// SCAN REPORT

Microsoft 365 Core MCP Server

62 tools. 52 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

52 can modify or destroy data

10 read-only

62 tools total

Community server · catalogue entry verified 04/07/2026

How to control Microsoft 365 Core MCP Server ↓

TOOL MAP

What Microsoft 365 Core MCP Server exposes to your agents

Read (10) Write / Execute (49) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Microsoft 365 Core MCP Server tools

Destructive · High manage_azuread_devices The tool explicitly supports deleting Azure AD devices, which is an irreversible destructive action. Destructive · Critical manage_offboarding This tool performs multiple high-impact, largely irreversible actions: disabling user accounts (cutting off access), revoking access across systems, and removing licenses. Execute · High execute_graph_batch This tool executes multiple Microsoft Graph API requests in a single operation. Execute · High execute_graph_search While framed as a search/read operation, the 'execute' terminology and the dynamic nature of user-supplied queries across Microsoft Graph endpoints classify this as Execute rather than Read.

52 of Microsoft 365 Core MCP Server's 62 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Microsoft 365 Core MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Microsoft 365 Core MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "manage_azuread_devices": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "create_intune_policy": {
    "limits": [
      {
        "counter": "create_intune_policy_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "backup_policies": {
    "limits": [
      {
        "counter": "backup_policies_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Microsoft 365 Core MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MICROSOFT 365 CORE →

Instant setup, no code required.

FULL CATALOGUE

All 62 Microsoft 365 Core MCP Server tools

DESTRUCTIVE 2 tools

Destructive manage_azuread_devices Manage Azure AD registered devices - enable, disable, delete, and monitor devices Destructive manage_offboarding Automate user offboarding processes including account disablement, license removal, data backup, and access re

EXECUTE 8 tools

Execute call_microsoft_api Make direct calls to any Microsoft Graph or Azure Resource Management API endpoint with full control over HTTP Execute Dynamicendpoint_automation_assistant Acts as a versatile assistant to call any Microsoft Graph or Azure Resource Management API endpoint. Use this Execute execute_graph_batch Execute multiple Microsoft Graph API requests in a single batch operation for improved performance and efficie Execute execute_graph_search Execute advanced search queries across Microsoft 365 content including emails, files, messages, and calendar e Execute manage_alerts Manage security alerts from Microsoft Defender and other security products including investigation and remedia Execute manage_intune_macos_devices Manage macOS devices in Intune including enrollment, compliance policies, device actions, and inventory manage Execute manage_intune_windows_devices Manage Windows devices in Intune including enrollment, autopilot deployment, device actions, and health monito Execute oauth_authorize Manage OAuth 2.0 authorization for user-delegated access to OneDrive and SharePoint files with secure token ha

