Clye Microsoft 365 MCP Server
Hosted MCP bridge for Microsoft Graph with OAuth 2.1 sign-in.
Status
Server is running.
Build your MCP URL
Choose whether this connection should expose personal-only tools or the full organization-aware toolset, then optionally narrow it further with feature presets.
This hosted instance is running with org mode enabled. Turn it off if you want a smaller personal-only toolset for a given connection.
URL parameters
orgMode |
Boolean flag. Use true to expose organization-aware tools, or false to limit the connection to the personal/non-org toolset. Accepted values include true/false and 1/0.
|
|---|---|
readOnly |
Boolean flag. Use true to hide write operations and force a safer read-only toolset. Accepted values include true/false and 1/0. If the server was started in read-only mode, this parameter cannot disable it.
|
features |
Optional comma-separated list of feature presets. Supported values: mail, calendar, files, personal, work, sharepoint, excel, contacts, tasks, onenote, search, users, and all. Presets like work, sharepoint, and users require orgMode=true. Unknown names are ignored.
|
authMode |
Optional auth mode for this connection. delegated (default) uses interactive Microsoft login with the hosted app. client_credentials enables app-only access using your Azure app Client ID and Client Secret from the MCP client's OAuth dialog (never put the secret in the URL). byo uses your own Entra app for interactive login. Requires tenantId for client_credentials.
|
tenantId |
Azure AD / Entra tenant GUID. Required when authMode=client_credentials. Do not put Client Secrets in the URL.
|
site / siteUrl / siteId |
Optional SharePoint site scope for this connection. Accepts a site URL (e.g. https://contoso.sharepoint.com/sites/Marketing) or a Graph site-id (composite id or hostname:/path). Aliases: site, siteUrl, siteId, sharepointSite. When set, SharePoint tools only return data for that site; tenant-wide site search is rewritten to the scoped site.
|
Full hosted capability
https://dev.ms-365.mcp.clye.ai/mcp?orgMode=true&readOnly=false&features=all
Personal-only mail + calendar
https://dev.ms-365.mcp.clye.ai/mcp?orgMode=false&readOnly=true&features=mail,calendar
SharePoint-only connection
https://dev.ms-365.mcp.clye.ai/mcp?orgMode=true&readOnly=false&features=sharepoint
SharePoint limited to one site (URL)
https://dev.ms-365.mcp.clye.ai/mcp?orgMode=true&features=sharepoint&site=https%3A%2F%2Fcontoso.sharepoint.com%2Fsites%2FMarketing
App-only / service principal (secret in OAuth dialog)
https://dev.ms-365.mcp.clye.ai/mcp?orgMode=true&readOnly=false&features=sharepoint&authMode=client_credentials&tenantId=YOUR_TENANT_ID
In the MCP client OAuth dialog set Client ID and Client Secret to your Azure app registration. Never put the secret in the URL.
Own Entra app (BYO) + interactive login
https://dev.ms-365.mcp.clye.ai/mcp?orgMode=true&readOnly=false&features=sharepoint&authMode=byo&tenantId=YOUR_TENANT_ID
Register redirect URI https://dev.ms-365.mcp.clye.ai/oauth/callback on your Azure app. Enter Client ID and Secret in the OAuth dialog.
Org mode with files + Excel + work tools
https://dev.ms-365.mcp.clye.ai/mcp?orgMode=true&readOnly=false&features=files,excel,work
Shorthand server default
https://dev.ms-365.mcp.clye.ai/mcp
The generated URL above keeps parameters explicit so you can copy/paste a fully configured connection.
Connecting from an MCP client
Add the generated URL as a remote MCP server in your AI Hub or any other MCP-compatible client.
The client handles OAuth automatically. For default mode, users sign in with Microsoft. For authMode=client_credentials or byo, enter your Azure Client ID and Client Secret in the client's OAuth dialog (not in the URL).
OAuth discovery
https://dev.ms-365.mcp.clye.ai/.well-known/oauth-authorization-server
https://dev.ms-365.mcp.clye.ai/.well-known/oauth-protected-resource
Standard OAuth request parameters on /authorize are managed by the MCP client automatically, so most users only need the MCP URL above.