High-risk tools in Ms 365

High severity Ms 365 MCP Server 2 of 194 tools

2 of the 194 tools in Ms 365 are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

parse-teams-url Execute

Converts any Teams meeting URL format (short /meet/, full /meetup-join/, or recap ?threadId=) into a standard joinWebUrl. Use this before list-online-meetings when the user prov...
tentatively-accept-calendar-event Execute

Tentatively accept the specified event in a user calendar. If the event allows proposals for new times, on responding tentative to the event, an invitee can choose to suggest an...

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Ms 365

Tools at high risk

Attacks that target this class

More on Ms 365

Enforce policy on every Ms 365 tool call.