Microsoft 365 and AI: Is there an MCP server for Microsoft 365?
Work IQ MCP reads mail, calendars, files and Teams chats. Changes stay blocked until an admin allows them.
Microsoft 365 and AI at a glance
| Official MCP server | Yes, Work IQ MCP, generally available according to Microsoft |
|---|---|
| Community MCP server | Yes, for example Softeria/ms-365-mcp-server |
| Interface | Microsoft Graph (REST) with Microsoft Entra ID |
| AI in the product | Microsoft 365 Copilot, no training of foundation models on customer data |
| Vendor | Microsoft Office and collaboration |
Status: October 2026. Checked against the vendor’s own sources, listed below.
Microsoft 365 combines Outlook, Teams, SharePoint, OneDrive and the Office apps. If you want an AI assistant to work with mail, appointments and documents, the first question is: is there an MCP server for it?
In short
Yes. Microsoft offers an official MCP server called Work IQ MCP. Among other things, it reads mail, calendars, files and Teams chats. Changes are blocked by default.
What Microsoft offers itself
Work IQ MCP. According to Microsoft, the server makes Microsoft 365 data available to AI agents through MCP. The tools work with Microsoft Graph paths, for example to read mail, create an appointment or fetch Teams messages. Sign-in uses Microsoft Entra ID. According to the tool reference, a tenant policy blocks changes by default. Administrators enable create, update, delete and actions on purpose. According to the Agent 365 docs, Work IQ MCP is generally available as part of the Work IQ API.
Microsoft Graph. The Graph API is the REST interface to the data in Microsoft 365. You register apps in Microsoft Entra ID.
AI in the product. According to Microsoft, prompts, responses and data accessed through Graph are not used to train foundation models. Copilot shows only data the user may at least view. For users in the EU, the EU Data Boundary applies. For Anthropic models as a subprocessor, Microsoft points to a separate page.
What the community offers
Softeria/ms-365-mcp-server builds on Microsoft Graph and, according to its README, has a read-only mode and a filter for single tools.
What this means for your company
- Copilot shows everything a user may see. Clean up overly broad sharing in SharePoint and Teams first.
- Enable write access only for the actions you really need, for example appointments but not mail.
- What reaches the AI assistant falls under its terms, no longer under Microsoft’s.
Sources
- Microsoft Learn: Work IQ MCP overview
- Microsoft Learn: Work IQ MCP tool reference
- Microsoft Learn: Agent 365 tooling servers
- Microsoft Learn: Data, privacy and security for Microsoft 365 Copilot
- Microsoft Learn: Microsoft Graph
- GitHub: Softeria/ms-365-mcp-server
What an MCP server is and how we build one: MCP servers by dectria
FAQ
Questions about Microsoft 365 and AI
Is there an MCP server for Microsoft 365?
May the assistant change anything in Microsoft 365?
Does Microsoft train on our data?
Microsoft 365 has an MCP server.
We help you roll it out safely.
Which assistants are allowed, which rights they get, what they may change, and how this fits your data protection.
Discuss the rollout