SharePoint MCP Server

What it is

A TypeScript MCP server over the Microsoft Graph API. It searches files across SharePoint, lists the sites the app registration can reach, opens a site's document libraries, walks folders inside them, and returns the contents of a text file. Sites are also exposed as resources under sharepoint://site/{siteId}.

What you get

• Files found across SharePoint through the Graph Search API
• The sites your app registration can reach, filtered by display name
• One site's details, from its URL
• The document libraries in a site
• The files and folders in a library, from the root or from a folder path
• The contents of a text file

Requirements

An Azure app registration with Sites.Read.All and Files.Read.All granted as application permissions, with admin consent given - without the consent step the tools come back empty. Four environment variables: the SharePoint site URL, your tenant id, and the app's client id and secret. The permissions are read-only, and file contents are returned for text files only.

Setup effort

Build from source

Tools you get

6 tools named in the project's documentation. Every tool only reads; nothing uploads, edits or deletes, matching the read-only Sites.Read.All and Files.Read.All permissions it requests.

Requires

• TENANT_ID in your environment
• CLIENT_ID in your environment
• CLIENT_SECRET in your environment