Outlook Assistant

Works with personal Outlook.com and work/school Microsoft 365 accounts.

- 📨Search and read emails— find messages by sender, subject, date, or keywords; read full threads with conversation grouping; batch flag, move, export, or categorise multiple emails at once
- 🛡️Send emails with safety controls— dry-run preview, pre-send mail tips (out-of-office, mailbox full, delivery restrictions), session rate limiting, and recipient allowlist to prevent mistakes
- ✏️Draft emails for review— create, update, and send drafts; reply and forward as drafts; preview before saving with dry-run mode
- 📅Manage your calendar— view upcoming events, schedule meetings with attendees, decline or cancel invitations
- 📦Export emails— save individual messages to Markdown, EML, JSON, or CSV; export full conversation threads to MBOX or HTML; bulk-export search results in one call
- 🔍Investigate email headers— full raw header access (DKIM, SPF, DMARC, delivery chain, X-Mailer, X-Originating-IP) for phishing investigation and compliance review
- 🗂️Organise your inbox— create nested folders (addressable by path), set up inbox rules, colour-code with categories, manage Focused Inbox — all work together for complete inbox automation
- 🔄Track inbox changes— delta sync detects new, modified, and deleted emails since your last check, with tokens for incremental polling
- 👥Manage contacts— search your contact book and organisational directory, create and update contact records
- ⚙️Configure settings— set out-of-office auto-replies, working hours, and time zone
- 📬Access shared mailboxes— read team inboxes and service accounts (Microsoft 365)
- 🏢Find meeting rooms— search by building, floor, capacity, AV equipment, and wheelchair accessibility (Microsoft 365)

Export individual emails, search results, or entire conversation threads — usetarget=messageswith a search query (or thequeryshortcut) to batch-export without manually collecting IDs.

Outlook Assistant works with both personal and work/school Microsoft accounts, but some features behave differently:

Note: On personal accounts, Microsoft's$searchAPI has limited support for free-text queries. Outlook Assistant handles this automatically with progressive search — if your query returns no results, it falls back through OData filters, boolean filters, and recent message listing to find your emails. For the most direct results on personal accounts, use the structured filter parameters (from,subject,to,receivedAfter).

- Progressive search— on accounts where Microsoft's$searchAPI is limited, Outlook Assistant automatically falls back through up to 4 search strategies to find your emails. Most Graph API wrappers fail silently; this one adapts.
- Email forensics— raw header access for DKIM, SPF, DMARC, delivery chain, X-Mailer, X-Originating-IP, and spam scores. Returns the full data so you can investigate phishing, audit compliance, or trace delivery issues. (Auto-verdict is on the roadmap; today the data is surfaced and analysed in-conversation.)
- Delta sync— incremental inbox monitoring returns only what changed since your last check, with tokens for continuous polling. Designed for agent workflows that need to watch a mailbox.
- Batch operations— flag, move, export, or categorise multiple emails in a single call. Search-driven export lets you batch-export results without collecting IDs manually.
- Pre-send intelligence— check recipients for out-of-office, full mailbox, delivery restrictions, and moderation status before sending — no other Outlook MCP server offers this.
- Compound automation— rules, categories, folders, and Focused Inbox work together. Set up complete inbox management through your AI assistant in one conversation.

Outlook Assistant is designed with safety-first principles for AI-driven email access:

Send-email protections— Thesend-emailtool includes:

- Pre-send mail tips(checkRecipients: true) — check recipients for out-of-office, mailbox full, delivery restrictions before sending
- Dry-run mode(dryRun: true) — preview composed emails without sending
- Session rate limiting— configurable viaOUTLOOK_MAX_EMAILS_PER_SESSION(default: unlimited)
- Recipient allowlist— restrict sending to approved addresses/domains viaOUTLOOK_ALLOWED_RECIPIENTS

"env": { "OUTLOOK_CLIENT_ID": "…", "OUTLOOK_CLIENT_SECRET": "…", "OUTLOOK_MAX_EMAILS_PER_SESSION": "10", "OUTLOOK_ALLOWED_RECIPIENTS": "your-domain.com,trusted@example.com" }

Draft protections— Thedrafttool sharessend-emailsafety controls: dry-run preview, recipient allowlist, mail-tips validation, and rate limiting. Thesendaction shares thesend-emailrate limit counter, preventing circumvention via the draft-then-send pathway.

Token-optimised architecture— Tools are consolidated using the STRAP (Single Tool, Resource, Action Pattern) approach. 22 tools instead of 55 reduces per-turn overhead by ~11,000 tokens (~64%), keeping more of the AI's context window available for your actual conversation. Fewer tools also means the AI selects the right tool more accurately — research shows tool selection degrades beyond ~40 tools.

Important: These safeguards are defence-in-depth measures that reduce risk, but they are not a guarantee against unintended actions. AI-driven access to your email is inherently sensitive — always review tool calls before approving, particularly for sends and deletes. No automated guardrail is foolproof, and you remain responsible for actions taken through your mailbox.

npm install -g @littlebearapps/outlook-assistant

npm install -g @littlebearapps/outlook-assistant

git clone https://github.com/littlebearapps/outlook-assistant.git cd outlook-assistant npm install

- offline_access— refresh tokens between sessions
- User.Read— basic profile
- Mail.Read,Mail.ReadWrite,Mail.Send— email operations
- Calendars.Read,Calendars.ReadWrite— calendar operations
- Contacts.Read,Contacts.ReadWrite— contact management
- MailboxSettings.ReadWrite— settings, auto-replies, categories
- People.Read— people search

- Mail.Read.Shared— shared mailbox access
- Place.Read.All— meeting room search (requires admin consent)
- Go toCertificates & secrets>New client secret
- Enter a description and select expiration
- ClickAdd
- Copy the secret Value immediately— you won't be able to see it again. Use theValue, not the Secret ID.

OUTLOOK_CLIENT_ID=your-application-client-id OUTLOOK_CLIENT_SECRET=your-client-secret-VALUE USE_TEST_MODE=false

Note:The server also acceptsMS_CLIENT_IDandMS_CLIENT_SECRETfor backwards compatibility.

If installed from source, usenodeinstead ofnpx:

Local email connectivity for AI agents — read, draft, send, and organize Outlook mail via MCP. Apache-2.0 licensed.

A service for managing multiple email accounts from various providers like 163, Gmail, QQ, and Outlook.

Interact with Fastmail email, contacts, and calendar data using the Fastmail API.

Most email MCP servers only read from IMAP. mail-mcp does everything: 30 tools for reading, searching, sending, replying, forwarding, and bulk operations across IMAP, SMTP, Microsoft Graph API, and Exchange Web Services. Multi-account, native OAuth2, built in Rust. Works with Gmail, Microsoft 365, Hotmail/Outlook.com, Zoho, and any standard IMAP/SMTP server.

MCP server for Fastmail — email, contacts, calendars, and files via JMAP, CardDAV, CalDAV, and WebDAV

Zo is your personal vibe server in the cloud with 50+ tools and integrations. Add texting, email, calendar, research and more to your harness easily.

An open-source server that gives AI assistants full access to Fastmail email, calendars, and contacts over JMAP.

Interact with Microsoft Outlook for calendar management, email operations, and search functionality.

Interact with Microsoft 365 services like Outlook, OneDrive, and Teams using the Graph API.