mcp-outlook-desktop
Enables AI assistants to securely read, search, draft, and send Outlook emails, manage calendar events, and access mailbox folders through a local MAPI connection to Windows Outlook, with human-in-the-loop safeguards.
README
Microsoft Outlook MCP Server for Claude & Antigravity (AGY)
A high-performance Model Context Protocol (MCP) server providing direct, secure access to your Microsoft 365 Outlook emails, calendar, and contacts from:
- Claude Code CLI
- Claude Desktop
- Antigravity CLI (AGY)
🖥️ Live Terminal Demo
[1;36m>[0m [1mclaude[0m "Check my unread emails and prepare a draft follow-up to Alex about tomorrow's sync"
[1;34m⚡ Calling Tool:[0m outlook_list_messages(folder="inbox", unread_only=True, top=5)
[32m✔ Found 2 unread messages:[0m
[1] [1mFrom:[0m Alex Mercer <alex@company.com> | [1mSubject:[0m Agenda for Q3 Planning Sync
[2] [1mFrom:[0m Cloud Alerts <alerts@infra.io> | [1mSubject:[0m Weekly Node Health Report
[1;34m⚡ Calling Tool:[0m outlook_get_message(message_id="MSG_049281")
[32m✔ Retrieved message safely encapsulated in <untrusted_email_body_content> boundary.[0m
[1;34m⚡ Calling Tool:[0m outlook_create_draft(
to_recipients=["alex@company.com"],
subject="Re: Agenda for Q3 Planning Sync",
body="Hi Alex,\n\nThanks for sending over the agenda. I reviewed the distributed queue items and added notes for tomorrow's sync.\n\nBest,\nJosh"
)
[1;32m✔ Draft created successfully in Outlook Drafts folder (ID: DRAFT_839120)[0m
[2;37m [Human-in-the-Loop Safe]: The draft is ready in your Outlook app for review before sending.[0m
🔒 Privacy & Security Architecture
- Human-in-the-Loop by Design: All outbound message drafting defaults to your Outlook
Draftsfolder for manual review. Direct unreviewed sends (outlook_send_mail) require an explicitconfirm_send=Trueflag to prevent accidental dispatches. - Indirect Prompt Injection Defense: Incoming email bodies are encapsulated in
<untrusted_email_body_content>XML tags to ensure AI models parse external content strictly as passive data. - Zero Cloud Tokens / No Passwords: Connects 100% locally to your running Windows Outlook Desktop application via Windows MAPI (
win32com). - Strict
.gitignore: All local configs, caches, and environments are ignored.
🚀 Installation & Quickstart
Method 1: Instant Run with uvx (No git clone needed)
If you have uv installed, you can run the server directly:
uvx mcp-outlook-desktop
Claude Desktop Configuration (%APPDATA%\Claude\claude_desktop_config.json):
{
"mcpServers": {
"outlook": {
"command": "uvx",
"args": ["mcp-outlook"]
}
}
}
Claude Code CLI:
claude mcp add outlook uvx mcp-outlook-desktop
Method 2: Local Installation with pip
pip install mcp-outlook-desktop
Then in your Claude Desktop config:
{
"mcpServers": {
"outlook": {
"command": "mcp-outlook"
}
}
}
Method 3: Clone from Source (C:\projects\mcp-outlook)
cd C:\projects
gh repo clone Jpatching/mcp-outlook
cd mcp-outlook
setup.bat
Test connection (with Outlook open):
run.bat --status
run.bat --test
🛠️ Available MCP Tools
| Tool Name | Parameters | Description |
|---|---|---|
outlook_check_status |
none | Check connection to Outlook |
outlook_list_messages |
folder, top, unread_only |
List recent emails from Inbox, Sent, Drafts |
outlook_search_messages |
query, top |
Search messages across mailbox |
outlook_get_message |
message_id |
Retrieve full email body and sender details safely encapsulated in XML boundaries |
outlook_create_draft |
subject, body, to_recipients, reply_to_message_id |
Create a draft email or reply draft in Outlook Drafts folder (Recommended) |
outlook_send_mail |
subject, body, to_recipients, confirm_send |
Send an email directly (diverts to Drafts unless confirm_send=True) |
outlook_list_calendar_events |
days_ahead |
List upcoming meetings and appointments |
outlook_create_calendar_event |
subject, start_datetime, end_datetime, attendees, location |
Schedule a meeting in Outlook Calendar |
outlook_list_folders |
none | List mail folders with unread counts |
Recommended Servers
playwright-mcp
A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.
Magic Component Platform (MCP)
An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.
Audiense Insights MCP Server
Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.
VeyraX MCP
Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.
graphlit-mcp-server
The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.
Kagi MCP Server
An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.
E2B
Using MCP to run code via e2b.
Neon Database
MCP server for interacting with Neon Management API and databases
Exa Search
A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.
Qdrant Server
This repository is an example of how to create a MCP server for Qdrant, a vector search engine.