Microsoft 365 Admin

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-05-21T17:43:06.345122Z",
      "publishedAt": "2026-05-21T17:43:06.345122Z",
      "statusChangedAt": "2026-05-21T17:43:06.345122Z"
    }
  },
  "server": {
    "name": "io.github.okapi-ca/ms-365-admin",
    "_meta": {
      "io.modelcontextprotocol.registry/publisher-provided": {
        "tags": [
          "microsoft-365",
          "azure-ad",
          "entra-id",
          "graph-api",
          "intune",
          "defender",
          "conditional-access",
          "secure-score",
          "incident-response"
        ],
        "categories": [
          "security",
          "identity",
          "device-management",
          "audit",
          "compliance"
        ]
      }
    },
    "title": "Microsoft 365 Admin",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.6.3",
    "packages": [
      {
        "version": "0.6.3",
        "transport": {
          "type": "stdio"
        },
        "identifier": "@okapi-ca/ms-365-admin-mcp-server",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "MS365_ADMIN_MCP_TENANT_ID",
            "isRequired": true,
            "description": "Azure AD tenant ID (specific GUID, not 'common')."
          },
          {
            "name": "MS365_ADMIN_MCP_CLIENT_ID",
            "isRequired": true,
            "description": "App registration client ID with the required application permissions."
          },
          {
            "name": "MS365_ADMIN_MCP_CLIENT_SECRET",
            "isSecret": true,
            "isRequired": true,
            "description": "App registration client secret. Prefer Azure Key Vault via MS365_ADMIN_MCP_KEYVAULT_URL for production."
          },
          {
            "name": "MS365_ADMIN_MCP_KEYVAULT_URL",
            "description": "Optional Azure Key Vault URL. When set, secrets are pulled from the vault and override the env-var values above."
          },
          {
            "name": "MS365_ADMIN_MCP_CLOUD_TYPE",
            "description": "Cloud environment: 'global' (default) or 'china' (21Vianet)."
          },
          {
            "name": "MS365_ADMIN_MCP_MAX_TOP",
            "description": "Cap on the $top query parameter to limit result size."
          },
          {
            "name": "READ_ONLY",
            "description": "Set to 'true' or '1' to force read-only mode (default behavior; mutations require --allow-writes)."
          },
          {
            "name": "ENABLED_TOOLS",
            "description": "Regex to filter the catalog of available tools."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/okapi-ca/ms-365-admin-mcp-server",
      "source": "github"
    },
    "websiteUrl": "https://github.com/okapi-ca/ms-365-admin-mcp-server",
    "description": "Microsoft 365 administration via Graph API application permissions (read-only by default)."
  }
}