This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryConsolidated 55 tools down to 20 and added MCP safety annotations, making the toolset safer.
Full changelog
What's Changed since v2.0.0
v3.0.0 — Tool Consolidation & Safety
Breaking: Consolidated 55 tools down to 20 (~64% reduction, ~11,000 tokens saved per turn) using the STRAP action-parameter pattern.
- MCP safety annotations on all 20 tools (
readOnlyHint,destructiveHint,idempotentHint)- 6 read-only tools auto-approved by Claude Code
- 2 destructive tools prompt for confirmation
- send-email safety controls:
dryRunpreview, session rate limiting (OUTLOOK_MAX_EMAILS_PER_SESSION), recipient allowlist (OUTLOOK_ALLOWED_RECIPIENTS) - New
update-emailtool — unified mark-read, flag, unflag, complete - New
utils/safety.js— shared rate limiter, allowlist checker, dry-run formatter
v3.1.0 — 12 Bug Fixes + 25 How-To Guides
- Fixed
callGraphAPIparameter order in 3 modules (24 API calls had method/path swapped) - Fixed auth server scope desync — now imports from central
config.js - Fixed
search-emailssilent failure on personal accounts — progressive fallback with user warning - Fixed double URL encoding in 12 Graph API calls across 6 files
- Fixed
search-people,manage-contact,manage-rules,create-event,export,apply-category,access-shared-mailboxbugs - 25 how-to guides with 12 screenshots added to documentation
v3.2.0 — 7 Fixes + 6 Enhancements
Fixed:
- Nonexistent folder silent fallback → now throws error (#46)
count=0returns all emails → validates minimum 1 (#47)read-emailminimal shows "No content" → dedicated field preset with body preview (#48)- HTML body Content-Type detection expanded (#49)
- Conversation export error on personal accounts → friendly fallback (#50)
- Calendar event times in UTC → local timezone display (#51)
- Rule sequence display → shows actual Graph API sequence (#52)
Added:
auth aboutdiagnostics — tool count, scopes, module breakdown (#53)folders action=deletewith protected folder guard (#54)manage-rules action=delete(#55)- Contact minimal verbosity (#56)
- Settings section-specific formatting (#57)
- Auto-reply message warning (#58)
- Dockerfile for container deployments
Installation
npm install -g @littlebearapps/outlook-mcp
# or
npx @littlebearapps/outlook-mcp
Links
- npm: https://www.npmjs.com/package/@littlebearapps/outlook-mcp
- Documentation: https://github.com/littlebearapps/outlook-mcp#readme
Breaking Changes
- Removed 55 existing tools, retaining only 20 (list not provided).
- Consolidated toolset using STRAP action-parameter pattern (~64% reduction).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About littlebearapps/outlook-assistant
Ask your AI assistant to search your inbox, send emails, schedule meetings, manage contacts, and configure mailbox settings — without leaving the conversation. Works with Claude, Cursor, Windsurf, and any MCP-compatible client.
Related context
Beta — feedback welcome: [email protected]