--- title: "Microsoft 365 Mail MCP server for AI agents - actionlake" description: "Give Claude 93 Microsoft 365 Mail actions through one MCP server: messages. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/microsoft-365-mail updated: 2026-09-21 --- Connectors · Email & messaging # Microsoft 365 Mail MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Microsoft 365 Mail and the rest of your systems. It gives your agent 93 Microsoft 365 Mail actions (46 reads, 35 writes and 12 that wait for a confirmation) and holds the Microsoft 365 Mail credential itself, so the agent never does. It paces Microsoft 365 Mail's limits and records every call. [Connect Microsoft 365 Mail free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "m365_graph_mail.messages.list", intent: "check which Microsoft 365 Mail account is connected" } # List messages · read · 1 upstream call ``` - 93 actions in one signed file - 46 read look, never change - 35 write create and update - 12 wait for a yes destructive, confirmed first Set up ## Connect Microsoft 365 Mail in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Microsoft 365 Mail. OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Entra application (client) id - `client_secret` Entra client secret - `tenant_id` Your Microsoft 365 Mail tenant id ``` account { op: "connections.requirements", service: "m365_graph_mail" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "m365_graph_mail.messages.list" } # list messages · read · 1 upstream call check { action: "m365_graph_mail.messages.reply", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Microsoft 365 Mail at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Setup fields** `tenant_id` **Limits we pace to** 10,000 calls per 10 minutes, per connection **API covered** Microsoft 365 Mail API v1.0`graph.microsoft.com/v1.0` **Built from** Microsoft 365 Mail's documentation, read 8 September 2026[learn.microsoft.com](https://learn.microsoft.com/en-us/graph/api/overview) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 46 of 46 reads, for up to an hour; a write clears what it affects **Ready-made plans** 8 in the store **Shared entities** 2, so ask can line Microsoft 365 Mail up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Microsoft 365 Mail. 93 actions in 1 area. Every one carries its effect, so a key can allow the reads and hold the rest. - **46** read look, never change - **35** write create and update - **12** destructive wait for a confirmation 1. ### Email 93 46 read · 35 write · 12 destructive List messages · Forward a message · Reply to a message · Reply to everyone on a message Top actions ## The Microsoft 365 Mail API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 34 of Microsoft 365 Mail's 42 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `m365_graph_mail.messages.list` List messages | List messages for a mailbox. | read | `comm.email.list` 28 connectors | | `m365_graph_mail.messages.reply` Reply to a message | Reply to a message and send it immediately. | write | `comm.email.send` 32 connectors | | `m365_graph_mail.message_attachments.list` List attachments on a message | List attachments on a message for a mailbox. | read | `comm.email_attachment.list` 3 connectors | | `m365_graph_mail.messages.delete` Delete a message | Delete one message. Graph answers 204 with an empty body. | destructive | `comm.email.delete` 15 connectors | | `m365_graph_mail.folder_message_attachments.list` List attachments on a message | List attachments on a message for a mailbox. | read | `comm.email_attachment.list` 3 connectors | | `m365_graph_mail.message_rules.list` List inbox rules on a folder | List inbox rules on a folder for a mailbox. | read | `comm.mailbox_rule.list` 6 connectors | | `m365_graph_mail.inference_overrides.list` List focused inbox overrides | List focused inbox overrides for a mailbox. | read | `comm.mailbox_rule.list` 6 connectors | | `m365_graph_mail.messages.create` Create a message | Create a new message. | write | `comm.email_draft.create` 5 connectors | | `m365_graph_mail.messages.createreply` Draft a reply to a message | Draft a reply to a message. | write | `comm.email_draft.create` 5 connectors | | `m365_graph_mail.messages.get_mail_tips` Get mail tips for addresses | Ask whether recipients are out