// SCAN REPORT

Teams MCP Server

32 tools. 12 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 29 Jun 2026

12 can modify or destroy data

20 read-only

32 tools total

Community server · catalogue entry verified 29/06/2026

How to control Teams MCP Server ↓

TOOL MAP

What Teams MCP Server exposes to your agents

Read (20) Write / Execute (11) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Teams MCP Server tools

Destructive · High teams_delete_message Although the message record persists, the content deletion is irreversible and permanently destroys the message data. Execute · Medium teams_login This tool triggers an external login/authentication flow, which is an operation with side effects (establishing a session, potentially switching user context). Write · Low teams_remove_favorite Removing a favorite is a reversible write operation (the user can re-add the conversation as a favorite). Write · Low teams_remove_reaction Removing a reaction is a reversible write action — the user or agent can re-add the same emoji reaction at any time.

12 of Teams MCP Server's 32 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Teams MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Teams MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "teams_delete_message": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "teams_add_favorite": {
    "limits": [
      {
        "counter": "teams_add_favorite_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "teams_find_channel": {
    "limits": [
      {
        "counter": "teams_find_channel_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Teams MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON TEAMS →

Instant setup, no code required.

FULL CATALOGUE

All 32 Teams MCP Server tools

DESTRUCTIVE 1 tools

Destructive teams_delete_message Delete one of your own messages (soft delete - the message remains but content becomes empty). You can only de

EXECUTE 1 tools

Execute teams_login Trigger manual login flow for Microsoft Teams. Use this if the session has expired or you need to switch accou

WRITE 10 tools

Write teams_add_favorite Add a conversation to the user\ Write teams_add_reaction Add an emoji reaction to a message. Common reactions: like (👍), heart (❤️), laugh (😂), surprised (😮), sad ( Write teams_create_group_chat Create a new group chat with multiple people. Returns a conversation ID for use with teams_send_message. You a Write teams_edit_message Edit one of your own messages (same markdown and @mention rules as teams_send_message: people @[Name](mri), ch Write teams_mark_read Mark a conversation as read up to a specific message. This updates your read position so messages up to (and i Write teams_remove_favorite Remove a conversation from the user\ Write teams_remove_reaction Remove an emoji reaction from a message. Write teams_save_message Save (bookmark) a message in Teams. Saved messages can be accessed later from the Saved view in Teams. Write teams_send_message Send a message to a Teams conversation. Use markdown for formatting (not HTML): bold, italic, ~~strikethrough~ Write teams_unsave_message Remove a saved (bookmarked) message in Teams.

READ 20 tools

Read teams_find_channel Find Teams channels by name. Searches both (1) channels in teams you\ Read teams_get_activity Get the user\ Read teams_get_chat Get the conversation ID for a 1:1 chat with a person. Use this to start a new chat or find an existing one. Th Read teams_get_favorites Get the user\ Read teams_get_followed_threads Get the list of threads the user is following in Teams. Returns references to followed threads with source con Read teams_get_frequent_contacts Get the user\ Read teams_get_me Get the current user\ Read teams_get_meetings Get meetings from your Teams calendar. Returns meetings with: subject, startTime, endTime, organizer (name/ema Read teams_get_message Get a single message by ID with full content. Works for messages of any age - no retention limit. Use this to Read teams_get_saved_messages Get the list of messages the user has saved (bookmarked) in Teams. Returns references to saved messages with s Read teams_get_shared_files Get files and links shared in a Teams conversation. Returns file names, URLs, extensions, sizes, and who share Read teams_get_tags Get tags for a Teams team. Returns tag IDs, display names, and member counts. Use the teamId from teams_find_c Read teams_get_thread Get messages from a Teams conversation/thread. Default: newest-first (latest messages at top). For channels: m Read teams_get_transcript Get the transcript of a Teams meeting. Requires the meeting\ Read teams_get_unread Get unread status. Without conversationId: one bulk API call over your recent conversations (up to 200), retur Read teams_search Search for messages in Microsoft Teams. Returns matching messages with sender, timestamp, content, conversatio Read teams_search_email Search emails in the user\ Read teams_search_emoji Search for emojis by name or keyword. Returns both standard Teams emojis and custom organisation emojis, indic Read teams_search_people Search for people in Microsoft Teams by name or email. Returns matching users with display name, email, job ti Read teams_status Check the current authentication status and session state.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Teams MCP Server

Can an AI agent delete data through the Teams MCP Server MCP server? +

Yes. The Teams MCP Server server exposes 1 destructive tools including teams_delete_message. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Teams MCP Server? +

The Teams MCP Server server has 10 write tools including teams_add_favorite, teams_add_reaction, teams_create_group_chat. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Teams MCP Server.

How many tools does the Teams MCP Server MCP server expose? +

32 tools across 3 categories: Destructive, Read, Write. 20 are read-only. 12 can modify, create, or delete data.

How do I enforce a policy on Teams MCP Server? +

Register the Teams MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Teams MCP Server tool call.

Deterministic rules across all 32 Teams MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TEAMS →

Instant setup, no code required.

32 Teams MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.