# io.github.0xka13b/ms-calendar-mcp (npm · ms-calendar-mcp)

Microsoft Calendar (Outlook Calendar) MCP server for managing events via Microsoft Graph.

- Trust score: 69/100 (medium)
- Change this week: +23
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-04

## Components

- npm · `ms-calendar-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/0xka13b-ms-calendar-mcp/ms-calendar-mcp.md), [page](https://verifymcp.io/servers/0xka13b-ms-calendar-mcp/ms-calendar-mcp)

## Channel facts

- Registry: `npm`
- Package: `ms-calendar-mcp`
- Version: `1.0.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-04.

- **Supply Chain Security**: 83/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known medium-severity CVE affects hono 4.12.33, reached via @modelcontextprotocol/sdk > hono. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (110 of 111), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 56 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 620 tokens (~68/item across 9 items; 9 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 30/100
  - Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add 0xka13b-ms-calendar-mcp -- npx -y ms-calendar-mcp
```

### Codex

```bash
codex mcp add 0xka13b-ms-calendar-mcp -- npx -y ms-calendar-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "0xka13b-ms-calendar-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "ms-calendar-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add 0xka13b-ms-calendar-mcp --command npx --arg -y --arg ms-calendar-mcp
```

### Hermes

```yaml
mcp_servers:
  0xka13b-ms-calendar-mcp:
    command: "npx"
    args: ["-y", "ms-calendar-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "0xka13b-ms-calendar-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "ms-calendar-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-04 (score 69, −1)

- [security regression] CVE-2026-69207 affects this package: medium
- [security regression] Known CVEs: partial → fail

### 2026-08-03 (score 70, +4)

- [functional improvement] Stability: unverified → 0.27

### 2026-08-02 (score 66, +40)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Capabilities: pass → unverified
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional] Licence: MIT

### 2026-08-01 (score 26, +5)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass

### 2026-07-31 (score 21, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 46, +22)

- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: pass
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 24)

First indexed and scored.

## MCP tools (9)

### `me` (~21 tokens)

Get the signed-in user's profile (id, displayName, mail).

### `list_events` (~74 tokens)

List calendar events within a date range. Recurring events are expanded.

Input parameters:

- `days_ahead` (integer): Days into the future. Defaults to 7.
- `days_back` (integer): Days into the past. Defaults to 0.
- `include_details` (boolean): Include event body and attendees. Defaults to true.

### `get_event` (~26 tokens)

Get a single calendar event by ID.

Input parameters:

- `event_id` (string, required): Event ID

### `create_event` (~173 tokens)

Create a new calendar event.

Input parameters:

- `attendees` (array): Attendee email addresses
- `body` (string): Event description
- `body_type` (string): Body content type. Defaults to text.
- `end` (string, required): End datetime in ISO 8601 format, e.g. '2024-01-15T11:00:00'
- `is_online_meeting` (boolean): Create as an online meeting
- `location` (string): Event location display name
- `start` (string, required): Start datetime in ISO 8601 format, e.g. '2024-01-15T10:00:00'
- `subject` (string, required): Event title
- `timezone` (string): Timezone for start/end, e.g. 'America/New_York'. Defaults to UTC.

### `update_event` (~58 tokens)

Update calendar event properties.

Input parameters:

- `event_id` (string, required): Event ID to update
- `updates` (object, required): Properties to update, e.g. {"subject": "New Title", "location": {"displayName": "Room 1"}}

### `delete_event` (~61 tokens)

Delete a calendar event. If the user is the organizer, cancellation notices are sent to attendees.

Input parameters:

- `event_id` (string, required): Event ID to delete
- `send_cancellation` (boolean): Send cancellation email to attendees (organizer only). Defaults to true.

### `respond_event` (~77 tokens)

Accept, decline, or tentatively accept a calendar invitation.

Input parameters:

- `event_id` (string, required): Event ID to respond to
- `message` (string): Optional message to include with the response
- `response` (string): Response type. Defaults to accept.
- `send_response` (boolean): Send response email to organizer. Defaults to true.

### `check_availability` (~92 tokens)

Check free/busy schedule for the current user and optional additional attendees within a time window.

Input parameters:

- `attendees` (array): Additional attendee email addresses to check (current user is always included)
- `end` (string, required): End datetime in ISO 8601 format
- `start` (string, required): Start datetime in ISO 8601 format
- `timezone` (string): Timezone for start/end. Defaults to UTC.

### `search_events` (~38 tokens)

Search calendar events by keyword.

Input parameters:

- `limit` (integer): Max results. Defaults to 50.
- `query` (string, required): Search query string

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/0xka13b-ms-calendar-mcp/ms-calendar-mcp#diagnostics

## Score history

- 2026-08-04: 69
- 2026-08-03: 70
- 2026-08-02: 66
- 2026-08-01: 26
- 2026-07-31: 21
- 2026-07-30: 46
- 2026-07-28: 46
- 2026-07-27: 24

## Links

- npm package: https://www.npmjs.com/package/ms-calendar-mcp
- Socket report: https://socket.dev/npm/package/ms-calendar-mcp
- Repository: https://github.com/0xka13b/microsoft-mcps
- Changelog RSS feed: https://verifymcp.io/servers/0xka13b-ms-calendar-mcp/ms-calendar-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/0xka13b-ms-calendar-mcp/ms-calendar-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/0xka13b-ms-calendar-mcp/ms-calendar-mcp