OrgMCP/ docs
Sign up
Documentation
Get started
Connectors
MCP integration
Reference
Enterprise
Misc

Microsoft 365 connector

One connector kind (m365) indexes SharePoint document libraries and OneDrive folders into the knowledge corpus, and exposes live MCP tools to list sites, drives, and folder children. Auth is tenant OAuth only (Entra ID / Microsoft Graph), stored KMS-encrypted in connector_credentials — never on disk or in env vars.

Connect

  1. In the OrgMCP admin console, open Connectors → Microsoft 365 → Connect. Sign in with a work or school account (personal Microsoft accounts are rejected).
  2. An Entra admin must consent Sites.Read.All and Files.Read.All (plus offline_access / User.Read). Then click Test connection.

Ops note: OrgMCP hosts one multitenant Entra app. Platform M365_OAUTH_* is live on staging and production (Connect CTA is enabled). Redirect URIs: https://app.orgmcp.io/api/oauth-tenant/m365/callback and https://staging.app.orgmcp.io/api/oauth-tenant/m365/callback. Operator checklist: docs/RUN-m365-graph.md.

What Test connection proves

Green means the signed-in account can see at least one SharePoint site or drive (including personal OneDrive). 0 sites and 0 drives is Test red — typically missing admin consent or a personal Microsoft account with no work OneDrive.

What gets indexed

  • Two source types on one kind: sharepoint_library and onedrive_folder. Pick a library or folder on the flat Index tab (same surface as Notion / Jira), not a dedicated tree picker.
  • Text, Markdown, PDF, DOCX, and PPTX via the same local extract stack as Drive. No Textract / OCR in v1. XLSX, video, and archives are skipped.
  • Optional ignorePaths prefixes and recursive (default on). Indexing stops at a 1000-file cap and writes a Partial sync warning. Incremental ticks skip the walk when drive/item lastModifiedDateTime is unchanged (6h); a 24h reconcile re-walks.

Honesty

  • m365_diagnose and admin Test show the account, Azure tenant id, site count, drive count, and whether a personal OneDrive exists.
  • A 0-chunk crawl writes an exact emptyReason (empty library, path filter, only binaries, oversized files) — not a generic “check grants” line.
  • The resource lister rethrows API errors; it never swallows them into an empty list.

Live MCP tools

  • m365_list_sites — one Graph page of SharePoint sites.
  • m365_list_drives — document libraries for one site.
  • m365_list_folder — children of a drive folder (root if itemId is omitted).
  • m365_get_item — metadata for one drive item.
  • m365_diagnose — same picture as admin Test connection.

List tools are single-page / bounded. An empty page after page 1 is the end of the list, not a grant problem.

Pricing note

The public pricing PRD still describes SharePoint as a Business-premium add-on. This connector is not gated by that Stripe SKU in v1 — it is a wave2 (Team+) install. An Entra admin must still consent Sites.Read.All and Files.Read.All before Test turns green.