# Microsoft 365 SharePoint (npm · @mindstone/mcp-server-microsoft-sharepoint)

Microsoft 365 SharePoint via Graph: sites, libraries, pages, lists, search, file/list mutations.

- Trust score: 77/100 (medium)
- Change this week: +31
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@mindstone/mcp-server-microsoft-sharepoint`: 77/100 (this document), [markdown](https://verifymcp.io/servers/mindstone-mcp-server-microsoft-sharepoint/mindstone-mcp-server-microsoft-sharepoint.md), [page](https://verifymcp.io/servers/mindstone-mcp-server-microsoft-sharepoint/mindstone-mcp-server-microsoft-sharepoint)

## Channel facts

- Registry: `npm`
- Package: `@mindstone/mcp-server-microsoft-sharepoint`
- Version: `0.1.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (105 of 109), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (105 of 109), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 84/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to mindstone/mcp-servers).
  - License check failed: the license (FSL-1.1-MIT) isn't a recognized OSI-approved license.
  - Actively maintained (last published 30 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 2498 tokens (~69/item across 36 items; 36 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add mindstone-mcp-server-microsoft-sharepoint -- npx -y @mindstone/mcp-server-microsoft-sharepoint
```

### Codex

```bash
codex mcp add mindstone-mcp-server-microsoft-sharepoint -- npx -y @mindstone/mcp-server-microsoft-sharepoint
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mindstone-mcp-server-microsoft-sharepoint": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mindstone/mcp-server-microsoft-sharepoint"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add mindstone-mcp-server-microsoft-sharepoint --command npx --arg -y --arg @mindstone/mcp-server-microsoft-sharepoint
```

### Hermes

```yaml
mcp_servers:
  mindstone-mcp-server-microsoft-sharepoint:
    command: "npx"
    args: ["-y", "@mindstone/mcp-server-microsoft-sharepoint"]
```

### Other

```json
{
  "mcpServers": {
    "mindstone-mcp-server-microsoft-sharepoint": {
      "command": "npx",
      "args": [
        "-y",
        "@mindstone/mcp-server-microsoft-sharepoint"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 76, +71)

- [security improvement] Install scripts: unverified → pass
- [security improvement] Provenance: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] The attested source repository moved: mindstone/mcp-servers
- [functional regression] License: unverified → fail
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Stability: unverified → 0.20
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → excellent
- [functional] Licence: FSL-1.1-MIT

### 2026-08-01 (score 5, −16)

- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-31 (score 21, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (36)

### `authenticate_sharepoint` (~79 tokens)

Grant SharePoint permissions for your Microsoft 365 account.

Call this tool when:
1\. Other SharePoint tools return "SharePoint permissions not granted" errors
2\. The user asks to connect or enable SharePoint access

This tool returns a structured auth_required response. The host will
recognise it and dispatch the incremental SharePoint consent flow.

### `list_sharepoint_sites` (~73 tokens)

Search for and list SharePoint sites accessible to the user. Returns site name, URL, and description.

Input parameters:

- `query` (string): Search query to filter sites (e.g., "Marketing"). If omitted, lists all accessible sites.
- `top` (number): Max sites to return (default: 25)

### `get_sharepoint_site` (~70 tokens)

Get details about a specific SharePoint site by ID or hostname path.

Input parameters:

- `siteId` (string): SharePoint site ID (e.g., "contoso.sharepoint.com,abc123,def456") or hostname path (e.g., "contoso.sharepoint.com:/sites/Marketing")

### `list_site_document_libraries` (~52 tokens)

List document libraries (drives) in a SharePoint site.

Input parameters:

- `siteId` (string): SharePoint site ID
- `top` (number): Max libraries to return (default: 50)

### `list_library_files` (~86 tokens)

List files and folders in a SharePoint document library. Defaults to root folder.

Input parameters:

- `driveId` (string): Document library (drive) ID from list_site_document_libraries
- `path` (string): Folder path within the library (e.g., "General/Reports"). Omit for root.
- `top` (number): Max items to return (default: 50)

### `get_library_file` (~51 tokens)

Get metadata for a specific file or folder in a SharePoint document library.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `itemId` (string): File or folder item ID

### `download_library_file` (~54 tokens)

Get a download URL for a file in a SharePoint document library (valid for a short period).

