← Back to directory
O

Outlook Desktop MCP

Community
Turn your running Outlook Desktop into an MCP server. No Graph API, no OAuth.
Category
Collaboration #12 of 55
Stars
★ 69 Popular
Transport
stdio (local process)
Runtime
Python 3.12+
Credentials
No credential needed
License
AGPL-3.0
Last commit
Tools
29
59FMRS · C

Outlook Desktop MCP provides a pragmatic, cloud-free approach to Outlook automation by leveraging the local desktop app, with simple setup. It supports a broad set of features on Windows and macOS, though permissions and security prompts require some configuration. It's a valuable community tool for users wanting to integrate Outlook with MCP clients like Claude.

Strongest · Documentation 15/20 Weakest · Reliability 8/20

Reliability
8/20
Security and permissions
10/20
Maintenance
12/20
Documentation
15/20
Setup experience
14/20
Why each score
Reliability 8/20
Structure is clear: entry point routes to either a Windows COM implementation or a macOS AppleScript implementation based on platform. Static code review shows tool registration matches README claims (29 tools on Windows, 22 on macOS). There are committed tests but coverage of key paths (COM interaction, MCP handshake) is clearly thin, and no CI configuration is present. README behavior largely aligns with code structure, but there is no verification via execution. Since not run and test coverage is limited, reliability cannot exceed 12.
Security and permissions 10/20
No malicious intent detected: no credential extraction, no exfiltration, no hidden network calls. Server only interacts with local Outlook session via COM or AppleScript, avoiding cloud APIs. Dangerous operations (e.g., delete event) would require user confirmation via the MCP client (e.g., Claude), but the MCP server itself has no built-in confirmation mechanism. There is disclosure of UI permission prompts and how to suppress OOM prompts on Windows. However, server executes arbitrary AppleScript, relying on local Outlook's permission model; also no detailed data flow or credential storage; local system with intrusion detection or endpoint protection. These risks are acceptable and score 10.
Maintenance 12/20
Repository has 53 stars and 10 open issues, indicating some activity. PyPI version, README badges, and CONTRIBUTING guide suggest releases. However, no detailed commit history or release cadence. License is AGPL-3.0, which is community-friendly. There is no maintenance policy or security response channel. Overall activity is moderate but governance and versioning gaps exist, score 12.
Documentation 15/20
README is exceptionally detailed: installation, platform differences, tool list, architecture explanation, usage examples. Still missing detailed tool parameter documentation (input schemas for each tool) and troubleshooting guides (like limitations for non-Exchange accounts on macOS). There is CONTRIBUTING and project structure. Overall provides a great overview but lacks deep detail and troubleshooting steps, score 15.
Setup experience 14/20
Installation instructions are clear, and both Windows and macOS pip and source install guides are provided. Requires Python 3.12, Outlook must be running, but specifics of Python version are not mentioned. There are examples of registration to MCP clients (e.g., Claude Code). On Windows, pywin32_postinstall is needed; macOS requires manual permissions; these steps are documented and known. Based on static review of README, install path is plausible, thus score 14.

Static review · not runListed 2026-08-07

Read the FMRS scoring method →

Fit and risk

What it can accessWrites / deletes local filesChanges third-party account data

Best for

  • Users who have Outlook Desktop installed and want to avoid cloud API integration.
  • Users who need quick setup without OAuth or admin consent.
  • Users who want to leverage local Outlook session and cached data.

Not for

  • Users who do not use Outlook Desktop.
  • Users who need cloud API or remote access to Outlook data.
  • Users on unsupported Outlook versions (e.g., new Outlook on Windows without COM) or without necessary permissions (macOS).

Required permissions

  • Windows: Access to Outlook COM object model; may require authorization or registry policy changes.
  • macOS: Requires Automation and Accessibility permissions to control Outlook via osascript and read Exchange inbox.

