Microsoft 365 Admin
A focused toolkit for Microsoft 365 administrators who need application-level access to Graph API without user interaction. Ships 622 read-only tools covering security monitoring, audit logs, identity management, Intune device policies, eDiscovery cases, Defender for Identity sensors, and Copilot usage analytics. Built for incident response and compliance workflows where you need client credentials, not delegated permissions. Write operations exist behind an explicit flag with risk classifications. Comes with playbooks for breach investigation, presets to scope tool availability by domain, and support for both Azure global and China clouds. If you're running security operations or quarterly access reviews at scale, this is the server to wire up.
- GitHub stars
- 4
- tools
- 80
- auth
- Secret needed
- transport
- STDIO
- env vars
- 8
- last updated
- May 21, 2026
Tools
80 toolsPublic tool metadata for what this MCP can expose to an agent.
list-security-alerts
No parameter schema in public metadata yet.
get-security-alert
No parameter schema in public metadata yet.
update-security-alert
No parameter schema in public metadata yet.
list-security-incidents
No parameter schema in public metadata yet.
get-security-incident
No parameter schema in public metadata yet.
update-security-incident
No parameter schema in public metadata yet.
list-attack-simulations
No parameter schema in public metadata yet.
get-attack-simulation
No parameter schema in public metadata yet.
create-attack-simulation
No parameter schema in public metadata yet.
update-attack-simulation
No parameter schema in public metadata yet.
delete-attack-simulation
No parameter schema in public metadata yet.
list-directory-audits
No parameter schema in public metadata yet.
list-sign-ins
No parameter schema in public metadata yet.
list-provisioning-logs
No parameter schema in public metadata yet.
list-deleted-users
No parameter schema in public metadata yet.
list-deleted-groups
No parameter schema in public metadata yet.
list-service-health
No parameter schema in public metadata yet.
list-service-issues
No parameter schema in public metadata yet.
list-service-messages
No parameter schema in public metadata yet.
get-teams-activity-report
No parameter schema in public metadata yet.
get-email-activity-report
No parameter schema in public metadata yet.
get-active-users-report
No parameter schema in public metadata yet.
get-sharepoint-usage-report
No parameter schema in public metadata yet.
get-onedrive-usage-report
No parameter schema in public metadata yet.
get-active-user-counts-report
No parameter schema in public metadata yet.
get-mailbox-usage-report
No parameter schema in public metadata yet.
get-m365-apps-usage-report
No parameter schema in public metadata yet.
list-users
No parameter schema in public metadata yet.
get-user
No parameter schema in public metadata yet.
list-user-memberships
No parameter schema in public metadata yet.
list-user-auth-methods
No parameter schema in public metadata yet.
list-user-devices
No parameter schema in public metadata yet.
create-user
No parameter schema in public metadata yet.
delete-user
No parameter schema in public metadata yet.
assign-user-license
No parameter schema in public metadata yet.
reprocess-user-license
No parameter schema in public metadata yet.
list-devices
No parameter schema in public metadata yet.
get-device
No parameter schema in public metadata yet.
list-groups
No parameter schema in public metadata yet.
get-group
No parameter schema in public metadata yet.
list-group-members
No parameter schema in public metadata yet.
list-group-owners
No parameter schema in public metadata yet.
create-group
No parameter schema in public metadata yet.
update-group
No parameter schema in public metadata yet.
delete-group
No parameter schema in public metadata yet.
add-group-member
No parameter schema in public metadata yet.
remove-group-member
No parameter schema in public metadata yet.
add-group-owner
No parameter schema in public metadata yet.
remove-group-owner
No parameter schema in public metadata yet.
list-directory-roles
No parameter schema in public metadata yet.
list-role-members
No parameter schema in public metadata yet.
list-role-assignments
No parameter schema in public metadata yet.
list-role-definitions
No parameter schema in public metadata yet.
list-pim-eligible-assignments
No parameter schema in public metadata yet.
list-pim-active-assignments
No parameter schema in public metadata yet.
add-directory-role-member
No parameter schema in public metadata yet.
delete-role-assignment
No parameter schema in public metadata yet.
remove-directory-role-member
No parameter schema in public metadata yet.
list-administrative-units
No parameter schema in public metadata yet.
get-administrative-unit
No parameter schema in public metadata yet.
list-administrative-unit-members
No parameter schema in public metadata yet.
create-administrative-unit
No parameter schema in public metadata yet.
update-administrative-unit
No parameter schema in public metadata yet.
delete-administrative-unit
No parameter schema in public metadata yet.
add-administrative-unit-member
No parameter schema in public metadata yet.
remove-administrative-unit-member
No parameter schema in public metadata yet.
list-conditional-access-policies
No parameter schema in public metadata yet.
get-conditional-access-policy
No parameter schema in public metadata yet.
list-named-locations
No parameter schema in public metadata yet.
list-applications
No parameter schema in public metadata yet.
list-service-principals
No parameter schema in public metadata yet.
list-oauth2-grants
No parameter schema in public metadata yet.
list-user-app-role-assignments
No parameter schema in public metadata yet.
list-sp-app-role-assignments
No parameter schema in public metadata yet.
update-application
No parameter schema in public metadata yet.
delete-application
No parameter schema in public metadata yet.
update-service-principal
No parameter schema in public metadata yet.
delete-oauth2-grant
No parameter schema in public metadata yet.
delete-sp-app-role-assignment
No parameter schema in public metadata yet.
delete-user-app-role-assignment
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
MS365_ADMIN_MCP_TENANT_ID*Azure AD tenant ID (specific GUID, not 'common').
MS365_ADMIN_MCP_CLIENT_ID*App registration client ID with the required application permissions.
MS365_ADMIN_MCP_CLIENT_SECRET*secretApp registration client secret. Prefer Azure Key Vault via MS365_ADMIN_MCP_KEYVAULT_URL for production.
MS365_ADMIN_MCP_KEYVAULT_URLOptional Azure Key Vault URL. When set, secrets are pulled from the vault and override the env-var values above.
MS365_ADMIN_MCP_CLOUD_TYPECloud environment: 'global' (default) or 'china' (21Vianet).
MS365_ADMIN_MCP_MAX_TOPCap on the $top query parameter to limit result size.
READ_ONLYSet to 'true' or '1' to force read-only mode (default behavior; mutations require --allow-writes).
ENABLED_TOOLSRegex to filter the catalog of available tools.
Readme
ms-365-admin-mcp-server
A Model Context Protocol (MCP) server for Microsoft 365 administration via Graph API application permissions (client credentials).
Built on the architecture and endpoint-driven design pioneered by Softeria/ms-365-mcp-server, and complementary to it: Softeria's server uses delegated permissions for end-user productivity scenarios, while this one uses application permissions for admin operations — security monitoring, identity audits, incident response, and service health. See Acknowledgments below.
Features
Details
- Repository
- github.com/okapi-ca/ms-365-admin-mcp-server
- Website
- github.com/okapi-ca/ms-365-admin-mcp-server
- Package
@okapi-ca/ms-365-admin-mcp-server- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active