of office, oversized or restricted. | read | `comm.availability.query` 5 connectors | | `m365_graph_mail.mail_folders.copy` Copy a mail folder | Copy a mail folder and everything inside it. | write | `comm.email_folder.create` 4 connectors | | `m365_graph_mail.mail_folders.list` List mail folders | List mail folders for a mailbox. | read | `comm.email_folder.list` 4 connectors | Try it ## Prompts to paste into Claude. Each one names the Microsoft 365 Mail actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List messages in Microsoft 365 Mail and tell me what stands out. calls `m365_graph_mail.messages.list` 2. Plan read Report on mailbox folders, rules and settings in Microsoft 365 Mail. calls `m365_graph_mail.messages.count` `m365_graph_mail.mail_folders.list` `m365_graph_mail.message_rules.list` `m365_graph_mail.mailbox_settings.get` `m365_graph_mail.mailbox_settings.get_auto_reply` 3. Plan write Set up a filing folder, category and inbox rule in Microsoft 365 Mail. calls `m365_graph_mail.mail_folder_children.create` `m365_graph_mail.outlook_categories.create` `m365_graph_mail.message_rules.count` `m365_graph_mail.message_rules.create` `m365_graph_mail.message_rules.list` 4. Write write Reply to a message in Microsoft 365 Mail. Show me exactly what you will send before you save it. calls `m365_graph_mail.messages.reply` The plan store ## Ready-made plans for Microsoft 365 Mail. 8 plans in the store. Install one and your agent runs it by name; the reply says which connections are still missing. A schedule can run a plan on a timetable. There are no triggers or webhooks, by design. 1. ### Report on mailbox folders, rules and settings Use it when Someone asks what a mailbox looks like right now — its folders, rules, settings and out-of-office state. **Effect** read **Steps** 6 **Needs** folder id and user id **Install** `m365_graph_mail-mailbox-health-report` 2. ### Acknowledge high importance mail and forward it on Use it when Urgent inbound mail needs an immediate acknowledgement to the sender and a hand-off to an escalation mailbox. **Effect** write **Steps** 2 · loops **Needs** acknowledgement, escalate to, folder id and user id **Install** `m365_graph_mail-acknowledge-and-forward-escalations` 3. ### Triage unread messages into a target folder Use it when An operator wants unread mail in one Outlook folder swept into another folder and marked read. **Effect** write **Steps** 3 · loops **Needs** destination id, folder id and user id **Install** `m365_graph_mail-triage-unread-inbox-to-folder` 4. ### Draft a message and send it once approved Use it when An agent has composed an email on someone's behalf and a person must approve it before it is actually sent. A person decides Send "_subject_" from _user id_ to _to_. **Effect** write **Steps** 5 **Needs** body, subject, to and user id **Install** `m365_graph_mail-draft-and-send-with-approval` 5. ### Set up a filing folder, category and inbox rule Use it when A mailbox needs a new filing folder plus the category and inbox rule that route mail into it. **Effect** write **Steps** 5 **Needs** color, display name, folder id, sender domain and user id **Install** `m365_graph_mail-onboard-mailbox-filing-rule` 6. ### Turn on a scheduled out-of-office reply Use it when An out-of-office message must be scheduled on a mailbox and the wording needs sign-off before it goes live. A person decides Publish an out-of-office reply on _user id_ from _starts at_ to _ends at_, visible to external senders. **Effect** write **Steps** 5 **Needs** ends at, external reply, internal reply, starts at and user id **Install** `m365_graph_mail-set-vacation-auto-reply` 7. ### Purge old messages from a folder after approval Use it when A retention sweep must delete old mail from a mailbox folder and a person must sign off before anything is destroyed. A person decides Permanently delete _count_ messages from folder _folder id_ in mailbox _user id_. **Effect** destructive **Steps** 4 · loops **Needs** filter, folder id and user id **Install** `m365_graph_mail-purge-old-mail-with-approval` 8. ### Remove attachments from one message after review Use it when An attachment must be scrubbed from a stored message, for example after something confidential was sent to the wrong mailbox. A person decides Permanently