Microsoft Work IQ: the official Microsoft 365 MCP server

• Asks Microsoft 365 Copilot a question about your mail, meetings, files and chats

  Sends your question to Microsoft 365 Copilot, which answers from the mail, meetings, files and chats you can access. It can also send the question to one of your organization's Copilot agents instead.

  Try: “What did my team decide about the launch date in last week's meetings?”

  Read · ask

• Searches your Microsoft 365 content and returns passages with links to the sources

  Searches your Microsoft 365 data and any company sources connected to it, and returns relevant passages with a citation for each one. Microsoft still lists this tool as a preview.

  Try: “Find what our documents say about the travel expense policy and link the sources”

  Read · retrieve

• Reads your emails, events, files, chats or contacts

  Reads items from your Microsoft 365 account, such as messages, calendar events, files, Teams chats or people, and can read several at once.

  Try: “List my unread emails from Sarah this week”

  Read · fetch

• Downloads the contents of a file, image or Office document

  Downloads the actual contents of a file from OneDrive, SharePoint or an attachment so the assistant can read it. Files over 4 MB are refused by default.

  Try: “Open the Q3 budget spreadsheet in my OneDrive and summarize it”

  Read · fetch_blob

• Works out things like free time, recent changes or search results

  Runs a Microsoft 365 calculation that returns new information, such as when people are free, what changed since a point in time, or search results.

  Try: “When are Priya and I both free for an hour next Tuesday?”

  Read · call_function

• Creates something new, like a calendar event, draft email or contact

  Creates a new item in your Microsoft 365 account, such as a meeting, a draft message or a contact. It only works once your admin allows changes.

  Try: “Create a calendar event Friday at 3pm with the design team”

  Write · create_entity

• Changes an existing item, like moving a meeting or editing a draft

  Edits an item that already exists in your account, for example changing a meeting time or updating a draft. It only works once your admin allows changes.

  Try: “Move my 1:1 with Alex on Thursday to 4pm”

  Write · update_entity

• Takes actions such as sending an email, accepting a meeting or moving a file

  Carries out an action with an effect others can see, such as sending an email, replying to an invite, or copying and moving items. Microsoft warns these run right away and may not be reversible.

  Try: “Accept the 2pm meeting from Rob”

  Write · do_action

• Deletes an item, such as an email, event or file

  Removes an item from your Microsoft 365 account. One user reports deleted mail skips the Deleted Items folder, so check before you approve.

  Try: “Delete the duplicate 'Team sync' event on Monday”

  Delete · delete_entity

• Lists the Copilot agents your questions can be sent to

  Shows the Copilot agents available in your organization that the assistant can send questions to. The built-in Microsoft 365 Copilot is always on the list.

  Try: “Which Copilot agents can I ask through Work IQ?”

  Read · list_agents

• Used by the assistant behind the scenes

  Looks up which kinds of Microsoft 365 data it can reach

  Lets the assistant look up which Microsoft 365 data locations are available before it reads or changes anything. You rarely ask for this yourself.

  Try: “What kinds of Teams data can you read?”

  Read · search_paths

• Checks the exact format a request needs before sending it

  Lets the assistant check which fields a request needs, such as what a new calendar event must include, before it calls another tool.

  Try: “What fields do you need to create a meeting?”

  Read · get_schema

Watch out for

• It can send mail and delete items as you

  With changes turned on, it can send email, accept meetings and delete items. Keep changes off unless you need them, and read each action before you approve it. github.com

• One admin approval covers your whole company

  The quick admin consent link grants access for everyone in the organization. Admins should decide on that before clicking it, since every user can then connect. github.com

• Deleted mail skips Deleted Items

  A user reports mail deleted through it does not land in Deleted Items. Recovery then needs the Recoverable Items folder, so be careful with delete requests. github.com

• Every request is logged and billed

  Each tool call is logged for audit and charged 0.1 Copilot Credits. Long agent sessions can add up, so watch usage in Copilot Studio. microsoft.com

• A sign-in loop once opened hundreds of windows

  On macOS, one version kept opening Microsoft sign-in windows for days. The report is closed; update to the latest version. github.com

• Change defaults differ by Microsoft product

  Work IQ MCP blocks changes by default, but Copilot Studio says changes are on by default there. Check the policy in the Microsoft 365 admin center. learn.microsoft.com

Security advisories

In their words