@softeria/ms-365-mcp-server 0.97.0 → 0.99.0

package/dist/__tests__/graph-tools.test.js

@@ -643,4 +643,86 @@ describe("graph-tools", () => {
       expect(payload.error).toMatch(/not found/i);
     });
   });
+  describe("discovery mode: --enabled-tools filter", () => {
+    it("search-tools only surfaces Graph tools matching the regex", async () => {
+      mockEndpoints.push(
+        {
+          alias: "list-mail-messages",
+          method: "get",
+          path: "/me/messages",
+          description: "List mail",
+          parameters: []
+        },
+        {
+          alias: "list-calendar-events",
+          method: "get",
+          path: "/me/events",
+          description: "List events",
+          parameters: []
+        }
+      );
+      mockEndpointsJson = [
+        { toolName: "list-mail-messages", method: "get", pathPattern: "/me/messages" },
+        { toolName: "list-calendar-events", method: "get", pathPattern: "/me/events" }
+      ];
+      const server = createMockServer();
+      const { registerDiscoveryTools } = await loadModule();
+      registerDiscoveryTools(server, {}, false, false, void 0, false, [], "mail");
+      const result = await server.tools.get("search-tools").handler({ limit: 50 });
+      const found = JSON.parse(result.content[0].text).tools.map((t) => t.name);
+      expect(found).toContain("list-mail-messages");
+      expect(found).not.toContain("list-calendar-events");
+    });
+    it("utility tools obey the regex too", async () => {
+      mockEndpoints.length = 0;
+      mockEndpointsJson = [];
+      const server = createMockServer();
+      const { registerDiscoveryTools } = await loadModule();
+      registerDiscoveryTools(
+        server,
+        {},
+        false,
+        false,
+        void 0,
+        false,
+        [],
+        "^download-bytes$"
+      );
+      const result = await server.tools.get("search-tools").handler({ limit: 50 });
+      const found = JSON.parse(result.content[0].text).tools.map((t) => t.name);
+      expect(found).toContain("download-bytes");
+      expect(found).not.toContain("parse-teams-url");
+    });
+    it("invalid regex pattern is ignored, all tools surface", async () => {
+      mockEndpoints.length = 0;
+      mockEndpointsJson = [];
+      const server = createMockServer();
+      const { registerDiscoveryTools } = await loadModule();
+      registerDiscoveryTools(
+        server,
+        {},
+        false,
+        false,
+        void 0,
+        false,
+        [],
+        "[invalid"
+      );
+      const result = await server.tools.get("search-tools").handler({ limit: 50 });
+      const found = JSON.parse(result.content[0].text).tools.map((t) => t.name);
+      expect(found).toContain("download-bytes");
+      expect(found).toContain("parse-teams-url");
+    });
+  });
+  describe("utility tools in read-only mode", () => {
+    it("skips utility tools whose readOnlyHint is not true", async () => {
+      mockEndpoints.length = 0;
+      mockEndpointsJson = [];
+      const server = createMockServer();
+      const { registerGraphTools } = await loadModule();
+      registerGraphTools(server, {}, true);
+      expect(server.tools.has("download-bytes")).toBe(true);
+      expect(server.tools.has("parse-teams-url")).toBe(true);
+    });
+  });
 });

package/dist/endpoints.json

@@ -100,6 +100,12 @@
     "workScopes": ["Mail.Send.Shared"],
     "llmTip": "CRITICAL: Do not try to guess the email address of the recipients. Use the list-users tool to find the email address of the recipients."
   },
+  {
+    "pathPattern": "/users/{user-id}/messages",
+    "method": "post",
+    "toolName": "create-shared-mailbox-draft",
+    "workScopes": ["Mail.ReadWrite.Shared"]
+  },
   {
     "pathPattern": "/users",
     "method": "get",

