// SCAN REPORT

Teams

29 tools. 14 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 27 Jun 2026

14 can modify or destroy data

15 read-only

29 tools total

Community server · catalogue entry verified 27/06/2026

How to control Teams ↓

TOOL MAP

What Teams exposes to your agents

Read (15) Write / Execute (12) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Teams tools

Destructive · High delete_channel_message This tool irreversibly removes message data from a Teams channel (soft delete marks it as deleted). Destructive · High delete_chat_message This tool removes chat message data from the Teams conversation. Write · Low unset_channel_message_reaction Removing a reaction is a reversible modification to a message (reactions can be re-added). Write · Low unset_chat_message_reaction Removing a reaction is a reversible modification to a chat message (the reaction can be re-added).

14 of Teams's 29 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Teams

PolicyLayer is an MCP gateway — it sits between your AI agents and Teams, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_channel_message": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "unset_channel_message_reaction": {
    "limits": [
      {
        "counter": "unset_channel_message_reaction_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "auth_status": {
    "limits": [
      {
        "counter": "auth_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Teams — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON TEAMS →

Instant setup, no code required.

FULL CATALOGUE

All 29 Teams tools

DESTRUCTIVE 2 tools

Destructive delete_channel_message Soft delete a message in a channel. Only the message sender can delete their own messages. The message will be Destructive delete_chat_message Soft delete a chat message that was previously sent. Only the message sender can delete their own messages. Th

WRITE 12 tools

Write unset_channel_message_reaction Remove a reaction from a message in a Teams channel. Can also remove reactions from replies. Write unset_chat_message_reaction Remove a reaction from a message in a chat conversation. Write reply_to_channel_message Reply to a specific message in a channel. Supports text and markdown formatting, mentions, and importance leve Write create_chat Create a new chat conversation. Can be a 1:1 chat (with one other user) or a group chat (with multiple users). Write send_channel_message Send a message to a specific channel in a Microsoft Team. Supports text and markdown formatting, mentions, and Write send_chat_message Send a message to a specific chat conversation. Supports text and markdown formatting, mentions, and importanc Write send_file_to_channel Upload a local file and send it as a message to a Teams channel. Supports any file type (PDF, DOCX, ZIP, image Write send_file_to_chat Upload a local file and send it as a message to a Teams chat. Supports any file type (PDF, DOCX, ZIP, images, Write set_channel_message_reaction Add a reaction to a message in a Teams channel. Supports Unicode emoji characters and named reactions (like, a Write set_chat_message_reaction Add a reaction to a message in a chat conversation. Supports Unicode emoji characters and named reactions (lik Write update_channel_message Update (edit) a message in a channel that was previously sent. Only the message sender can update their own me Write update_chat_message Update (edit) a chat message that was previously sent. Only the message sender can update their own messages.

READ 15 tools

Read auth_status Check the authentication status of the Microsoft Graph connection. Returns whether the user is authenticated a Read download_chat_hosted_content Download hosted content (such as images) from a chat message. Returns the content as base64 encoded data along Read download_message_hosted_content Download hosted content (such as images) from a Teams channel message. Returns the content as base64 encoded d Read get_channel_message_replies Get all replies to a specific message in a channel. Returns reply content, sender information, and timestamps. Read get_channel_messages Retrieve recent messages from a specific channel in a Microsoft Team. Returns message content, sender informat Read get_chat_messages Retrieve recent messages from a specific chat conversation. Returns message content, sender information, and t Read get_current_user Get the current authenticated user Read get_my_mentions Find recent messages where the current user was @mentioned across all Teams channels and chats. Read get_user Get detailed information about a specific user by their ID or email address. Returns profile information inclu Read list_channels List all channels in a specific Microsoft Team. Returns channel names, descriptions, types, and IDs for the sp Read list_chats List all recent chats (1:1 conversations and group chats) that the current user participates in. Returns chat Read list_team_members List all members of a specific Microsoft Team. Returns member names, email addresses, roles, and IDs. Read list_teams List all Microsoft Teams that the current user is a member of. Returns team names, descriptions, and IDs. Read search_users Search for users in the organization by name or email address. Returns matching users with their basic profile Read search_users_for_mentions Search for users to mention in messages. Returns users with their display names, email addresses, and mention

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Teams

Can an AI agent delete data through the Teams MCP server? +

Yes. The Teams server exposes 2 destructive tools including delete_channel_message, delete_chat_message. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Teams? +

The Teams server has 12 write tools including unset_channel_message_reaction, unset_chat_message_reaction, reply_to_channel_message. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Teams.

How many tools does the Teams MCP server expose? +

29 tools across 3 categories: Destructive, Read, Write. 15 are read-only. 14 can modify, create, or delete data.

How do I enforce a policy on Teams? +

Register the Teams MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Teams tool call.

Deterministic rules across all 29 Teams tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TEAMS →

Instant setup, no code required.

29 Teams tools catalogued and risk-classified — across an index of 43,000+ MCP servers.