How Wix scaled AI-native work to 5,000 employees with Willow
Read More
Enterprise Connectors
Microsoft Outlook Mail logo. Microsoft Outlook Mail MCP server connector.

Microsoft Outlook Mail MCP Server

Read, send, and manage emails through Microsoft Outlook using the Microsoft Graph API. Supports message management, folders, attachments, and mailbox settings.

✓Enterprise-grade security
✓SSO & authentication ready
✓Full governance & audit logs

What is the Microsoft Outlook Mail MCP Server?

The Microsoft Outlook Mail MCP server gives AI agents structured, permission-aware access to Microsoft Outlook Mail through the Model Context Protocol. With 20 pre-built actions, agents can read, create, and update Microsoft Outlook Mail data on behalf of authorized users.

Willow ships the Microsoft Outlook Mail MCP server as part of an enterprise control plane. Every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to a full audit trail, and integrates with Splunk and Loki for SIEM visibility. Connect from Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, or any custom agent. Install once, distribute org-wide, and see exactly how Microsoft Outlook Mail is being used by every AI agent in your stack.

Tools

Tool

List Messages

List email messages in the authenticated user's mailbox. Returns messages sorted by received date (newest first) by default. Use this to browse the inbox or any mail folder. Supports filtering and selecting specific fields for efficient queries.
Tool

Get Message

Get the full details of a specific email message by its ID, including body content, attachments metadata, headers, and all properties. Use this when you need to read the complete content of an email.
Tool

Search Messages

Search for email messages across all folders using a keyword query. The search looks through subject, body, sender, and other fields. This is more powerful than filtering and supports natural language queries.
Tool

List Attachments

List all attachments on a specific email message. Returns attachment metadata including name, size, content type, and whether it's inline. For file attachments, use the Get Attachment tool to retrieve the actual content.
Tool

Get Attachment

Get a specific attachment from an email message, including the file content (base64-encoded for file attachments). Use this to download or read attachment content.
Tool

Send Mail

Send a new email message. Supports plain text and HTML body content, multiple recipients (to, cc, bcc), importance settings, and file attachments. The message is sent immediately and saved to the Sent Items folder.
Tool

Reply to Message

Send a reply to an email message. The reply is sent to the sender of the original message. You can add a comment/body text to include with the reply.
Tool

Reply All to Message

Send a reply-all to an email message. The reply is sent to all original recipients (sender, to, and cc). You can add a comment/body text to include with the reply.
Tool

Forward Message

Forward an email message to one or more recipients. You can add a comment/body text to include with the forwarded message.
Tool

Update Message

Update properties of an email message such as read status, importance, categories, flag status, or recipients. Use this to mark messages as read/unread, flag for follow-up, categorize messages, or update the to/cc/bcc recipients on a draft before sending.
1–10 of 20 tools
Customize tools

Customize Tools

Edit descriptions, modify arguments, select tools, or add new ones

ReviewEdit descriptions
ConfigureChange arguments
ApproveSelect tools
Create NewAdd tool

Set Up Your Microsoft Outlook Mail MCP Server in Minutes

Add the following configuration to your MCP client. Authentication is handled via OAuth. Compatible with Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, and any MCP-compatible agent.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "willow-outlook-mail": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/outlook-mail"
    }
  }
}

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "willow-outlook-mail": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/outlook-mail"
    }
  }
}

Claude Code

CLI
claude mcp add willow-outlook-mail --transport http https://<org>.mcp-s.com/mcp/mcp/outlook-mail

n8n

HTTP Request Node
{
  "url": "https://<org>.mcp-s.com/mcp/mcp/outlook-mail",
  "method": "POST"
}

Or click "Install with Willow" above to set up automatically with SSO and RBAC preconfigured.

Enterprise Governance for Microsoft Outlook Mail

Willow adds the layer Microsoft Outlook Mail and every other SaaS doesn't ship out of the box: every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to full audit logs, and detects shadow AI usage across your stack. One MCP gateway. Any agent. Every tool.

Microsoft Outlook Mail MCP Server FAQ

What is the Microsoft Outlook Mail MCP server?

The Microsoft Outlook Mail MCP server is a Model Context Protocol implementation that lets AI agents like Claude, Cursor, and ChatGPT read and write Microsoft Outlook Mail data through a standardized interface. Willow hosts and governs this server so enterprises can roll it out without a security review backlog.

How is Willow's Microsoft Outlook Mail MCP server different from the official one?

The official Microsoft Outlook Mail MCP server is scoped to a single user's account and does not include enterprise governance. Willow's version adds SSO, RBAC, audit logging, shadow AI detection, and centralized control over which actions agents can take across the entire org.

Which AI clients work with the Microsoft Outlook Mail MCP server?

Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code with MCP support, n8n, and any custom agent built with OpenAI Agents SDK, LangChain, Vercel AI SDK, or Anthropic SDK.

Is the Microsoft Outlook Mail MCP server secure? How does Willow handle authentication?

Every call runs behind your existing SSO (Okta, Azure AD). Per-user OAuth scopes the agent to exactly what that user can do in Microsoft Outlook Mail, nothing more. No credentials reach the LLM. Every action writes to an audit trail.

Can I limit which Microsoft Outlook Mail actions agents can take?

Yes. Willow lets you scope agents to specific actions, specific projects, or specific environments. Toggle actions on or off in the dashboard, or enforce policy via infrastructure-as-code through GitHub.

How do I detect shadow Microsoft Outlook Mail MCP servers in my org?

Willow's browser extension and discovery service surface unmanaged MCP servers, skills, and AI agents across the org. If a developer installed an unapproved Microsoft Outlook Mail MCP locally, you'll see it.

What does the Microsoft Outlook Mail MCP server cost?

Pricing depends on org size and deployment model (SaaS, dedicated cloud, self-host). See withwillow.ai/pricing or contact sales for a quote.

How do I install the Microsoft Outlook Mail MCP server with Willow?

Install via the Willow Connect Panel in one click, or paste the JSON snippet above into your Claude Desktop, Cursor, or Claude Code config. SSO and RBAC inherit from your existing Willow setup.

Compare Willow MCP Gateway

See how Willow stacks up against other MCP platforms on governance, security, and enterprise readiness.

Your agents are already in the wild.

Give them a Basecamp. Go from AI chaos to AI work, in minutes.