Enables AI assistants to seamlessly interact with Microsoft 365 services through the Graph API, featuring super tools, unified search, and intelligent learning.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting on servers with dual-stack network
hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard
Hono vulnerable to arbitrary file access via serveStatic vulnerability
process.env. You'll be asked to provide them before it can run.DASHBOARD_PASSWORD— your-secure-password-hereENABLED_TOOLSFORCE_COLORLOG_FORMATLOG_LEVEL— Logging level / Logging-Level infoMS365_MCP_ANONYMIZE_PII— Anonymize PII in knowledge base storage / PII in Wissensdatenbank anonymisieren trueMS365_MCP_AUTO_QUERY_OPTIMIZATION_ENABLEDMS365_MCP_CALENDAR_DEFAULT_TIMEZONEMS365_MCP_CHAT_MEMORY_ENABLEDMS365_MCP_CHAT_MEMORY_MAX_HISTORYMS365_MCP_CHAT_MEMORY_TTLMS365_MCP_CLIENT_ID— e =your-client-id \MS365_MCP_CLIENT_SECRET— Client secret (confidential apps) / Client-Geheimnis (vertrauliche Apps) -MS365_MCP_CLOUD_TYPE— Cloud environment / Cloud-Umgebung globalMS365_MCP_CORS_EXPOSED_HEADERSMS365_MCP_CORS_HEADERSMS365_MCP_CORS_MAX_AGEMS365_MCP_CORS_METHODSMS365_MCP_CORS_ORIGINMS365_MCP_CORS_ORIGINSMS365_MCP_CSPMS365_MCP_CSP_DASHBOARDMS365_MCP_DEEP_RESEARCH_ITEMS_PER_ITERATIONMS365_MCP_DEEP_RESEARCH_MAX_DEPTHMS365_MCP_ENABLE_DISCOVERY_TOOLSMS365_MCP_ENABLE_SELF_REPAIRMS365_MCP_FAST_MODEMS365_MCP_FORCE_WORK_SCOPESMS365_MCP_GRAPH_MAX_RETRIESMS365_MCP_GRAPH_REQUEST_TIMEOUT_MSMS365_MCP_GRAPH_RETRY_MAX_DELAY_MSMS365_MCP_HSTS_MAX_AGEMS365_MCP_INTENT_ENTITY_FILTERMS365_MCP_KEYVAULT_URL— Azure Key Vault URL -MS365_MCP_KNOWLEDGE_BASE_PATHMS365_MCP_LEARNING_CLUSTER_ENABLEDMS365_MCP_LEARNING_CLUSTER_THRESHOLDMS365_MCP_LEARNING_DECAY_DAYSMS365_MCP_LEARNING_DECAY_FACTORMS365_MCP_LEARNING_ENABLEDMS365_MCP_LEARNING_NLP_ENABLEDMS365_MCP_MAX_AGGREGATE_ITEMSMS365_MCP_MAX_CONCURRENT_TOOLSMS365_MCP_MAX_PAGESMS365_MCP_MAX_QUERY_VARIANTSMS365_MCP_MAX_REPAIR_ATTEMPTSMS365_MCP_MAX_RESEARCH_ITERATIONSMS365_MCP_MAX_RESPONSE_CHARSMS365_MCP_MAX_RESULTS— Maximum search results / Maximale Suchergebnisse 500MS365_MCP_MIN_RELEVANCEMS365_MCP_MULTIQUERY_TIMEOUTMS365_MCP_OAUTH_TOKEN— e =your_token \MS365_MCP_ORG_MODE— Enable organization mode / Organisationsmodus aktivieren falseMS365_MCP_OUTPUT_FORMAT— Output format (json/toon) / Ausgabeformat (json/toon) jsonMS365_MCP_PATTERN_LEARNING_ENABLEDMS365_MCP_PATTERN_MIN_COUNTMS365_MCP_PERMISSIONS_POLICYMS365_MCP_QUERY_DECOMPOSITION_ENABLEDMS365_MCP_QUERY_OPTIMIZATION_CONFIDENCE_THRESHOLDMS365_MCP_QUERY_OPTIMIZATION_MIN_PATTERN_COUNTMS365_MCP_RATE_LIMIT_MAX_REQUESTSMS365_MCP_RATE_LIMIT_WINDOW_MSMS365_MCP_READ_ONLYMS365_MCP_REFERRER_POLICYMS365_MCP_REPAIR_STRATEGIESMS365_MCP_RESPONSE_ENVELOPEMS365_MCP_RESPONSE_FORMATMS365_MCP_RESPONSE_SUMMARY_FIRSTMS365_MCP_SEARCH_CROSS_LANGUAGEMS365_MCP_SEARCH_DEFAULT_ENTITY_TYPESMS365_MCP_SEARCH_INTELLIGENT_MERGEMS365_MCP_SEARCH_LEARNED_VARIANTSMS365_MCP_SEARCH_MAX_CANDIDATESMS365_MCP_SEARCH_MAX_SYNONYM_VARIANTSMS365_MCP_SEARCH_PARALLEL_MERGE_COUNTMS365_MCP_SEARCH_SIMPLIFIED_FALLBACKMS365_MCP_SEARCH_SYNONYM_MERGE_THRESHOLDMS365_MCP_SEARCH_USE_OR_QUERYMS365_MCP_STOP_ON_ERRORMS365_MCP_TENANT_ID— e =your-tenant-id \MS365_MCP_THINKING_ENABLEDMS365_MCP_THINKING_LEVELMS365_MCP_X_FRAME_OPTIONSNO_COLORQUERY_STORE_DIRQUERY_STORE_MAX_QUERIESQUERY_STORE_RETENTION_DAYSREAD_ONLY— English: All Super-Tools respect the environment variable. Write operations (send, create, update, delete) are automatically blocked with clear error messages when read-only mode is enabled.SILENT— Disable console output / Konsolenausgabe deaktivieren falseTRUST_PROXY_COUNT[](https://m8ven.ai/mcp/michelfritzschjoin-join-ms-365-mcp-server-122j45)