remove _count_ attachments from "_subject_" in _user id_. **Effect** destructive **Steps** 5 · loops **Needs** message id and user id **Install** `m365_graph_mail-strip-attachments-after-review` install a plan ``` account { op: "plans.install", slug: "m365_graph_mail-mailbox-health-report" } # then ask for it by name; a schedule can run it on a timetable ``` Governance for Microsoft 365 Mail ## Destructive actions wait for a yes. 12 Microsoft 365 Mail actions are destructive. These are all of them: - Delete a message `m365_graph_mail.messages.delete` - Delete a message in a folder `m365_graph_mail.folder_messages.delete` - Permanently delete a message `m365_graph_mail.messages.permanent_delete` - Delete a message in a child folder `m365_graph_mail.child_folder_messages.delete` - Delete a message attachment `m365_graph_mail.message_attachments.delete` - Delete a message attachment `m365_graph_mail.folder_message_attachments.delete` - Delete a message rule `m365_graph_mail.message_rules.delete` - Delete a focused inbox override `m365_graph_mail.inference_overrides.delete` - Delete a mail folder `m365_graph_mail.mail_folders.delete` - Delete a child mail folder `m365_graph_mail.mail_folder_children.delete` - Permanently delete a mail folder `m365_graph_mail.mail_folders.permanent_delete` - Delete an Outlook category `m365_graph_mail.outlook_categories.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do m365_graph_mail.messages.delete confirm_policy: **human** Delete a message? **intent:** the user asked me to delete a message run suspended · waiting for a named person · key _m365-graph-mail-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "m365-graph-mail-agent", allowed_actions: ["m365_graph_mail.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "m365_graph_mail.messages.delete", approver: "lead@example.com" }, { match: "m365_graph_mail.folder_messages.delete", approver: "lead@example.com" }, { match: "m365_graph_mail.messages.permanent_delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Microsoft 365 Mail only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Microsoft 365 Mail costs on actionlake. Every Microsoft 365 Mail action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Microsoft 365 Mail refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 93 Microsoft 365 Mail actions - 93 actions page each page of a long list is one call - 46 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Microsoft 365 Mail action. 93 actions by area: the id your agent calls, what it does, and its effect. **Email 93** - `m365_graph_mail.child_folder_messages.count` Count messages in a child folder read - `m365_graph_mail.child_folder_messages.create` Create a message in a child folder write - `m365_graph_mail.child_folder_messages.delete` Delete a message in a child folder destructive - `m365_graph_mail.child_folder_messages.get` Get a message in a child folder read - `m365_graph_mail.child_folder_messages.list` List messages in a child folder read - `m365_graph_mail.child_folder_messages.update` Update a message in a child folder write - `m365_graph_mail.folder_message_attachments.count` Count attachments on a message read - `m365_graph_mail.folder_message_attachments.delete` Delete a message attachment destructive - `m365_graph_mail.folder_message_attachments.get` Get a message attachment read - `m365_graph_mail.folder_message_attachments.list` List attachments on a message read - `m365_graph_mail.folder_messages.count` Count messages in a folder read - `m365_graph_mail.folder_messages.create` Create a message in a folder write - `m365_graph_mail.folder_messages.delete` Delete a message in a folder destructive - `m365_graph_mail.folder_messages.get` Get a message in a folder read - `m365_graph_mail.folder_messages.list` List messages in a folder read - `m365_graph_mail.folder_messages.update` Update a message in a folder write - `m365_graph_mail.inference_classification.get` Get the focused inbox container read - `m365_graph_mail.inference_overrides.count` Count focused inbox overrides read - `m365_graph_mail.inference_overrides.create` Create a focused inbox override write - `m365_graph_mail.inference_overrides.delete` Delete a focused inbox override destructive - `m365_graph_mail.inference_overrides.get` Get a focused inbox