# Microsoft Graph MCP

Connects AI assistants to Microsoft Graph API and scans tenants locally for inactive devices or unused licenses. Built for MSP workflows.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed · ★ 63
- Author: Servosity
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Servosity/msp-skills/tree/HEAD/skills/microsoft-graph
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/microsoft-graph-mcp

## What it does

This package serves as a single-executable replacement for the retired `mgc` tool. The installation supplies both the `microsoft-graph-mcp` server and the companion `microsoft-graph-cli` binary. It indexes tenant information into a local offline cache, making it simple for language models to spot unassigned seats, dormant machines, and elevated permission hazards.

Avoid starting the server with `--transport http`. Current builds lack password authentication and browser-rebinding guards, meaning web pages could query tenant data through local interfaces. Agents must connect via the default stdio transport instead. Remote integrations for tools such as ChatGPT remain on hold until the network layer gets updated.

Claude Code users can register the marketplace and install the plugin directly. Once downloaded, `microsoft-graph-cli --version` verifies that both binaries are operational in the path.

## Requirements
- Environment variables: `MICROSOFT_GRAPH_BASE_URL`, `MICROSOFT_GRAPH_TOKEN` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Install**
- The MCP registry has no launch command for it: see the repository README

## When to use it
- locate unused Microsoft 365 licenses across tenants
- detect privileged accounts with excessive access permissions
- identify stale corporate devices from an offline cache
- manage Microsoft Graph resources directly from local AI agent sessions

## Example prompts
- Scan tenant licenses using `microsoft-graph-cli` and list unassigned seats.
- Check directory roles through Microsoft Graph to flag accounts with surplus privileges.
- Find inactive devices in the offline store that missed check-ins recently.

## Similar
- [mcp-server](https://affpapa.org/en/nevibecode/mcp/mcp-server.md) — MCP server · ★ 43902
- [Coder](https://affpapa.org/en/nevibecode/mcp/coder.md) — MCP server · ★ 17191
- [firebase-mcp](https://affpapa.org/en/nevibecode/mcp/firebase-mcp.md) — MCP server · ★ 4482
- [Radar Kubernetes MCP Server](https://affpapa.org/en/nevibecode/mcp/radar-kubernetes-mcp-server.md) — MCP server · ★ 3918
- [Supabase](https://affpapa.org/en/nevibecode/mcp/supabase.md) — MCP server · ★ 2974
- [Microsoft Fabric MCP Server](https://affpapa.org/en/nevibecode/mcp/microsoft-fabric-mcp-server.md) — MCP server · ★ 3804

From the same set: [servosity/msp-skills](https://affpapa.org/en/nevibecode/by/servosity/msp-skills.md) — 73 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md