Input parameters:

- `driveId` (string): Document library (drive) ID
- `itemId` (string): File item ID

### `search_library_files` (~60 tokens)

Search for files in a SharePoint document library by name or content.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `query` (string): Search query
- `top` (number): Max results (default: 25)

### `read_library_text_file` (~83 tokens)

Read the contents of a text file in a SharePoint document library. Only works with text files (txt, md, json, csv, etc.).

Input parameters:

- `driveId` (string): Document library (drive) ID
- `itemId` (string): File item ID
- `maxSize` (number): Max bytes to read (default: 100KB)

### `upload_library_file` (~70 tokens)

Upload a text file to a SharePoint document library (max 4MB).

Input parameters:

- `content` (string): File content (text)
- `driveId` (string): Document library (drive) ID
- `path` (string): Destination path including filename (e.g., "General/notes.txt")

### `create_library_folder` (~54 tokens)

Create a new folder in a SharePoint document library.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `path` (string): Full path for new folder (e.g., "General/NewFolder")

### `delete_library_item` (~48 tokens)

Delete a file or folder from a SharePoint document library.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `itemId` (string): File or folder item ID

### `move_library_item` (~99 tokens)

Move a file or folder to a new location in a SharePoint document library.

Input parameters:

- `destinationDriveId` (string): Destination drive ID (if moving between libraries)
- `destinationFolderId` (string): Destination folder item ID
- `driveId` (string): Source document library (drive) ID
- `itemId` (string): File or folder item ID to move
- `newName` (string): Optional new name for the item

### `copy_library_item` (~99 tokens)

Copy a file or folder to a new location in a SharePoint document library.

Input parameters:

- `destinationDriveId` (string): Destination drive ID (if copying between libraries)
- `destinationFolderId` (string): Destination folder item ID
- `driveId` (string): Source document library (drive) ID
- `itemId` (string): File or folder item ID to copy
- `newName` (string): Optional new name for the copy

### `list_site_pages` (~64 tokens)

List pages in a SharePoint site (Home, About, wiki pages, etc.). Returns page title, URL, and modification info.

Input parameters:

- `siteId` (string): SharePoint site ID
- `top` (number): Max pages to return (default: 25)

### `read_site_page` (~54 tokens)

Read the content of a SharePoint site page. Returns the page HTML content from web parts.

Input parameters:

- `pageId` (string): Page ID from list_site_pages
- `siteId` (string): SharePoint site ID

### `list_site_lists` (~71 tokens)

List SharePoint lists in a site (task lists, custom lists, tracking sheets, etc.). Does not include document libraries — use list_site_document_libraries for those.

Input parameters:

- `siteId` (string): SharePoint site ID
- `top` (number): Max lists to return (default: 50)

### `list_list_items` (~90 tokens)

List items in a SharePoint list with all field values. Supports OData filtering.

Input parameters:

- `filter` (string): OData filter expression (e.g., "fields/Status eq 'Active'")
- `listId` (string): List ID from list_site_lists
- `siteId` (string): SharePoint site ID
- `top` (number): Max items to return (default: 50)

### `get_list_item` (~55 tokens)

Get a specific item from a SharePoint list with all field values.

Input parameters:

- `itemId` (string): Item ID
- `listId` (string): List ID
- `siteId` (string): SharePoint site ID

### `create_list_item` (~72 tokens)

Create a new item in a SharePoint list.

Input parameters:

- `fields` (object): Column values for the new item (e.g., { "Title": "New task", "Status": "Active" })
- `listId` (string): List ID
- `siteId` (string): SharePoint site ID

### `update_list_item` (~73 tokens)

Update an existing item in a SharePoint list.

Input parameters:

- `fields` (object): Column values to update (e.g., { "Status": "Complete" })
- `itemId` (string): Item ID
- `listId` (string): List ID
- `siteId` (string): SharePoint site ID

### `delete_list_item` (~50 tokens)

Delete an item from a SharePoint list.

Input parameters:

- `itemId` (string): Item ID
- `listId` (string): List ID
- `siteId` (string): SharePoint site ID

### `search_sharepoint` (~81 tokens)

Search across all SharePoint sites, document libraries, lists, and list items. More powerful than search_library_files which only searches within a single library.