override read - `m365_graph_mail.inference_overrides.list` List focused inbox overrides read - `m365_graph_mail.inference_overrides.update` Update a focused inbox override write - `m365_graph_mail.mail_folder_children.count` Count child folders of a mail folder read - `m365_graph_mail.mail_folder_children.create` Create a child mail folder write - `m365_graph_mail.mail_folder_children.delete` Delete a child mail folder destructive - `m365_graph_mail.mail_folder_children.get` Get a child mail folder read - `m365_graph_mail.mail_folder_children.list` List child folders of a mail folder read - `m365_graph_mail.mail_folder_children.update` Update a child mail folder write - `m365_graph_mail.mail_folder_extended_properties.multi_list` List multi-value extended properties on a mail folder read - `m365_graph_mail.mail_folder_extended_properties.single_list` List single-value extended properties on a mail folder read - `m365_graph_mail.mail_folders.copy` Copy a mail folder write - `m365_graph_mail.mail_folders.count` Count mail folders read - `m365_graph_mail.mail_folders.create` Create a mail folder write - `m365_graph_mail.mail_folders.delete` Delete a mail folder destructive - `m365_graph_mail.mail_folders.delta` Track mail folder changes read - `m365_graph_mail.mail_folders.get` Get a mail folder read - `m365_graph_mail.mail_folders.list` List mail folders read - `m365_graph_mail.mail_folders.move` Move a mail folder write - `m365_graph_mail.mail_folders.permanent_delete` Permanently delete a mail folder destructive - `m365_graph_mail.mail_folders.update` Update a mail folder write - `m365_graph_mail.mail_search_folders.create` Create a mail search folder write - `m365_graph_mail.mailbox_settings.get` Get mailbox settings read - `m365_graph_mail.mailbox_settings.get_auto_reply` Get the automatic reply setting read - `m365_graph_mail.mailbox_settings.set_auto_reply` Set the automatic reply write - `m365_graph_mail.mailbox_settings.update` Update mailbox settings write - `m365_graph_mail.message_attachments.count` Count attachments on a message read - `m365_graph_mail.message_attachments.create` Attach a file to a message write - `m365_graph_mail.message_attachments.create_reference` Attach a link to a message write - `m365_graph_mail.message_attachments.create_upload_session` Start a large attachment upload write - `m365_graph_mail.message_attachments.delete` Delete a message attachment destructive - `m365_graph_mail.message_attachments.get` Get a message attachment read - `m365_graph_mail.message_attachments.get_raw` Download an attachment's bytes read - `m365_graph_mail.message_attachments.list` List attachments on a message read - `m365_graph_mail.message_extended_properties.multi_list` List multi-value extended properties on a message read - `m365_graph_mail.message_extended_properties.single_list` List single-value extended properties on a message read - `m365_graph_mail.message_rules.count` Count inbox rules on a folder read - `m365_graph_mail.message_rules.create` Create a message rule write - `m365_graph_mail.message_rules.delete` Delete a message rule destructive - `m365_graph_mail.message_rules.get` Get a message rule read - `m365_graph_mail.message_rules.list` List inbox rules on a folder read - `m365_graph_mail.message_rules.update` Update a message rule write - `m365_graph_mail.messages.copy` Copy a message into another folder write - `m365_graph_mail.messages.count` Count messages read - `m365_graph_mail.messages.create` Create a message write - `m365_graph_mail.messages.createforward` Draft a forward of a message write - `m365_graph_mail.messages.createreply` Draft a reply to a message write - `m365_graph_mail.messages.createreplyall` Draft a reply to everyone on a message write - `m365_graph_mail.messages.delete` Delete a message destructive - `m365_graph_mail.messages.delta` Track message changes read - `m365_graph_mail.messages.forward` Forward a message write - `m365_graph_mail.messages.get` Get a message read - `m365_graph_mail.messages.get_mail_tips` Get mail tips for addresses read - `m365_graph_mail.messages.list` List messages read - `m365_graph_mail.messages.move` Move a message to another folder write - `m365_graph_mail.messages.permanent_delete` Permanently delete a message destructive - `m365_graph_mail.messages.reply` Reply