
     .option('--read-only', 'Start server in read-only mode, disabling write operations')
     .option('--http [port]', 'Use Streamable HTTP transport instead of stdio (optionally specify port, default: 3000)')
-    .option('--enable-auth-tools', 'Enable login/logout tools when using HTTP mode (disabled by default in HTTP mode)');
+    .option('--enable-auth-tools', 'Enable login/logout tools when using HTTP mode (disabled by default in HTTP mode)')
+    .option('--enabled-tools <pattern>', 'Filter tools using regex pattern (e.g., "excel|contact" to enable Excel and Contact tools)');
 export function parseArgs() {
     program.parse();
     const options = program.opts();
     if (process.env.READ_ONLY === 'true' || process.env.READ_ONLY === '1') {
         options.readOnly = true;
     }
+    if (process.env.ENABLED_TOOLS) {
+        options.enabledTools = process.env.ENABLED_TOOLS;
+    }
     return options;
 }

package/dist/endpoints.json

@@ -279,5 +279,110 @@
         "method": "get",
         "toolName": "get-current-user",
         "scopes": ["User.Read"]
+    },
+    {
+        "pathPattern": "/me/chats",
+        "method": "get",
+        "toolName": "list-chats",
+        "scopes": ["Chat.Read"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/chats/{chat-id}",
+        "method": "get",
+        "toolName": "get-chat",
+        "scopes": ["Chat.Read"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/chats/{chat-id}/messages",
+        "method": "get",
+        "toolName": "list-chat-messages",
+        "scopes": ["ChatMessage.Read"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/chats/{chat-id}/messages/{chatMessage-id}",
+        "method": "get",
+        "toolName": "get-chat-message",
+        "scopes": ["ChatMessage.Read"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/chats/{chat-id}/messages",
+        "method": "post",
+        "toolName": "send-chat-message",
+        "scopes": ["ChatMessage.Send"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/me/joinedTeams",
+        "method": "get",
+        "toolName": "list-joined-teams",
+        "scopes": ["Team.ReadBasic.All"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/teams/{team-id}",
+        "method": "get",
+        "toolName": "get-team",
+        "scopes": ["Team.ReadBasic.All"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/teams/{team-id}/channels",
+        "method": "get",
+        "toolName": "list-team-channels",
+        "scopes": ["Channel.ReadBasic.All"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/teams/{team-id}/channels/{channel-id}",
+        "method": "get",
+        "toolName": "get-team-channel",
+        "scopes": ["Channel.ReadBasic.All"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages",
+        "method": "get",
+        "toolName": "list-channel-messages",
+        "scopes": ["ChannelMessage.Read.All"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages/{chatMessage-id}",
+        "method": "get",
+        "toolName": "get-channel-message",
+        "scopes": ["ChannelMessage.Read.All"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/teams/{team-id}/channels/{channel-id}/messages",
+        "method": "post",
+        "toolName": "send-channel-message",
+        "scopes": ["ChannelMessage.Send"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/teams/{team-id}/members",
+        "method": "get",
+        "toolName": "list-team-members",
+        "scopes": ["TeamMember.Read.All"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/chats/{chat-id}/messages/{chatMessage-id}/replies",
+        "method": "get",
+        "toolName": "list-chat-message-replies",
+        "scopes": ["ChatMessage.Read"],
+        "requiresWorkAccount": true
+    },
+    {
+        "pathPattern": "/chats/{chat-id}/messages/{chatMessage-id}/replies",
+        "method": "post",
+        "toolName": "reply-to-chat-message",
+        "scopes": ["ChatMessage.Send"],
+        "requiresWorkAccount": true
     }
 ]