Skip to content

Connectors · Email & messaging

Microsoft 365 Mail MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Microsoft 365 Mail and the rest of your systems. It gives your agent 93 Microsoft 365 Mail actions (46 reads, 35 writes and 12 that wait for a confirmation) and holds the Microsoft 365 Mail credential itself, so the agent never does. It paces Microsoft 365 Mail's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "m365_graph_mail.messages.list",  intent: "check which Microsoft 365 Mail account is connected"}# List messages · read · 1 upstream call
  • 93actionsin one signed file
  • 46readlook, never change
  • 35writecreate and update
  • 12wait for a yesdestructive, confirmed first

Set up

Connect Microsoft 365 Mail in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Microsoft 365 Mail.

    OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.

    • client_idEntra application (client) id
    • client_secretEntra client secret
    • tenant_idYour Microsoft 365 Mail tenant id
    account { op: "connections.requirements", service: "m365_graph_mail" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "m365_graph_mail.messages.list" }# list messages · read · 1 upstream callcheck { action: "m365_graph_mail.messages.reply", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Microsoft 365 Mail at a glance

Sign-in
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide
client_idclient_secret
Setup fields
tenant_id
Limits we pace to
10,000 calls per 10 minutes, per connection
API covered
Microsoft 365 Mail API v1.0graph.microsoft.com/v1.0
Built from
Microsoft 365 Mail's documentation, read 8 September 2026learn.microsoft.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
46 of 46 reads, for up to an hour; a write clears what it affects
Ready-made plans
8 in the store
Shared entities
2, so ask can line Microsoft 365 Mail up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Microsoft 365 Mail.

93 actions in 1 area. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 46readlook, never change
  • 35writecreate and update
  • 12destructivewait for a confirmation
  1. Email

    93

    46 read · 35 write · 12 destructive

    List messages · Forward a message · Reply to a message · Reply to everyone on a message

Top actions

The Microsoft 365 Mail API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 34 of Microsoft 365 Mail's 42 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
m365_graph_mail.messages.listList messagesList messages for a mailbox.readcomm.email.list28 connectors
m365_graph_mail.messages.replyReply to a messageReply to a message and send it immediately.writecomm.email.send32 connectors
m365_graph_mail.message_attachments.listList attachments on a messageList attachments on a message for a mailbox.readcomm.email_attachment.list3 connectors
m365_graph_mail.messages.deleteDelete a messageDelete one message. Graph answers 204 with an empty body.destructivecomm.email.delete15 connectors
m365_graph_mail.folder_message_attachments.listList attachments on a messageList attachments on a message for a mailbox.readcomm.email_attachment.list3 connectors
m365_graph_mail.message_rules.listList inbox rules on a folderList inbox rules on a folder for a mailbox.readcomm.mailbox_rule.list6 connectors
m365_graph_mail.inference_overrides.listList focused inbox overridesList focused inbox overrides for a mailbox.readcomm.mailbox_rule.list6 connectors
m365_graph_mail.messages.createCreate a messageCreate a new message.writecomm.email_draft.create5 connectors
m365_graph_mail.messages.createreplyDraft a reply to a messageDraft a reply to a message.writecomm.email_draft.create5 connectors
m365_graph_mail.messages.get_mail_tipsGet mail tips for addressesAsk whether recipients are out of office, oversized or restricted.readcomm.availability.query5 connectors
m365_graph_mail.mail_folders.copyCopy a mail folderCopy a mail folder and everything inside it.writecomm.email_folder.create4 connectors
m365_graph_mail.mail_folders.listList mail foldersList mail folders for a mailbox.readcomm.email_folder.list4 connectors

Try it

Prompts to paste into Claude.

Each one names the Microsoft 365 Mail actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List messages in Microsoft 365 Mail and tell me what stands out.

    callsm365_graph_mail.messages.list

  2. Planread

    Report on mailbox folders, rules and settings in Microsoft 365 Mail.

    callsm365_graph_mail.messages.countm365_graph_mail.mail_folders.listm365_graph_mail.message_rules.listm365_graph_mail.mailbox_settings.getm365_graph_mail.mailbox_settings.get_auto_reply

  3. Planwrite

    Set up a filing folder, category and inbox rule in Microsoft 365 Mail.

    callsm365_graph_mail.mail_folder_children.createm365_graph_mail.outlook_categories.createm365_graph_mail.message_rules.countm365_graph_mail.message_rules.createm365_graph_mail.message_rules.list

  4. Writewrite

    Reply to a message in Microsoft 365 Mail. Show me exactly what you will send before you save it.

    callsm365_graph_mail.messages.reply

The plan store

Ready-made plans for Microsoft 365 Mail.