to a message write - `m365_graph_mail.messages.replyall` Reply to everyone on a message write - `m365_graph_mail.messages.search` Search a mailbox read - `m365_graph_mail.messages.send_draft` Send a draft message write - `m365_graph_mail.messages.send_mail` Send an email write - `m365_graph_mail.messages.send_mail_raw` Send an email from a raw Graph message write - `m365_graph_mail.messages.translate_exchange_ids` Translate Exchange item ids read - `m365_graph_mail.messages.update` Update a message write - `m365_graph_mail.outlook.supported_languages` List supported Outlook languages read - `m365_graph_mail.outlook.supported_time_zones` List supported Outlook time zones read - `m365_graph_mail.outlook.supported_time_zones_in` List supported time zones in a naming standard read - `m365_graph_mail.outlook_categories.count` Count Outlook master categories read - `m365_graph_mail.outlook_categories.create` Create an Outlook category write - `m365_graph_mail.outlook_categories.delete` Delete an Outlook category destructive - `m365_graph_mail.outlook_categories.get` Get an Outlook category read - `m365_graph_mail.outlook_categories.list` List Outlook master categories read - `m365_graph_mail.outlook_categories.update` Update an Outlook category write Questions ## The Microsoft 365 Mail MCP server, answered. **Is there a Microsoft 365 Mail MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 93 Microsoft 365 Mail actions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Microsoft 365 Mail. **What do I need to connect Microsoft 365 Mail?** Entra application (client) id and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "m365_graph_mail" } lists exactly what to paste. **Can an AI agent delete or change things in Microsoft 365 Mail?** Only if its key allows it, and only with an explicit confirmation. 12 Microsoft 365 Mail actions are destructive, including delete a message, delete a message in a folder and permanently delete a message. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Microsoft 365 Mail API limit?** actionlake paces every call to the limits in the Microsoft 365 Mail service file: 10,000 calls per 10 minutes per connection. Repeated reads are answered from cache (46 Microsoft 365 Mail actions can be), which never reaches Microsoft 365 Mail. **What does a Microsoft 365 Mail action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (93 Microsoft 365 Mail actions page). Cache hits, searches, dry runs and calls Microsoft 365 Mail refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Microsoft 365 Mail API does it cover?** The Microsoft 365 Mail API v1.0 at graph.microsoft.com/v1.0. It is built from Microsoft 365 Mail's documentation as read on 8 September 2026. 93 actions in 1 area, each one in the signed service file (version 1.0.0). **Does actionlake keep my Microsoft 365 Mail data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Microsoft 365 Mail credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Microsoft 365 Mail Shares the most action names with - [Gmail 19](https://actionlake.com/connectors/gmail) - [Nylas 14](https://actionlake.com/connectors/nylas) - [Mailgun 10](https://actionlake.com/connectors/mailgun) - [MailerSend 8](https://actionlake.com/connectors/mailersend) - [Resend 7](https://actionlake.com/connectors/resend) - [Mailtrap 4](https://actionlake.com/connectors/mailtrap) Joins with, on shared entities - [HubSpot CRM 1](https://actionlake.com/connectors/hubspot-crm) - [Microsoft Dynamics 365 1](https://actionlake.com/connectors/microsoft-dynamics-365) - [Close 1](https://actionlake.com/connectors/close) - [Instantly 1](https://actionlake.com/connectors/instantly) - [Salesloft 1](https://actionlake.com/connectors/salesloft) - [Salesforce Service Cloud 1](https://actionlake.com/connectors/salesforce-service-cloud) Browse - [All Email & messaging connectors](https://actionlake.com/connectors/category/email-and-messaging) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Microsoft 365 Mail; the name is the vendor's own. Counts are from the Microsoft 365 Mail service file, version 1.0.0. ## Give your agent Microsoft 365 Mail today. [Connect Microsoft 365 Mail free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/microsoft-365-mail More: https://actionlake.com/llms.txt