Teams MCP

Findings (16)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @azure/msal-node@6.0.1: 1 known vulnerability

  GHSA-xcx6-jx8p-x3h5

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.30.1: 5 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-rvq5-wwqv-78pq

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.3.0: 1 known vulnerability

  GHSA-27r3-jxmh-p828

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 1 known vulnerability

  GHSA-68fv-2mgg-jv7q

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  undici@7.29.1: 8 known vulnerabilities

  GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.3.1: 6 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.6.5: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/__tests__/server.test.ts:104
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@2.1.1: 1 known vulnerability

  GHSA-rmxm-3fg6-px4f

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @vitest/mocker@5.0.1: 2 known vulnerabilities

  GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  fast-uri@3.1.8: 4 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  hono@4.13.9: 1 known vulnerability

  GHSA-5r4p-p66f-jhc7

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  ip-address@10.7.2: 1 known vulnerability

  GHSA-rxp7-6hxx-x8q5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.16.0: 1 known vulnerability

  GHSA-6pq8-jhm2-2vcw

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (31)

• auth_status

  Check the authentication status of the Microsoft Graph connection. Returns whether the user is authenticated and shows their basic profile information.

• get_current_user

  Get the current authenticated user's profile information including display name, email, job title, and department.

• search_users

  Search for users in the organization by name or email address. Returns matching users with their basic profile information.

• get_user

  Get detailed information about a specific user by their ID or email address. Returns profile information including name, email, job title, and department.

• list_teams

  List all Microsoft Teams that the current user is a member of. Returns team names, descriptions, and IDs.

• list_channels

  List all channels in a specific Microsoft Team. Returns channel names, descriptions, types, and IDs for the specified team.

• get_channel_messages

  Retrieve recent messages from a specific channel in a Microsoft Team. Returns message content, sender information, and timestamps.

• send_channel_message

  Send a message to a specific channel in a Microsoft Team. Supports text and markdown formatting, mentions, and importance levels.

• get_channel_message_replies

  Get all replies to a specific message in a channel. Returns reply content, sender information, and timestamps.

• reply_to_channel_message

  Reply to a specific message in a channel. Supports text and markdown formatting, mentions, and importance levels.

• list_team_members

  List all members of a specific Microsoft Team. Returns member names, email addresses, roles, and IDs.

• search_users_for_mentions

  Search for users to mention in messages. Returns users with their display names, email addresses, and mention IDs.

• download_message_hosted_content

  Download hosted content (such as images) from a Teams channel message. Returns the content as base64 encoded data along with metadata. Use this to retrieve images or other inline content embedded in messages.

• delete_channel_message

  Soft delete a message in a channel. Only the message sender can delete their own messages. The message will be marked as deleted.

• update_channel_message

  Update (edit) a message in a channel that was previously sent. Only the message sender can update their own messages.

• set_channel_message_reaction

  Add a reaction to a message in a Teams channel. Supports Unicode emoji characters and named reactions (like, angry, sad, laugh, heart, surprised). Can also react to replies.

• unset_channel_message_reaction

  Remove a reaction from a message in a Teams channel. Can also remove reactions from replies.

• send_file_to_channel

  Upload a local file and send it as a message to a Teams channel. Supports any file type (PDF, DOCX, ZIP, images, etc.). The file is uploaded to the channel's SharePoint folder and sent as a reference attachment. If messageId is provided, the file is sent as a reply to that message (thread).

• list_chats

  List all recent chats (1:1 conversations and group chats) that the current user participates in. Returns chat topics, types, and participant information.

• get_chat_messages

  Retrieve recent messages from a specific chat conversation. Returns message content, sender information, and timestamps.

• download_chat_hosted_content

  Download hosted content (such as images) from a chat message. Returns the content as base64 encoded data along with metadata. Use this to retrieve images or other inline content embedded in chat messages.

• send_chat_message

  Send a message to a specific chat conversation. Supports text and markdown formatting, mentions, and importance levels.

• create_chat

  Create a new chat conversation. Can be a 1:1 chat (with one other user) or a group chat (with multiple users). Group chats can optionally have a topic.

• add_chat_member

  Add one or more users to an existing group chat by email. Returns a per-user success/failure report so partial failures (e.g. unknown email) don't abort the batch.

• update_chat_message

  Update (edit) a chat message that was previously sent. Only the message sender can update their own messages. Supports updating content with text or Markdown formatting, mentions, and importance levels.

• delete_chat_message

  Soft delete a chat message that was previously sent. Only the message sender can delete their own messages. The message will be marked as deleted but can still be seen as '[This message has been deleted]'.

• set_chat_message_reaction

  Add a reaction to a message in a chat conversation. Supports Unicode emoji characters and named reactions (like, angry, sad, laugh, heart, surprised).

• unset_chat_message_reaction

  Remove a reaction from a message in a chat conversation.

• send_file_to_chat

  Upload a local file and send it as a message to a Teams chat. Supports any file type (PDF, DOCX, ZIP, images, etc.). The file is uploaded to OneDrive and sent as a reference attachment.

• search_messages

  Search for messages across all Microsoft Teams channels and chats using the Microsoft Search API. The query string supports KQL (Keyword Query Language) syntax for advanced filtering: from:<name> — messages sent by a person (e.g. from:bob) to:<name> — messages sent to

• get_my_mentions

  Find recent messages where the current user was @mentioned across all Teams channels and chats.