Word (Microsoft 365)

Word

This connector works with Word documents (.docx, .docm and the older .doc) stored in OneDrive or SharePoint through Microsoft Graph v1.0 (https://graph.microsoft.com/v1.0, drive items): find documents, read their details, version history and who has access, get them as PDF or as the original file, create new ones from a template, rename, move, check out and in, and restore an earlier version. Everything runs as the user who authorized the connector: the AI sees and changes exactly what that user can. Work or school accounts (Microsoft 365) are fully supported; personal OneDrive supports search, details, download, PDF, copy, rename and move.

Setup (one-time, about 10 minutes)

1. Open https://entra.microsoft.com (or https://portal.azure.com) → Applications → App registrations → New registration.
2. Name it (e.g. "AnythingMCP Microsoft 365") and choose the supported account types:
   • Accounts in this organizational directory only (single tenant): set MICROSOFT_TENANT_ID to the Directory (tenant) ID shown on the app's Overview page (a GUID), or to your domain such as contoso.onmicrosoft.com.
   • Accounts in any organizational directory (multi-tenant): set MICROSOFT_TENANT_ID to organizations.
   • ... and personal Microsoft accounts: set MICROSOFT_TENANT_ID to common (work, school and personal accounts) or consumers (personal accounts only). The value must match the app's account type, otherwise Microsoft refuses the sign-in (AADSTS50194 or AADSTS50020).
3. Under Redirect URI pick platform Web and enter https://cloud.anythingmcp.com/api/mcp-oauth/callback on AnythingMCP Cloud, or <your AnythingMCP URL>/api/mcp-oauth/callback when you host AnythingMCP yourself. It must match character for character (AADSTS50011 otherwise).
4. API permissions → Add a permission → Microsoft Graph → Delegated permissions: add offline_access, User.Read, Files.ReadWrite (and Files.ReadWrite.All for documents in SharePoint, in Teams or shared with the user, see Scopes).
5. Certificates & secrets → New client secret. Copy the secret Value (not the Secret ID); it is shown once. Note its expiry date: when it expires the connector stops working until you paste a new one.
6. Paste the Application (client) ID into MICROSOFT_CLIENT_ID, the secret value into MICROSOFT_CLIENT_SECRET, the tenant value from step 2 into MICROSOFT_TENANT_ID, and install.
7. On the connector page click Authorize with Provider and sign in with the account whose documents the AI should work with. The refresh token is stored encrypted and access tokens (about 1 hour) are renewed automatically.

One Entra app for all Microsoft connectors: the app registration made for the Outlook, OneDrive or Excel connector works here as well. Add the delegated permissions from step 4, keep the same redirect URI, and reuse the same MICROSOFT_CLIENT_ID, MICROSOFT_CLIENT_SECRET and MICROSOFT_TENANT_ID. Each connector asks only for its own scopes when you authorize it.

Admin consent: these delegated permissions normally do not need an administrator, but many organisations turn off user consent. If the sign-in shows "Need admin approval" (AADSTS65001 or AADSTS90094), a tenant administrator opens the app registration → API permissions → Grant admin consent for <organisation> once.

Scopes: offline_access User.Read Files.ReadWrite. offline_access is what makes Microsoft issue a refresh token. Files.ReadWrite covers the user's own OneDrive. For documents in SharePoint libraries, in Teams channels or shared by other people, and for microsoft_word_find_documents, add Files.ReadWrite.All to the app registration and replace Files.ReadWrite with it in the connector's OAuth settings, then authorize again. For a read-only setup, use offline_access User.Read Files.Read.All, authorize again, and disable microsoft_word_copy_document, microsoft_word_rename_document, microsoft_word_move_document, microsoft_word_restore_version, microsoft_word_check_out and microsoft_word_check_in.