8 plans in the store. Install one and your agent runs it by name; the reply says which connections are still missing. A schedule can run a plan on a timetable. There are no triggers or webhooks, by design.

  1. Report on mailbox folders, rules and settings

    Use it when Someone asks what a mailbox looks like right now — its folders, rules, settings and out-of-office state.

    Effect
    read
    Steps
    6
    Needs
    folder id and user id
    Install
    m365_graph_mail-mailbox-health-report
  2. Acknowledge high importance mail and forward it on

    Use it when Urgent inbound mail needs an immediate acknowledgement to the sender and a hand-off to an escalation mailbox.

    Effect
    write
    Steps
    2 · loops
    Needs
    acknowledgement, escalate to, folder id and user id
    Install
    m365_graph_mail-acknowledge-and-forward-escalations
  3. Triage unread messages into a target folder

    Use it when An operator wants unread mail in one Outlook folder swept into another folder and marked read.

    Effect
    write
    Steps
    3 · loops
    Needs
    destination id, folder id and user id
    Install
    m365_graph_mail-triage-unread-inbox-to-folder
  4. Draft a message and send it once approved

    Use it when An agent has composed an email on someone's behalf and a person must approve it before it is actually sent.

    A person decidesSend "subject" from user id to to.

    Effect
    write
    Steps
    5
    Needs
    body, subject, to and user id
    Install
    m365_graph_mail-draft-and-send-with-approval
  5. Set up a filing folder, category and inbox rule

    Use it when A mailbox needs a new filing folder plus the category and inbox rule that route mail into it.

    Effect
    write
    Steps
    5
    Needs
    color, display name, folder id, sender domain and user id
    Install
    m365_graph_mail-onboard-mailbox-filing-rule
  6. Turn on a scheduled out-of-office reply

    Use it when An out-of-office message must be scheduled on a mailbox and the wording needs sign-off before it goes live.

    A person decidesPublish an out-of-office reply on user id from starts at to ends at, visible to external senders.

    Effect
    write
    Steps
    5
    Needs
    ends at, external reply, internal reply, starts at and user id
    Install
    m365_graph_mail-set-vacation-auto-reply
  7. Purge old messages from a folder after approval

    Use it when A retention sweep must delete old mail from a mailbox folder and a person must sign off before anything is destroyed.

    A person decidesPermanently delete count messages from folder folder id in mailbox user id.

    Effect
    destructive
    Steps
    4 · loops
    Needs
    filter, folder id and user id
    Install
    m365_graph_mail-purge-old-mail-with-approval
  8. Remove attachments from one message after review

    Use it when An attachment must be scrubbed from a stored message, for example after something confidential was sent to the wrong mailbox.

    A person decidesPermanently remove count attachments from "subject" in user id.

    Effect
    destructive
    Steps
    5 · loops
    Needs
    message id and user id
    Install
    m365_graph_mail-strip-attachments-after-review
install a plan
account { op: "plans.install", slug: "m365_graph_mail-mailbox-health-report" }
# then ask for it by name; a schedule can run it on a timetable

Governance for Microsoft 365 Mail

Destructive actions wait for a yes.

12 Microsoft 365 Mail actions are destructive. These are all of them:

  • Delete a messagem365_graph_mail.messages.delete
  • Delete a message in a folderm365_graph_mail.folder_messages.delete
  • Permanently delete a messagem365_graph_mail.messages.permanent_delete
  • Delete a message in a child folderm365_graph_mail.child_folder_messages.delete
  • Delete a message attachmentm365_graph_mail.message_attachments.delete
  • Delete a message attachmentm365_graph_mail.folder_message_attachments.delete
  • Delete a message rulem365_graph_mail.message_rules.delete
  • Delete a focused inbox overridem365_graph_mail.inference_overrides.delete
  • Delete a mail folderm365_graph_mail.mail_folders.delete
  • Delete a child mail folderm365_graph_mail.mail_folder_children.delete
  • Permanently delete a mail folderm365_graph_mail.mail_folders.permanent_delete
  • Delete an Outlook categorym365_graph_mail.outlook_categories.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dom365_graph_mail.messages.deleteconfirm_policy: human

Delete a message?

intent: the user asked me to delete a message

run suspended · waiting for a named person · key m365-graph-mail-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "m365-graph-mail-agent",  allowed_actions: ["m365_graph_mail.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "m365_graph_mail.messages.delete", approver: "[email protected]" },    { match: "m365_graph_mail.folder_messages.delete", approver: "[email protected]" },    { match: "m365_graph_mail.messages.permanent_delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Microsoft 365 Mail only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Microsoft 365 Mail costs on actionlake.

