Microsoft Outlook integration for AI agents.
Microsoft Outlook integration for AI agents with secure authentication and server-side credential injection. Open Connector runs the OAuth, seals the token in an encrypted vault, and serves Microsoft Outlook tools to your agent over MCP or a typed API — credentials injected server-side, every call audited, nothing leaving your infrastructure. Open source (AGPL-3.0) and self-hostable.
Real Microsoft Outlook actions, managed and audited.
Your user connects Microsoft Outlook once; your agent can then access selected Microsoft Outlook mail and calendar operations through Microsoft Graph — scoped to the OAuth permissions you grant and the tool allowlist you configure. Every action is least-privilege and written to a tamper-evident audit trail.
- 1
Your user grants Microsoft Outlook access once (OAuth) — the token lands in the vault.
- 2
Your agent calls a tool over MCP or the typed API; Open Connector injects the credential server-side.
- 3
Every routed call appends a hash-chained audit record — nothing leaves your infra.
Supported Microsoft Outlook tools.
28 tools are generated from the published Microsoft Outlook catalog. Descriptions are plain text; each action remains subject to its configured authentication and tool allowlist.
Showing 28 tools. All published catalog entries are included in this page's server-rendered HTML.
- Accept Calendar Event
- Accepts or tentatively accepts an Outlook meeting invitation.
- calendarmeetingwrite
- Add Mail Attachment
- Adds a small base64-encoded file attachment to an Outlook message.
- mailattachmentswrite
- Create Contact
- Creates a contact in the signed-in user's root Outlook contacts folder.
- contactswrite
- Create Draft
- Creates an Outlook draft message without sending it.
- maildraftwrite
- Create Event
- Creates an Outlook calendar event; attendees may receive meeting invitations from Microsoft Graph.
- calendarwrite
- Decline Calendar Event
- Declines an Outlook meeting invitation.
- calendarmeetingwrite
- Delete Calendar Event
- Deletes an Outlook calendar event; deleting an organizer event can send cancellations to attendees.
- calendardelete
- Delete Contact
- Deletes an Outlook contact.
- contactsdelete
- Delete Message
- Moves an Outlook message to the mailbox deleted items area.
- maildelete
- Forward Message
- Forwards an Outlook message to one or more recipients.
- mailforwardsend
- Get Contact
- Gets one Outlook contact by ID.
- contactsread
- Get Event
- Gets one Outlook calendar event by ID.
- calendarread
- Get Message
- Gets one Outlook message by its Microsoft Graph message ID.
- mailread
- List Calendar View
- Lists Outlook calendar events in a UTC date-time window.
- calendarread
- List Calendars
- Lists calendars available to the signed-in Outlook user.
- calendarread
- List Message Attachments
- Lists attachments on an Outlook message without downloading file content.
- mailattachmentsread
- List Mail Folder Messages
- Lists messages from a selected Outlook mail folder.
- mailfoldersread
- List Mail Folders
- Lists the signed-in user's root-level Outlook mail folders.
- mailfoldersread
- List Messages
- Lists recent messages in the signed-in Outlook mailbox.
- mailread
- List Contacts
- Lists contacts in the signed-in user's Outlook mailbox.
- contactsread
- Move Message
- Moves an Outlook message to another mail folder.
- mailfolderswrite
- Reply to Email
- Replies to an Outlook message from the signed-in mailbox.
- mailreplysend
- Search Messages
- Searches the signed-in user's Outlook messages by text.
- mailsearchread
- Send Draft
- Sends an existing Outlook draft message.
- maildraftsend
- Send Mail
- Sends an email from the signed-in Outlook mailbox.
- mailsend
- Update Calendar Event
- Updates common editable fields on an Outlook calendar event; preserve online-meeting content when editing a meeting body.
- calendarwrite
- Update Contact
- Updates common fields on an Outlook contact.
- contactswrite
- Update Email
- Updates common editable fields on an Outlook message.
- mailwrite
Microsoft Outlook integration, answered
- How do AI agents use Microsoft Outlook through Open Connector?
- Your user connects Microsoft Outlook once with one of its cataloged authentication methods. Open Connector stores the credential in an encrypted vault and exposes Microsoft Outlook tools to your agent over MCP or a typed API, with credentials injected server-side on each call.
- Is this a Microsoft Outlook MCP server?
- Yes. Open Connector can serve Microsoft Outlook as a named MCP server with a scoped allowlist and a per-user connection URL, so any MCP client can call Microsoft Outlook actions with credentials injected server-side.
- Where do Microsoft Outlook credentials live?
- In your own infrastructure. Open Connector keeps credentials in its own vault and injects them at call time, so they never leave your environment.
Give your agents Microsoft Outlook — keep the keys.
Open source, self-hostable, with Microsoft Outlook credentials that never leave your infrastructure. Run it from source today.