mcp-outlook-desktop

mcp-outlook-desktop

Enables AI assistants to securely read, search, draft, and send Outlook emails, manage calendar events, and access mailbox folders through a local MAPI connection to Windows Outlook, with human-in-the-loop safeguards.

Category
Visit Server

README

Microsoft Outlook MCP Server for Claude & Antigravity (AGY)

PyPI CI

A high-performance Model Context Protocol (MCP) server providing direct, secure access to your Microsoft 365 Outlook emails, calendar, and contacts from:

  • Claude Code CLI
  • Claude Desktop
  • Antigravity CLI (AGY)

🖥️ Live Terminal Demo

> claude "Check my unread emails and prepare a draft follow-up to Alex about tomorrow's sync"

⚡ Calling Tool: outlook_list_messages(folder="inbox", unread_only=True, top=5)
✔ Found 2 unread messages:
  [1] From: Alex Mercer <alex@company.com> | Subject: Agenda for Q3 Planning Sync
  [2] From: Cloud Alerts <alerts@infra.io> | Subject: Weekly Node Health Report

⚡ Calling Tool: outlook_get_message(message_id="MSG_049281")
✔ Retrieved message safely encapsulated in <untrusted_email_body_content> boundary.

⚡ Calling Tool: outlook_create_draft(
    to_recipients=["alex@company.com"],
    subject="Re: Agenda for Q3 Planning Sync",
    body="Hi Alex,\n\nThanks for sending over the agenda. I reviewed the distributed queue items and added notes for tomorrow's sync.\n\nBest,\nJosh"
)
✔ Draft created successfully in Outlook Drafts folder (ID: DRAFT_839120)
  [Human-in-the-Loop Safe]: The draft is ready in your Outlook app for review before sending.

🔒 Privacy & Security Architecture

  • Human-in-the-Loop by Design: All outbound message drafting defaults to your Outlook Drafts folder for manual review. Direct unreviewed sends (outlook_send_mail) require an explicit confirm_send=True flag to prevent accidental dispatches.
  • Indirect Prompt Injection Defense: Incoming email bodies are encapsulated in <untrusted_email_body_content> XML tags to ensure AI models parse external content strictly as passive data.
  • Zero Cloud Tokens / No Passwords: Connects 100% locally to your running Windows Outlook Desktop application via Windows MAPI (win32com).
  • Strict .gitignore: All local configs, caches, and environments are ignored.

🚀 Installation & Quickstart

Method 1: Instant Run with uvx (No git clone needed)

If you have uv installed, you can run the server directly:

uvx mcp-outlook-desktop

Claude Desktop Configuration (%APPDATA%\Claude\claude_desktop_config.json):

{
  "mcpServers": {
    "outlook": {
      "command": "uvx",
      "args": ["mcp-outlook"]
    }
  }
}

Claude Code CLI:

claude mcp add outlook uvx mcp-outlook-desktop

Method 2: Local Installation with pip

pip install mcp-outlook-desktop

Then in your Claude Desktop config:

{
  "mcpServers": {
    "outlook": {
      "command": "mcp-outlook"
    }
  }
}

Method 3: Clone from Source (C:\projects\mcp-outlook)

cd C:\projects
gh repo clone Jpatching/mcp-outlook
cd mcp-outlook
setup.bat

Test connection (with Outlook open):

run.bat --status
run.bat --test

🛠️ Available MCP Tools

Tool Name Parameters Description
outlook_check_status none Check connection to Outlook
outlook_list_messages folder, top, unread_only List recent emails from Inbox, Sent, Drafts
outlook_search_messages query, top Search messages across mailbox
outlook_get_message message_id Retrieve full email body and sender details safely encapsulated in XML boundaries
outlook_create_draft subject, body, to_recipients, reply_to_message_id Create a draft email or reply draft in Outlook Drafts folder (Recommended)
outlook_send_mail subject, body, to_recipients, confirm_send Send an email directly (diverts to Drafts unless confirm_send=True)
outlook_list_calendar_events days_ahead List upcoming meetings and appointments
outlook_create_calendar_event subject, start_datetime, end_datetime, attendees, location Schedule a meeting in Outlook Calendar
outlook_list_folders none List mail folders with unread counts

Recommended Servers

playwright-mcp

playwright-mcp

A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.

Official
Featured
TypeScript
Magic Component Platform (MCP)

Magic Component Platform (MCP)

An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.

Official
Featured
Local
TypeScript
Audiense Insights MCP Server

Audiense Insights MCP Server

Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.

Official
Featured
Local
TypeScript
VeyraX MCP

VeyraX MCP

Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.

Official
Featured
Local
graphlit-mcp-server

graphlit-mcp-server

The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.

Official
Featured
TypeScript
Kagi MCP Server

Kagi MCP Server

An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.

Official
Featured
Python
E2B

E2B

Using MCP to run code via e2b.

Official
Featured
Neon Database

Neon Database

MCP server for interacting with Neon Management API and databases

Official
Featured
Exa Search

Exa Search

A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.

Official
Featured
Qdrant Server

Qdrant Server

This repository is an example of how to create a MCP server for Qdrant, a vector search engine.

Official
Featured