Risks and side effects

  • Programmatic Access prompts may appear; must allow access or configure registry.
  • Automated tools could be misused by malicious instructions, potentially sending or modifying emails, calendar, or tasks unexpectedly.
  • Local-only, not cloud-based.

Setup

Before you start

Runtime:Python 3.12+

  1. Install Python 3.12+.
  2. Run pip install outlook-desktop-mcp.
  3. Register with Claude Code: claude mcp add outlook-desktop -- outlook-desktop-mcp.
  4. Ensure Outlook is running, then start Claude Code.

Check that it works

Run claude mcp add outlook-desktop -- outlook-desktop-mcp, open Outlook, then ask "What's in my recent inbox?" — if real emails come back the connection works; the client's tool list should show 29 tools on Windows (22 on macOS) such as send_email and list_emails.

Troubleshooting

  1. Ensure Outlook is running and signed in.
  2. Windows: If prompted, allow access or import the registry policy file.
  3. macOS: Ensure python3.12 is granted Automation and Accessibility permissions in System Settings.
  4. If Exchange inbox listing returns empty, check Accessibility permission is enabled.

Things to try

Once connected, you can ask your AI assistant things like:

  • Show me my 10 most recent inbox emails
  • Send an email to [email protected] about the project update
  • Create a meeting with [email protected] tomorrow at 2pm for 30 minutes
  • Mark that email as read and move it to archive

Tools 29

send_email destructive
Send an email with To/CC/BCC, plain text or HTML body.
list_emails read-only
List recent emails from any folder, with optional unread filter.
read_email read-only
Read full email content by entry ID or subject search.
search_emails read-only
Full-text search across email subjects and bodies.
reply_email destructive
Reply or reply-all, preserving the conversation thread.
mark_as_read writes
Mark a specific email as read.
mark_as_unread writes
Mark a specific email as unread.
move_email writes
Move an email to Archive, Trash, or any folder.
Show 21 more tools
list_folders read-only
Browse the folder hierarchy with item counts.
list_events read-only
List upcoming events within a date range.
get_event read-only
Read full event details by entry ID.
create_event writes
Create a personal calendar appointment.
create_meeting writes
Create a meeting and send invitations to attendees.
update_event writes
Modify an existing event's subject, time, location, etc.
delete_event destructive
Delete an appointment or cancel a meeting.
respond_to_meeting writes
Accept, decline, or tentatively accept a meeting invite (Windows only).
search_events read-only
Search calendar events by keyword within a date range.
list_tasks read-only
List pending or completed tasks, sorted by due date.
get_task read-only
Read full task details including body and completion status.
create_task writes
Create a new task with subject, due date, importance.
complete_task writes
Mark a task as complete.
delete_task destructive
Remove a task.
list_attachments read-only
List all attachments on an email or calendar event.
save_attachment writes
Download an attachment to a local directory.
list_categories read-only
List all available color categories in Outlook (Windows only).
set_category writes
Set or clear categories on any email, event, or task (Windows only).
list_rules read-only
List all mail rules with enabled/disabled status (Windows only).
toggle_rule writes
Enable or disable a mail rule by name (Windows only).
get_out_of_office read-only
Check whether Out of Office auto-reply is on or off (Windows only).

Use cases

Manage Outlook emails, calendar, and tasks via natural language with Claude.
Automate email handling: send, search, reply, mark, move.
Manage schedules: create events and meetings, query calendar.
Handle attachments: list and save.
Manage tasks: create, update, complete.

Supported clients

Claude Desktop
Claude Code

Listed from the project's documentation, not tested by this site.

Overview

Outlook Desktop MCP is a community-developed MCP server that leverages the locally running Outlook desktop application's existing authenticated session to provide email, calendar, task, and attachment management via COM automation on Windows and AppleScript on macOS. It avoids the complexity of Microsoft Graph API, Entra app registration, and OAuth token management. It supports Windows and macOS, offering 29 tools on Windows and 22 on macOS.

Similar servers

Source revision eeae4fabc27e Data synced 2026-10-12 Read the FMRS scoring method