M
MCP Directory CURATED DIRECTORY
911 MCP servers indexed
中文
← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionNextcloud MCP ServerA production-ready MCP server that connects AI assistants to your Nextcloud instance.Microsoft 365 MCP ServerAn MCP server for interacting with Microsoft 365 and Office services through the Graph API.
FMRS67 / 100 · C61 / 100 · C
Reliability10 / 208 / 20
Security and permissions12 / 2013 / 20
Maintenance16 / 2010 / 20
Documentation16 / 2016 / 20
Setup experience13 / 2014 / 20
Best for
  • Users who want to integrate AI assistants (like Claude Desktop or IDEs) with a self-hosted Nextcloud instance.
  • Developers and power users who need deep CRUD operations across multiple Nextcloud apps.
  • Teams that prefer Docker or Kubernetes deployment.
  • Developers who want to integrate Microsoft 365 data into AI assistants or custom applications.
  • Scenarios requiring unified access across multiple services (email, calendar, files, Teams, etc.).
  • Lightweight solutions to interact with Graph API via MCP protocol.
Not for
  • Users who don't want to self-host (consider managed service Astrolabe Cloud).
  • Users who need only simple read-only access (this server is more comprehensive).
  • Users who require official support (it is not an official Nextcloud project).
  • Highly secure enterprise production environments (requires careful scope management and deployment complexity).
  • Admin tasks requiring Microsoft 365 admin permissions (like security alerts, audit logs) — consider companion project ms-365-admin-mcp-server.
  • Environments without Node.js.
  • Support for non-Microsoft clouds like GCC High (only Global and China 21Vianet currently).
Required permissions
  • Requires a Nextcloud username and app password (or OAuth).
  • Read/write access to the selected Nextcloud apps (Notes, Calendar, Contacts, Files, etc.).
  • For semantic search, needs external services: Qdrant and Ollama (disabled by default).
  • Requires Microsoft Graph API permissions, dynamically requested based on enabled tools. Examples: User.Read, Mail.Read, Files.Read.
  • Organization mode (--org-mode) requires additional Graph permissions for Teams, SharePoint, etc. (e.g., Sites.Read.All).
  • Shared mailbox access requires delegated Mail.Read.Shared or Mail.Send.Shared scopes.
  • Use --allowed-scopes to restrict tool exposure; --extra-scopes to add extra scopes. Note: --allowed-scopes only narrows, never expands permissions.
Risks and side effects
  • Credential storage with app passwords may pose a security risk if exposed.
  • The server can access a user's full Nextcloud data, so proper access controls are necessary.
  • Experimental semantic search relies on external services, which may introduce security and privacy issues.
  • Tag-based exclusion (EXCLUDED_TAGS) depends on system tags to hide sensitive files, misconfiguration could expose data.
  • Token security: File-based token storage may be exposed; use OS credential storage or secure custom paths.
  • Overly broad permissions: default requests all scopes implied by tools; use allowed-scopes or tool filtering to limit.
  • Multi-tenant token risk: With default 'common' tenant, personal account refresh tokens may be rejected as of June 2026, causing session expiry.
  • Third-party project risk: Not officially maintained, potentially less stable than official solutions.
  • HTTP mode OAuth setup complexity: Requires correct Azure AD app registration and redirect URIs.
Supported clientsClaude DesktopClaude Desktop, Open WebUI
Tools1310