Switched off at install: microsoft_word_create_sharing_link and microsoft_word_delete_document; a sharing link hands the file to other people, and a document the AI reads could ask it to share or delete something, so an admin switches them on when the team needs them. Deleted documents go to the recycle bin and can be restored there.

Finding a document: every tool takes the document's drive_id and item_id.

• In the user's OneDrive: microsoft_word_search_my_documents (name and content search; it also returns other file types, keep the .docx hits) or microsoft_word_get_document_by_path (e.g. Documents/Contracts/Offer 2026.docx). Both return id and parentReference.driveId. microsoft_word_get_my_drive gives the OneDrive's own drive id.
• Everywhere (OneDrive, SharePoint, Teams, shared with the user): microsoft_word_find_documents with words or KQL, restricted to Word files. Hits are in hitsContainers[0].hits[]; use resource.id as item_id and resource.parentReference.driveId as drive_id. Work or school accounts only, with Files.Read.All or Files.ReadWrite.All.
• Browsing: microsoft_word_list_folder with item_id root lists the top of a drive, then folder ids.

Reading

• microsoft_word_get_document: name, size, who created and last changed it and when, webUrl (opens it in Word for the web: give it to the user), publication (check-out state in SharePoint).
• microsoft_word_convert_to_pdf: Microsoft 365 converts the document to PDF and the PDF is attached to the result, so the AI can read the text and layout. This is the way to read content: Graph has no API that returns the text of a document.
• microsoft_word_download_document: the original .docx file as an attachment, e.g. to hand it to another tool.
• History: microsoft_word_list_versions (newest first, ids like 4.0), microsoft_word_download_version for an earlier one.
• Access: microsoft_word_list_permissions. Files over 10 MB are described but not attached; give the user the webUrl instead.

Creating and changing documents: Graph cannot write into a document, and this connector cannot upload Word files (an upload would need the file's bytes in the call). To create a new document, keep a template in OneDrive or SharePoint and use microsoft_word_copy_document with a new name: the copy runs in the background and appears in the target folder after a few seconds (microsoft_word_list_folder to get its id). Then microsoft_word_rename_document and microsoft_word_move_document organise it, and the user edits it through webUrl.

• microsoft_word_restore_version makes an earlier version current; the replaced content stays in the history, so it can be undone. Work or school only.
• SharePoint libraries that require check-out: microsoft_word_check_out before the user edits, microsoft_word_check_in with a comment afterwards. A file checked out by someone else answers 423 resourceLocked.
• microsoft_word_create_sharing_link (switched off) makes a view or edit link for anonymous, organization or users.

Comments: Microsoft Graph v1.0 has no API for comments or tracked changes inside Word files, so this connector cannot read or add them.

Pagination: list and search answers carry @odata.nextLink while more results exist; call the same tool again with the same arguments and skip_token set to the $skiptoken (or skipToken) value in that link. microsoft_word_find_documents pages with from and size (moreResultsAvailable says whether there are more).

Rate limits: Microsoft Graph throttles per user and per app. A throttled call answers 429 or 503 with Retry-After; wait and retry. Converting a large document to PDF can take some seconds.

Common errors

• 401 InvalidAuthenticationToken: the authorization was revoked or the client secret expired. Paste a new secret if needed and click Authorize with Provider again.
• 403 accessDenied: a permission is missing or not consented, or the document belongs to someone else and the scope lacks Files.ReadWrite.All. microsoft_word_find_documents answers 403 without Files.Read.All or Files.ReadWrite.All.
• 404 itemNotFound: wrong drive or item id, or the item was deleted. A version id that does not exist also answers 404.
• 406 or 415 on microsoft_word_convert_to_pdf: the file type cannot be converted, or the file is password protected.
• 409 nameAlreadyExists: a file with that name exists in the folder; pick another name or conflict_behavior rename.
• 423 resourceLocked: the file is checked out or locked for editing.

Out of scope here: uploading Word files, editing their content, comments, and SharePoint site management (use the Microsoft SharePoint connector).