Every Microsoft 365 Mail action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Microsoft 365 Mail refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 93 Microsoft 365 Mail actions
  • 93actions pageeach page of a long list is one call
  • 46reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Microsoft 365 Mail action.

93 actions by area: the id your agent calls, what it does, and its effect.

Email93
  • m365_graph_mail.child_folder_messages.countCount messages in a child folderread
  • m365_graph_mail.child_folder_messages.createCreate a message in a child folderwrite
  • m365_graph_mail.child_folder_messages.deleteDelete a message in a child folderdestructive
  • m365_graph_mail.child_folder_messages.getGet a message in a child folderread
  • m365_graph_mail.child_folder_messages.listList messages in a child folderread
  • m365_graph_mail.child_folder_messages.updateUpdate a message in a child folderwrite
  • m365_graph_mail.folder_message_attachments.countCount attachments on a messageread
  • m365_graph_mail.folder_message_attachments.deleteDelete a message attachmentdestructive
  • m365_graph_mail.folder_message_attachments.getGet a message attachmentread
  • m365_graph_mail.folder_message_attachments.listList attachments on a messageread
  • m365_graph_mail.folder_messages.countCount messages in a folderread
  • m365_graph_mail.folder_messages.createCreate a message in a folderwrite
  • m365_graph_mail.folder_messages.deleteDelete a message in a folderdestructive
  • m365_graph_mail.folder_messages.getGet a message in a folderread
  • m365_graph_mail.folder_messages.listList messages in a folderread
  • m365_graph_mail.folder_messages.updateUpdate a message in a folderwrite
  • m365_graph_mail.inference_classification.getGet the focused inbox containerread
  • m365_graph_mail.inference_overrides.countCount focused inbox overridesread
  • m365_graph_mail.inference_overrides.createCreate a focused inbox overridewrite
  • m365_graph_mail.inference_overrides.deleteDelete a focused inbox overridedestructive
  • m365_graph_mail.inference_overrides.getGet a focused inbox overrideread
  • m365_graph_mail.inference_overrides.listList focused inbox overridesread
  • m365_graph_mail.inference_overrides.updateUpdate a focused inbox overridewrite
  • m365_graph_mail.mail_folder_children.countCount child folders of a mail folderread
  • m365_graph_mail.mail_folder_children.createCreate a child mail folderwrite
  • m365_graph_mail.mail_folder_children.deleteDelete a child mail folderdestructive
  • m365_graph_mail.mail_folder_children.getGet a child mail folderread
  • m365_graph_mail.mail_folder_children.listList child folders of a mail folderread
  • m365_graph_mail.mail_folder_children.updateUpdate a child mail folderwrite
  • m365_graph_mail.mail_folder_extended_properties.multi_listList multi-value extended properties on a mail folderread
  • m365_graph_mail.mail_folder_extended_properties.single_listList single-value extended properties on a mail folderread
  • m365_graph_mail.mail_folders.copyCopy a mail folderwrite
  • m365_graph_mail.mail_folders.countCount mail foldersread
  • m365_graph_mail.mail_folders.createCreate a mail folderwrite
  • m365_graph_mail.mail_folders.deleteDelete a mail folderdestructive
  • m365_graph_mail.mail_folders.deltaTrack mail folder changesread
  • m365_graph_mail.mail_folders.getGet a mail folderread
  • m365_graph_mail.mail_folders.listList mail foldersread
  • m365_graph_mail.mail_folders.moveMove a mail folderwrite
  • m365_graph_mail.mail_folders.permanent_deletePermanently delete a mail folderdestructive
  • m365_graph_mail.mail_folders.updateUpdate a mail folderwrite
  • m365_graph_mail.mail_search_folders.createCreate a mail search folderwrite
  • m365_graph_mail.mailbox_settings.getGet mailbox settingsread
  • m365_graph_mail.mailbox_settings.get_auto_replyGet the automatic reply settingread
  • m365_graph_mail.mailbox_settings.set_auto_replySet the automatic replywrite
  • m365_graph_mail.mailbox_settings.updateUpdate mailbox settingswrite
  • m365_graph_mail.message_attachments.countCount attachments on a messageread
  • m365_graph_mail.message_attachments.createAttach a file to a messagewrite
  • m365_graph_mail.message_attachments.create_referenceAttach a link to a messagewrite
  • m365_graph_mail.message_attachments.create_upload_sessionStart a large attachment uploadwrite
  • m365_graph_mail.message_attachments.deleteDelete a message attachmentdestructive
  • m365_graph_mail.message_attachments.getGet a message attachmentread
  • m365_graph_mail.message_attachments.get_rawDownload an attachment's bytesread
  • m365_graph_mail.message_attachments.listList attachments on a messageread
  • m365_graph_mail.message_extended_properties.multi_listList multi-value extended properties on a messageread
  • m365_graph_mail.message_extended_properties.single_listList single-value extended properties on a messageread
  • m365_graph_mail.message_rules.countCount inbox rules on a folderread
  • m365_graph_mail.message_rules.createCreate a message rulewrite
  • m365_graph_mail.message_rules.deleteDelete a message ruledestructive
  • m365_graph_mail.message_rules.getGet a message ruleread
  • m365_graph_mail.message_rules.listList inbox rules on a folderread
  • m365_graph_mail.message_rules.updateUpdate a message rulewrite
  • m365_graph_mail.messages.copyCopy a message into another folderwrite
  • m365_graph_mail.messages.countCount messagesread
  • m365_graph_mail.messages.createCreate a messagewrite
  • m365_graph_mail.messages.createforwardDraft a forward of a messagewrite
  • m365_graph_mail.messages.createreplyDraft a reply to a messagewrite
  • m365_graph_mail.messages.createreplyallDraft a reply to everyone on a messagewrite
  • m365_graph_mail.messages.deleteDelete a messagedestructive
  • m365_graph_mail.messages.deltaTrack message changesread
  • m365_graph_mail.messages.forwardForward a messagewrite
  • m365_graph_mail.messages.getGet a messageread
  • m365_graph_mail.messages.get_mail_tipsGet mail tips for addressesread
  • m365_graph_mail.messages.listList messagesread
  • m365_graph_mail.messages.moveMove a message to another folderwrite
  • m365_graph_mail.messages.permanent_deletePermanently delete a messagedestructive
  • m365_graph_mail.messages.replyReply to a messagewrite
  • m365_graph_mail.messages.replyallReply to everyone on a messagewrite
  • m365_graph_mail.messages.searchSearch a mailboxread
  • m365_graph_mail.messages.send_draftSend a draft messagewrite
  • m365_graph_mail.messages.send_mailSend an emailwrite
  • m365_graph_mail.messages.send_mail_rawSend an email from a raw Graph messagewrite
  • m365_graph_mail.messages.translate_exchange_idsTranslate Exchange item idsread
  • m365_graph_mail.messages.updateUpdate a messagewrite
  • m365_graph_mail.outlook.supported_languagesList supported Outlook languagesread
  • m365_graph_mail.outlook.supported_time_zonesList supported Outlook time zonesread
  • m365_graph_mail.outlook.supported_time_zones_inList supported time zones in a naming standardread
  • m365_graph_mail.outlook_categories.countCount Outlook master categoriesread
  • m365_graph_mail.outlook_categories.createCreate an Outlook categorywrite
  • m365_graph_mail.outlook_categories.deleteDelete an Outlook categorydestructive
  • m365_graph_mail.outlook_categories.getGet an Outlook categoryread
  • m365_graph_mail.outlook_categories.listList Outlook master categoriesread
  • m365_graph_mail.outlook_categories.updateUpdate an Outlook categorywrite

