Skip to content

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 3mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai ai-agents automation calendar claude claude-code
+14 more
contacts cursor email email-automation llm mcp mcp-server microsoft-365 microsoft-graph microsoft-graph-api model-context-protocol outlook productivity windsurf

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Consolidated 55 tools down to 20 and added MCP safety annotations, making the toolset safer.

Full changelog

What's Changed since v2.0.0

v3.0.0 — Tool Consolidation & Safety

Breaking: Consolidated 55 tools down to 20 (~64% reduction, ~11,000 tokens saved per turn) using the STRAP action-parameter pattern.

  • MCP safety annotations on all 20 tools (readOnlyHint, destructiveHint, idempotentHint)
    • 6 read-only tools auto-approved by Claude Code
    • 2 destructive tools prompt for confirmation
  • send-email safety controls: dryRun preview, session rate limiting (OUTLOOK_MAX_EMAILS_PER_SESSION), recipient allowlist (OUTLOOK_ALLOWED_RECIPIENTS)
  • New update-email tool — unified mark-read, flag, unflag, complete
  • New utils/safety.js — shared rate limiter, allowlist checker, dry-run formatter

v3.1.0 — 12 Bug Fixes + 25 How-To Guides

  • Fixed callGraphAPI parameter order in 3 modules (24 API calls had method/path swapped)
  • Fixed auth server scope desync — now imports from central config.js
  • Fixed search-emails silent failure on personal accounts — progressive fallback with user warning
  • Fixed double URL encoding in 12 Graph API calls across 6 files
  • Fixed search-people, manage-contact, manage-rules, create-event, export, apply-category, access-shared-mailbox bugs
  • 25 how-to guides with 12 screenshots added to documentation

v3.2.0 — 7 Fixes + 6 Enhancements

Fixed:

  • Nonexistent folder silent fallback → now throws error (#46)
  • count=0 returns all emails → validates minimum 1 (#47)
  • read-email minimal shows "No content" → dedicated field preset with body preview (#48)
  • HTML body Content-Type detection expanded (#49)
  • Conversation export error on personal accounts → friendly fallback (#50)
  • Calendar event times in UTC → local timezone display (#51)
  • Rule sequence display → shows actual Graph API sequence (#52)

Added:

  • auth about diagnostics — tool count, scopes, module breakdown (#53)
  • folders action=delete with protected folder guard (#54)
  • manage-rules action=delete (#55)
  • Contact minimal verbosity (#56)
  • Settings section-specific formatting (#57)
  • Auto-reply message warning (#58)
  • Dockerfile for container deployments

Installation

npm install -g @littlebearapps/outlook-mcp
# or
npx @littlebearapps/outlook-mcp

Links

  • npm: https://www.npmjs.com/package/@littlebearapps/outlook-mcp
  • Documentation: https://github.com/littlebearapps/outlook-mcp#readme

Breaking Changes

  • Removed 55 existing tools, retaining only 20 (list not provided).
  • Consolidated toolset using STRAP action-parameter pattern (~64% reduction).

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track littlebearapps/outlook-assistant

Get notified when new releases ship.

Sign up free

About littlebearapps/outlook-assistant

Ask your AI assistant to search your inbox, send emails, schedule meetings, manage contacts, and configure mailbox settings — without leaving the conversation. Works with Claude, Cursor, Windsurf, and any MCP-compatible client.

All releases →

Beta — feedback welcome: [email protected]