Microsoft 365 Admin

Package (npm 0.6.3)

npx -y @okapi-ca/[email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "ms-365-admin-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@okapi-ca/[email protected]"
      ],
      "env": {
        "MS365_ADMIN_MCP_TENANT_ID": "<YOUR_VALUE>",
        "MS365_ADMIN_MCP_CLIENT_ID": "<YOUR_VALUE>",
        "MS365_ADMIN_MCP_CLIENT_SECRET": "<YOUR_VALUE>"
      }
    }
  }
}

• MS365_ADMIN_MCP_TENANT_ID required — Azure AD tenant ID (specific GUID, not 'common').
• MS365_ADMIN_MCP_CLIENT_ID required — App registration client ID with the required application permissions.
• MS365_ADMIN_MCP_CLIENT_SECRET required secret — App registration client secret. Prefer Azure Key Vault via MS365_ADMIN_MCP_KEYVAULT_URL for production.
• MS365_ADMIN_MCP_KEYVAULT_URL — Optional Azure Key Vault URL. When set, secrets are pulled from the vault and override the env-var values above.
• MS365_ADMIN_MCP_CLOUD_TYPE — Cloud environment: 'global' (default) or 'china' (21Vianet).
• MS365_ADMIN_MCP_MAX_TOP — Cap on the $top query parameter to limit result size.
• READ_ONLY — Set to 'true' or '1' to force read-only mode (default behavior; mutations require --allow-writes).
• ENABLED_TOOLS — Regex to filter the catalog of available tools.