Microsoft MCP
UnverifiedREPOpurva-kashyap/microsoft-mcp
F
Catalogue entry updated 2 days ago
Auth postureNot probedno remote endpoint probed yet
Tools354 Destructive · 1 Execute · 13 Write · 17 Read
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 4Execute 1Write 13Read 17
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Tools 35
delete_contactdelete_emaildelete_eventdelete_filesend_email
View all 35 tools
complete_authenticationcreate_contactcreate_email_draftcreate_eventcreate_filemove_emailreply_all_emailreply_to_emailrespond_eventupdate_contactupdate_emailupdate_eventupdate_fileauthenticate_accountcheck_availabilityget_attachmentget_contactget_emailget_eventget_filelist_accountslist_contactslist_emailslist_eventslist_filessearch_contactssearch_emailssearch_eventssearch_filesunified_search
Change history
No changes recorded since first scan. Watched servers surface a diff within the hour.
Recommended policy
delete_contactdeny
send_emailrequire approval
complete_authenticationrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →