@softeria/ms-365-mcp-server 0.9.11 → 0.9.13

package/README.md

@@ -21,19 +21,23 @@ API.
 ## Supported Services & Tools
 
 **Email (Outlook)**  
-<sub>list-mail-messages, list-mail-folders, list-mail-folder-messages, get-mail-message, send-mail, delete-mail-message</sub>
+<sub>list-mail-messages, list-mail-folders, list-mail-folder-messages, get-mail-message, send-mail,
+delete-mail-message</sub>
 
 **Calendar**  
-<sub>list-calendars, list-calendar-events, get-calendar-event, get-calendar-view, create-calendar-event, update-calendar-event, delete-calendar-event</sub>
+<sub>list-calendars, list-calendar-events, get-calendar-event, get-calendar-view, create-calendar-event,
+update-calendar-event, delete-calendar-event</sub>
 
 **OneDrive & SharePoint Files**  
-<sub>list-drives, get-drive-root-item, list-folder-files, download-onedrive-file-content, upload-file-content, upload-new-file, delete-onedrive-file</sub>
+<sub>list-drives, get-drive-root-item, list-folder-files, download-onedrive-file-content, upload-file-content,
+upload-new-file, delete-onedrive-file</sub>
 
 **Excel Operations**  
 <sub>list-excel-worksheets, get-excel-range, create-excel-chart, format-excel-range, sort-excel-range</sub>
 
 **OneNote**  
-<sub>list-onenote-notebooks, list-onenote-notebook-sections, list-onenote-section-pages, get-onenote-page-content, create-onenote-page</sub>
+<sub>list-onenote-notebooks, list-onenote-notebook-sections, list-onenote-section-pages, get-onenote-page-content,
+create-onenote-page</sub>
 
 **To Do Tasks**  
 <sub>list-todo-task-lists, list-todo-tasks, get-todo-task, create-todo-task, update-todo-task, delete-todo-task</sub>
@@ -42,13 +46,19 @@ API.
 <sub>list-planner-tasks, get-planner-plan, list-plan-tasks, get-planner-task, create-planner-task</sub>
 
 **Contacts**  
-<sub>list-outlook-contacts, get-outlook-contact, create-outlook-contact, update-outlook-contact, delete-outlook-contact</sub>
+<sub>list-outlook-contacts, get-outlook-contact, create-outlook-contact, update-outlook-contact,
+delete-outlook-contact</sub>
 
 **Teams & Chats** (Work/School accounts only)  
-<sub>list-chats, get-chat, list-chat-messages, get-chat-message, send-chat-message, list-chat-message-replies, reply-to-chat-message, list-joined-teams, get-team, list-team-channels, get-team-channel, list-channel-messages, get-channel-message, send-channel-message, list-team-members</sub>
+<sub>list-chats, get-chat, list-chat-messages, get-chat-message, send-chat-message, list-chat-message-replies,
+reply-to-chat-message, list-joined-teams, get-team, list-team-channels, get-team-channel, list-channel-messages,
+get-channel-message, send-channel-message, list-team-members</sub>
 
 **SharePoint Sites** (Work/School accounts only)  
-<sub>search-sharepoint-sites, get-sharepoint-site, get-sharepoint-site-by-path, list-sharepoint-site-drives, get-sharepoint-site-drive-by-id, list-sharepoint-site-items, get-sharepoint-site-item, list-sharepoint-site-lists, get-sharepoint-site-list, list-sharepoint-site-list-items, get-sharepoint-site-list-item, get-sharepoint-sites-delta</sub>
+<sub>search-sharepoint-sites, get-sharepoint-site, get-sharepoint-site-by-path, list-sharepoint-site-drives,
+get-sharepoint-site-drive-by-id, list-sharepoint-site-items, get-sharepoint-site-item, list-sharepoint-site-lists,
+get-sharepoint-site-list, list-sharepoint-site-list-items, get-sharepoint-site-list-item,
+get-sharepoint-sites-delta</sub>
 
 **User Profile**  
 <sub>get-current-user</sub>
@@ -98,7 +108,7 @@ integration method.
 
 > ⚠️ You must authenticate before using tools.
 
-The server supports two authentication methods:
+The server supports three authentication methods:
 
 #### 1. Device Code Flow (Default)
 
@@ -134,6 +144,19 @@ This mode:
 
 MCP clients will automatically handle the OAuth flow when they see the advertised capabilities.
 