Questions

The Microsoft 365 Mail MCP server, answered.

Is there a Microsoft 365 Mail MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 93 Microsoft 365 Mail actions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Microsoft 365 Mail.

What do I need to connect Microsoft 365 Mail?

Entra application (client) id and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "m365_graph_mail" } lists exactly what to paste.

Can an AI agent delete or change things in Microsoft 365 Mail?

Only if its key allows it, and only with an explicit confirmation. 12 Microsoft 365 Mail actions are destructive, including delete a message, delete a message in a folder and permanently delete a message. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Microsoft 365 Mail API limit?

actionlake paces every call to the limits in the Microsoft 365 Mail service file: 10,000 calls per 10 minutes per connection. Repeated reads are answered from cache (46 Microsoft 365 Mail actions can be), which never reaches Microsoft 365 Mail.

What does a Microsoft 365 Mail action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (93 Microsoft 365 Mail actions page). Cache hits, searches, dry runs and calls Microsoft 365 Mail refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Microsoft 365 Mail API does it cover?

The Microsoft 365 Mail API v1.0 at graph.microsoft.com/v1.0. It is built from Microsoft 365 Mail's documentation as read on 8 September 2026. 93 actions in 1 area, each one in the signed service file (version 1.0.0).

Does actionlake keep my Microsoft 365 Mail data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Microsoft 365 Mail credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Microsoft 365 Mail today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.