Input parameters:

- `entityTypes` (array): Types of content to search (default: all types)
- `query` (string): Search query text
- `top` (number): Max results (default: 25)

### `rename_library_item` (~65 tokens)

Rename a file or folder in a SharePoint document library.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `itemId` (string): File or folder item ID
- `newName` (string): New name for the item (include file extension)

### `create_sharing_link` (~103 tokens)

Create a sharing link for a file or folder in a SharePoint document library. Returns a URL that can be shared with others.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `itemId` (string): File or folder item ID
- `scope` (string): Who can use the link (default: "organization")
- `type` (string): Link type: "view" for read-only, "edit" for read-write

### `list_subsites` (~59 tokens)

List subsites of a SharePoint site. Use this to discover nested sites within a site collection.

Input parameters:

- `siteId` (string): Parent SharePoint site ID
- `top` (number): Max subsites to return (default: 50)

### `get_recent_files` (~50 tokens)

Get recently accessed files from the current user's OneDrive and SharePoint. Useful for finding files the user was recently working on.

Input parameters:

- `top` (number): Max files to return (default: 25)

### `get_library_tree` (~120 tokens)

Get a recursive tree view of a SharePoint document library. Shows the full folder/file hierarchy at a glance. Useful for understanding library structure before navigating into specific folders.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `folderId` (string): Start from this folder ID instead of root
- `maxDepth` (number): Max folder depth to recurse (default: 10, max: 15)
- `maxItemsPerLevel` (number): Max items per folder level (default: 100, max: 200)

### `get_file_metadata` (~70 tokens)

Get custom metadata (SharePoint column values) for a file or folder. Returns all custom fields added by site administrators, such as Department, Status, Category, etc.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `itemId` (string): File or folder item ID

### `update_file_metadata` (~93 tokens)

Update custom metadata (SharePoint column values) for a file or folder. Set values for custom fields like Department, Status, Category, etc.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `fields` (object): Column values to update (e.g., { "Department": "Marketing", "Status": "Approved" })
- `itemId` (string): File or folder item ID

### `get_site_drive` (~58 tokens)

Get detailed metadata for a specific document library (drive) in a SharePoint site, including quota and owner info.

Input parameters:

- `driveId` (string): Document library (drive) ID
- `siteId` (string): SharePoint site ID

### `list_site_items` (~59 tokens)

List base items across all lists and libraries in a SharePoint site. Returns a cross-list view of content.

Input parameters:

- `siteId` (string): SharePoint site ID
- `top` (number): Max items to return (default: 50)

### `get_site_item` (~49 tokens)

Get a specific base item from a SharePoint site by ID, including its field values.

Input parameters:

- `itemId` (string): Item ID
- `siteId` (string): SharePoint site ID

### `get_site_list` (~52 tokens)

Get detailed metadata for a specific SharePoint list, including template type, visibility, and content type settings.

Input parameters:

- `listId` (string): List ID
- `siteId` (string): SharePoint site ID

### `get_site_by_path` (~66 tokens)

Resolve a SharePoint subsite by its relative path from a parent site. Useful for finding sites by URL structure.

Input parameters:

- `path` (string): Relative path to subsite (e.g., "/departments/hr")
- `siteId` (string): Parent SharePoint site ID

### `get_sites_delta` (~66 tokens)

Track changes across SharePoint sites. Returns sites that have been added, modified, or deleted since the last delta query. Pass the deltaLink from a previous response to get incremental changes.

Input parameters:

- `deltaLink` (string): Delta link from a previous response. Omit for initial sync.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/mindstone-mcp-server-microsoft-sharepoint/mindstone-mcp-server-microsoft-sharepoint#diagnostics

## Score history

- 2026-08-03: 77
- 2026-08-02: 76
- 2026-08-01: 5
- 2026-07-31: 21
- 2026-07-30: 46
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/@mindstone/mcp-server-microsoft-sharepoint
- Socket report: https://socket.dev/npm/package/@mindstone/mcp-server-microsoft-sharepoint
- Repository: https://github.com/mindstone/mcp-servers
- Changelog RSS feed: https://verifymcp.io/servers/mindstone-mcp-server-microsoft-sharepoint/mindstone-mcp-server-microsoft-sharepoint/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/mindstone-mcp-server-microsoft-sharepoint/mindstone-mcp-server-microsoft-sharepoint/changelog.json
- HTML version of this page: https://verifymcp.io/servers/mindstone-mcp-server-microsoft-sharepoint/mindstone-mcp-server-microsoft-sharepoint