package/dist/generated/client.js

@@ -13409,6 +13409,68 @@ To monitor future changes, call the delta API by using the @odata.deltaLink in t
     ],
     response: z.void()
   },
+  {
+    method: "post",
+    path: "/users/:userId/messages",
+    alias: "create-shared-mailbox-draft",
+    description: `Create new navigation property to messages for users`,
+    requestFormat: "json",
+    parameters: [
+      {
+        name: "body",
+        description: `New navigation property`,
+        type: "Body",
+        schema: z.object({
+          id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
+          createdDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z"
+          ).nullish(),
+          lastModifiedDateTime: z.string().regex(
+            /^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$/
+          ).datetime({ offset: true }).describe(
+            "The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z"
+          ).nullish(),
+          body: microsoft_graph_itemBody.optional(),
+          subject: z.string().describe("The subject of the message.").nullish(),
+          attachments: z.array(microsoft_graph_attachment).describe("The fileAttachment and itemAttachment attachments for the message.").optional(),
+          singleValueExtendedProperties: z.array(microsoft_graph_singleValueLegacyExtendedProperty).describe(
+            "The collection of single-value extended properties defined for the message. Nullable."
+          ).optional(),
+          multiValueExtendedProperties: z.array(microsoft_graph_multiValueLegacyExtendedProperty).describe(
+            "The collection of multi-value extended properties defined for the message. Nullable."
+          ).optional(),
+          importance: microsoft_graph_importance.optional(),
+          from: microsoft_graph_recipient.optional(),
+          toRecipients: z.array(microsoft_graph_recipient).describe("The To: recipients for the message.").optional(),
+          categories: z.array(z.string().nullable()).describe("The categories associated with the item").optional(),
+          changeKey: z.string().describe(
+            "Identifies the version of the item. Every time the item is changed, changeKey changes as well. This allows Exchange to apply changes to the correct version of the object. Read-only."
+          ).nullish(),
+          bccRecipients: z.array(microsoft_graph_recipient).describe("The Bcc: recipients for the message.").optional(),
+          bodyPreview: z.string().describe("The first 255 characters of the message body. It is in text format.").nullish(),
+          ccRecipients: z.array(microsoft_graph_recipient).describe("The Cc: recipients for the message.").optional(),
+          conversationId: z.string().describe("The ID of the conversation the email belongs to.").nullish(),
+          conversationIndex: z.string().describe("Indicates the position of the message within the conversation.").nullish(),
+          flag: microsoft_graph_followupFlag.optional(),
+          hasAttachments: z.boolean().describe(
+            "Indicates whether the message has attachments. This property doesn't include inline attachments, so if a message contains only inline attachments, this property is false. To verify the existence of inline attachments, parse the body property to look for a src attribute, such as <IMG src='cid:image001.jpg@01D26CD8.6C05F070'>."
+          ).nullish(),
+          inferenceClassification: microsoft_graph_inferenceClassificationType.optional(),
+          internetMessageHeaders: z.array(microsoft_graph_internetMessageHeader).describe(
+            "A collection of message headers defined by RFC5322. The set includes message headers indicating the network path taken by a message from the sender to the recipient. It can also contain custom message headers that hold app data for the message.  Requires $select to retrieve. Read-only."
+          ).optional(),
+          internetMessageId: z.string().describe("The message ID in the format specified by RFC2822.").nullish(),
+          isDeliveryReceiptRequested: z.boolean().describe("Indicates whether a read receipt is requested for the message.").nullish(),
+          isDraft: z.boolean().describe(
+            "Indicates whether the message is a draft. A message is a draft if it hasn't been sent yet."
+          ).nullish()
+        }).passthrough().passthrough()
+      }
+    ],
+    response: z.void()
+  },
   {
     method: "get",
     path: "/users/:userId/messages/:messageId",

package/dist/graph-tools.js

@@ -543,6 +543,7 @@ function registerGraphTools(server, graphClient, readOnly = false, enabledToolsP
     accountNames
   };
   for (const utility of UTILITY_TOOLS) {
+    if (readOnly && !utility.readOnlyHint) continue;
     if (enabledToolsRegex && !enabledToolsRegex.test(utility.name)) continue;
     try {
       registerUtilityToolWithMcp(server, utility, utilityCtx);
@@ -557,7 +558,7 @@ function registerGraphTools(server, graphClient, readOnly = false, enabledToolsP
   );
   return registeredCount;
 }
-function buildToolsRegistry(readOnly, orgMode) {
+function buildToolsRegistry(readOnly, orgMode, enabledToolsRegex) {
   const toolsMap = /* @__PURE__ */ new Map();
   for (const tool of api.endpoints) {
     const endpointConfig = endpointsData.find((e) => e.toolName === tool.alias);
@@ -570,6 +571,9 @@ function buildToolsRegistry(readOnly, orgMode) {
         continue;
       }
     }
+    if (enabledToolsRegex && !enabledToolsRegex.test(tool.alias)) {
+      continue;
+    }
     toolsMap.set(tool.alias, { tool, config: endpointConfig });
   }
   return toolsMap;
@@ -631,9 +635,24 @@ function scoreDiscoveryQuery(query, index) {
   ranked.sort((a, b) => b.score - a.score);
   return ranked;
 }
-function registerDiscoveryTools(server, graphClient, readOnly = false, orgMode = false, authManager, multiAccount = false, accountNames = []) {
-  const toolsRegistry = buildToolsRegistry(readOnly, orgMode);
-  const utilityTools = UTILITY_TOOLS;
+function registerDiscoveryTools(server, graphClient, readOnly = false, orgMode = false, authManager, multiAccount = false, accountNames = [], enabledTools) {
+  let enabledToolsRegex;
+  if (enabledTools) {
+    try {
+      enabledToolsRegex = new RegExp(enabledTools, "i");
+      logger.info(`Discovery mode: filtering tools with pattern ${enabledTools}`);
+    } catch (error) {
+      logger.error(
+        `Invalid --enabled-tools regex ${JSON.stringify(enabledTools)} \u2014 ignoring filter: ${error.message}`
+      );
+    }
+  }
+  const toolsRegistry = buildToolsRegistry(readOnly, orgMode, enabledToolsRegex);
+  const utilityTools = UTILITY_TOOLS.filter((u) => {
+    if (readOnly && !u.readOnlyHint) return false;
+    if (enabledToolsRegex && !enabledToolsRegex.test(u.name)) return false;
+    return true;
+  });
   const searchIndex = buildDiscoverySearchIndex(toolsRegistry, utilityTools);
   const totalCount = toolsRegistry.size + utilityTools.length;
   logger.info(

package/dist/server.js

@@ -75,7 +75,8 @@ class MicrosoftGraphServer {
         this.options.orgMode,
         this.authManager,
         this.multiAccount,
-        this.accountNames
+        this.accountNames,
+        this.options.enabledTools
       );
     } else {
       registerGraphTools(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.97.0",
+  "version": "0.99.0",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -100,6 +100,12 @@
     "workScopes": ["Mail.Send.Shared"],
     "llmTip": "CRITICAL: Do not try to guess the email address of the recipients. Use the list-users tool to find the email address of the recipients."
   },
+  {
+    "pathPattern": "/users/{user-id}/messages",
+    "method": "post",
+    "toolName": "create-shared-mailbox-draft",
+    "workScopes": ["Mail.ReadWrite.Shared"]
+  },
   {
     "pathPattern": "/users",
     "method": "get",