+#### 3. Bring Your Own Token (BYOT)
+
+If you are running ms-365-mcp-server as part of a larger system that manages Microsoft OAuth tokens externally, you can provide an access token directly to this MCP server:
+
+```bash
+MS365_MCP_OAUTH_TOKEN=your_oauth_token npx @softeria/ms-365-mcp-server
+```
+
+This method:
+- Bypasses the interactive authentication flows
+- Uses your pre-existing OAuth token for Microsoft Graph API requests
+- Does not handle token refresh (token lifecycle management is your responsibility)
+
 > **Note**: HTTP mode requires authentication. For unauthenticated testing, use stdio mode with device code flow.
 >
 > **Authentication Tools**: In HTTP mode, login/logout tools are disabled by default since OAuth handles authentication.
@@ -147,6 +170,7 @@ The following options can be used when running ms-365-mcp-server directly from t
 --login           Login using device code flow
 --logout          Log out and clear saved credentials
 --verify-login    Verify login without starting the server
+--force-work-scopes Force inclusion of work account scopes during login (includes Teams, SharePoint, etc.)
 ```
 
 ### Server Options
@@ -166,10 +190,12 @@ Environment variables:
 
 - `READ_ONLY=true|1`: Alternative to --read-only flag
 - `ENABLED_TOOLS`: Filter tools using regex pattern (alternative to --enabled-tools flag)
+- `MS365_MCP_FORCE_WORK_SCOPES=true|1`: Force inclusion of work account scopes (alternative to --force-work-scopes flag)
 - `LOG_LEVEL`: Set logging level (default: 'info')
-- `SILENT=true`: Disable console output
+- `SILENT=true|1`: Disable console output
 - `MS365_MCP_CLIENT_ID`: Custom Azure app client ID (defaults to built-in app)
 - `MS365_MCP_TENANT_ID`: Custom tenant ID (defaults to 'common' for multi-tenant)
+- `MS365_MCP_OAUTH_TOKEN`: Pre-existing OAuth token for Microsoft Graph API (BYOT method)
 
 ## Support
 

package/dist/auth.js

@@ -53,8 +53,9 @@ class AuthManager {
         this.msalApp = new PublicClientApplication(this.config);
         this.accessToken = null;
         this.tokenExpiry = null;
-        this.oauthToken = null;
-        this.isOAuthMode = false;
+        const oauthTokenFromEnv = process.env.MS365_MCP_OAUTH_TOKEN;
+        this.oauthToken = oauthTokenFromEnv ?? null;
+        this.isOAuthMode = oauthTokenFromEnv != null;
     }
     async loadTokenCache() {
         try {

package/dist/cli.js

@@ -18,7 +18,8 @@ program
     .option('--read-only', 'Start server in read-only mode, disabling write operations')
     .option('--http [port]', 'Use Streamable HTTP transport instead of stdio (optionally specify port, default: 3000)')
     .option('--enable-auth-tools', 'Enable login/logout tools when using HTTP mode (disabled by default in HTTP mode)')
-    .option('--enabled-tools <pattern>', 'Filter tools using regex pattern (e.g., "excel|contact" to enable Excel and Contact tools)');
+    .option('--enabled-tools <pattern>', 'Filter tools using regex pattern (e.g., "excel|contact" to enable Excel and Contact tools)')
+    .option('--force-work-scopes', 'Force inclusion of work account scopes during login (includes Teams, SharePoint, etc.)');
 export function parseArgs() {
     program.parse();
     const options = program.opts();
@@ -28,5 +29,9 @@ export function parseArgs() {
     if (process.env.ENABLED_TOOLS) {
         options.enabledTools = process.env.ENABLED_TOOLS;
     }
+    if (process.env.MS365_MCP_FORCE_WORK_SCOPES === 'true' ||
+        process.env.MS365_MCP_FORCE_WORK_SCOPES === '1') {
+        options.forceWorkScopes = true;
+    }
     return options;
 }

package/dist/index.js

@@ -4,10 +4,12 @@ import logger from './logger.js';
 import AuthManager from './auth.js';
 import MicrosoftGraphServer from './server.js';
 import { version } from './version.js';
+import { buildScopesFromEndpoints } from './auth.js';
 async function main() {
     try {
         const args = parseArgs();
-        const authManager = new AuthManager();
+        const scopes = buildScopesFromEndpoints(args.forceWorkScopes);
+        const authManager = new AuthManager(undefined, scopes);
         await authManager.loadTokenCache();
         if (args.login) {
             await authManager.acquireTokenByDeviceCode();

package/dist/logger.js

@@ -27,7 +27,7 @@ const logger = winston.createLogger({
 export const enableConsoleLogging = () => {
     logger.add(new winston.transports.Console({
         format: winston.format.combine(winston.format.colorize(), winston.format.simple()),
-        silent: process.env.SILENT === 'true',
+        silent: process.env.SILENT === 'true' || process.env.SILENT === '1',
     }));
 };
 export default logger;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.9.11",
+  "version": "0.9.13",
   "description": "Microsoft 365 MCP Server",
   "type": "module",
   "main": "dist/index.js",