WRITE 41 tools

Write create_intune_policy Create accurate and complete Intune policies for Windows or macOS with validated settings and proper structure Write createIntunePolicy Creates a new Intune policy for either Windows or macOS. Write generate_html_report Create interactive HTML reports and dashboards with responsive design, charts, and filtering capabilities. Write generate_powerpoint_presentation Create professional PowerPoint presentations with custom slides, charts, tables, and themes from Microsoft 365 Write generate_professional_report Generate comprehensive professional reports in multiple formats (PowerPoint, Word, HTML, PDF) from Microsoft 3 Write generate_word_document Create professional Word documents with formatted sections, tables, charts, and table of contents from analysi Write manage_authentication_strengths View and manage authentication strength policies that define which authentication methods satisfy MFA requirem Write manage_azure_ad_apps Manage Azure AD application registrations including app permissions, credentials, and OAuth configurations. Write manage_azure_ad_devices Manage devices registered in Azure AD including device compliance, BitLocker keys, and device actions. Write manage_azure_ad_roles Manage Azure AD administrative roles including role assignments, custom roles, and privilege escalation contro Write manage_azuread_apps Manage Azure AD application registrations - create, update, and manage app permissions Write manage_azuread_roles Manage Azure AD directory roles - assign, remove, and list role assignments Write manage_cis_compliance Manage CIS (Center for Internet Security) benchmark compliance including assessment and remediation tracking. Write manage_compliance_frameworks Manage compliance frameworks and standards including HIPAA, GDPR, SOX, PCI-DSS, ISO 27001, and NIST configurat Write manage_conditional_access_policies Manage Azure AD conditional access policies for zero-trust security including MFA, device compliance, and loca Write manage_cross_tenant_access Manage cross-tenant access settings for B2B collaboration, including inbound/outbound trust settings and partn Write manage_defender_policies Manage Microsoft Defender for Office 365 policies including Safe Attachments, Safe Links, anti-phishing, and a Write manage_distribution_lists manage_distribution_lists Write manage_dlp_incidents Investigate and manage DLP policy violations and incidents including user notifications and remediation action Write manage_dlp_policies Manage Data Loss Prevention policies to protect sensitive data across Exchange, SharePoint, OneDrive, and Team Write manage_exchange_policies Manage Exchange Online policies including mail flow rules, mobile device access, and organization-wide setting Write manage_exchange_settings Manage Exchange Online settings including mailbox configuration, transport rules, and organization policies. Write manage_graph_subscriptions manage_graph_subscriptions Write manage_identity_protection Monitor and manage Azure AD Identity Protection including risk detections, risky users, and risk remediation a Write manage_information_protection_policies Manage Azure Information Protection policies for data classification, encryption, and rights management. Write manage_intune_macos_apps Manage macOS application deployment including app assignments, updates, and installation requirements. Write manage_intune_macos_policies Manage macOS configuration profiles and compliance policies for device security and management settings. Write manage_intune_windows_apps Manage Windows application deployment including Win32 apps, Microsoft Store apps, and Office 365 assignments. Write manage_intune_windows_policies Manage Windows configuration profiles and compliance policies including security baselines and update rings. Write manage_m365_groups Manage Microsoft 365 groups for team collaboration with shared resources like mailbox, calendar, and files. Write manage_named_locations Manage Conditional Access named locations including IP address ranges and country/region locations for locatio Write manage_retention_policies Manage retention policies for content across Exchange, SharePoint, OneDrive, and Teams with lifecycle rules. Write manage_security_alert_policies Manage security alert policies for monitoring threats, suspicious activities, and compliance violations across Write manage_security_groups Manage Azure AD security groups for access control, including group creation, membership, and security setting Write manage_sensitivity_labels manage_sensitivity_labels Write manage_service_principals Manage service principals for application access including permissions, credentials, and enterprise applicatio Write manage_sharepoint_governance_policies Manage SharePoint governance policies including sharing controls, access restrictions, and site lifecycle mana Write manage_sharepoint_lists Manage SharePoint lists and libraries including schema definition, items, views, and permissions. Write manage_sharepoint_sites Manage SharePoint sites including creation, configuration, permissions, and site collection administration. Write manage_teams_policies Manage Microsoft Teams policies for messaging, meetings, calling, apps, and live events across the organizatio Write manage_user_settings Manage user account settings including profile information, mailbox settings, licenses, and authentication met

READ 10 tools

Read backup_policies Export Microsoft 365 policies to JSON format for backup, disaster recovery, and migration. Supports Conditiona Read execute_delta_query Track incremental changes to Microsoft Graph resources using delta queries for efficient synchronization. Read generate_audit_reports Generate comprehensive audit reports for compliance frameworks with evidence documentation and findings. Read manage_compliance_assessments Conduct compliance assessments and generate detailed reports on regulatory adherence and security controls. Read manage_compliance_monitoring Monitor ongoing compliance status with real-time alerts for policy violations and regulatory changes. Read manage_evidence_collection Collect and preserve compliance evidence including audit logs, configuration snapshots, and attestation record Read manage_gap_analysis Perform gap analysis to identify compliance deficiencies and generate remediation recommendations. Read manage_intune_macos_compliance Assess macOS device compliance status and generate reports on policy adherence and security posture. Read manage_intune_windows_compliance Assess Windows device compliance status including BitLocker encryption, antivirus status, and security configu Read search_audit_log Search and analyze Azure AD unified audit logs for security events, user activities, and compliance monitoring

OTHER 1 tools

Other toolName toolName

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Microsoft 365 Core MCP Server

Can an AI agent delete data through the Microsoft 365 Core MCP Server MCP server? +

Yes. The Microsoft 365 Core MCP Server server exposes 2 destructive tools including manage_azuread_devices, manage_offboarding. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Microsoft 365 Core MCP Server? +

The Microsoft 365 Core MCP Server server has 41 write tools including create_intune_policy, createIntunePolicy, generate_html_report. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Microsoft 365 Core MCP Server.

How many tools does the Microsoft 365 Core MCP Server MCP server expose? +

62 tools across 3 categories: Execute, Read, Write. 10 are read-only. 52 can modify, create, or delete data.

How do I enforce a policy on Microsoft 365 Core MCP Server? +

Register the Microsoft 365 Core MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Microsoft 365 Core MCP Server tool call.

Deterministic rules across all 62 Microsoft 365 Core MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MICROSOFT 365 CORE →

Instant setup, no code required.

62 Microsoft 365 Core MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.