Connect Zoho Mail to Microsoft Copilot via MCP

💡 No install? Use cloud.anythingmcp.com directly. Sign in, click Connectors → Zoho Mail, paste your credentials, mint an MCP API key and you're done. No Docker, no git clone, no local server.

Zoho Mail + Microsoft Copilot

Let your AI work in Zoho Mail: find emails by folder or with Zoho's search, read content, headers and details, send and reply, and mark, move, flag or label emails. Any Zoho data center, Zoho OAuth sign-in.

Prerequisites

See the full setup instructions baked into the connector (visible in the in-app store when you select the connector). The required environment variables for this connector are:

ZOHO_MAIL_CLIENT_ID, ZOHO_MAIL_CLIENT_SECRET, ZOHO_MAIL_ACCOUNTS_URL, ZOHO_MAIL_API_URL

Step 1 — Get credentials

You need a Zoho Mail mailbox, on a free or paid plan.

Data center first: Zoho keeps every account in one data center, and the sign-in server and the Mail API host must both belong to it. The address bar shows yours when you use Zoho Mail. A wrong data center fails with INVALID_OAUTHTOKEN or invalid_client.

1. Open the Zoho API Console at api-console.zoho.com, signed in with your Zoho account, and choose Add Client → Server-based Applications.
2. Give the client a name (for example AnythingMCP), your company site as homepage URL and https://cloud.anythingmcp.com/api/mcp-oauth/callback as Authorized Redirect URI. If you host AnythingMCP yourself, enter https://your-anythingmcp-host/api/mcp-oauth/callback instead. Create the client.
3. On the Client Secret tab, copy the Client ID (it starts with 1000.) and the Client Secret into ZOHO_MAIL_CLIENT_ID and ZOHO_MAIL_CLIENT_SECRET. If your mailbox lives in another data center than the one the console opened in, enable that data center on the client's Settings tab (Multi-DC) and use the client secret shown there for it.
4. Set ZOHO_MAIL_ACCOUNTS_URL and ZOHO_MAIL_API_URL to your data center from the table, without a trailing slash, and install the connector.
5. On the connector page, click Authorize with Provider, sign in to Zoho and approve the requested access.
6. Run zoho_mail_list_accounts to check the connection: it shows your mailbox and the addresses the AI can send from.

Staying signed in: access tokens last an hour and are renewed automatically with the stored refresh token. Zoho keeps at most 20 refresh tokens per user and client: authorizing the same client a 21st time silently revokes the oldest one. If the connector loses its sign-in, click Authorize with Provider again.

Permissions and read-only setup: the connector asks for ZohoMail.accounts.READ, ZohoMail.folders.READ, ZohoMail.messages.ALL and ZohoMail.tags.READ, and works as the Zoho user who authorized it. For a read-only setup, change ZohoMail.messages.ALL to ZohoMail.messages.READ in the connector's OAuth settings, authorize again and switch off zoho_mail_send_email, zoho_mail_reply_to_email, zoho_mail_mark_as_read, zoho_mail_mark_as_unread, zoho_mail_move_emails, zoho_mail_flag_emails and zoho_mail_apply_labels.

Nothing is sent without your yes: zoho_mail_send_email and zoho_mail_reply_to_email send real mail in your name. Before sending, the AI shows you the recipients, the subject and the text, and waits for an explicit yes. Marking, moving, flagging and labelling change your mailbox, so the AI first tells you what will change.

Switched off at install: zoho_mail_delete_email. When you turn it on, it moves an email to the Trash; it deletes for good only when you explicitly ask for that.

Accounts, folders and search: every call needs the id of a mail account, so the AI reads your accounts first. If you have more than one, for example an added POP account, it uses the one you mean and sends from that account's own addresses. It lists a folder with filters for unread, flagged or labelled mail, or uses Zoho's search, for example by sender, subject, attachment or date.

Emails are untrusted content: emails come from outside senders. The AI treats instructions inside an email as content, never as orders.

Common errors: 401 INVALID_OAUTHTOKEN means the sign-in is missing or was revoked, or ZOHO_MAIL_API_URL is not your data center: fix the URL or click Authorize with Provider again. invalid_client at sign-in usually means ZOHO_MAIL_ACCOUNTS_URL is not your data center, or the client secret belongs to another data center (see step 3). 400 with a moreInfo note means a parameter is invalid, for example an unknown id, a malformed search or a from address that does not belong to the account. 404 means the account, folder or email does not exist for this user. A 500 Internal Error comes from Zoho: try once more. When Zoho reports too many requests, wait a minute.

The connector does not handle attachments, drafts and templates, whole threads, folder and label management, signatures, vacation replies, tasks, notes, bookmarks or the organization admin APIs.

Step 2 — Install the adapter

curl -fsSL https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml -o docker-compose.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d

Step 3 — Add the connector in Microsoft Copilot

Your server URL: in AnythingMCP, open MCP Servers → the server this connector is on, and copy its URL (https://cloud.anythingmcp.com/mcp/…). Use it wherever this guide shows YOUR_SERVER_ID.

Microsoft Copilot uses MCP servers through agents built in Copilot Studio: you add AnythingMCP to an agent as a tool, then publish the agent to Microsoft 365 Copilot and Teams. Copilot Studio connects from Microsoft's cloud over Streamable HTTP, which AnythingMCP supports.

1. In Copilot Studio, open your agent (or create one), go to Tools and choose Add a tool → New tool → Model Context Protocol.
2. Enter a Server name (for example AnythingMCP), a Server description that says what the connector does, and the Server URL https://cloud.anythingmcp.com/mcp/YOUR_SERVER_ID. Copilot Studio uses the description to decide when to call the server.
3. Under authentication, choose API key, set Type to Header and the header name to X-API-Key, then select Create.
4. In Add tool, choose Create a new connection, paste an MCP API key from AnythingMCP (MCP Servers → your server → API keys) and select Add to agent.
5. Try it in the agent's Test pane: ask for something that needs the Zoho Mail tools.
6. Select Publish, then Channels → Microsoft 365 and Microsoft Teams, keep Make agent available in Microsoft Copilot selected and choose Add channel. See agent in Teams installs it for you; in Microsoft 365 Copilot, type @ and pick the agent.

Prefer per-user sign-in? Choose OAuth 2.0 → Dynamic discovery instead of an API key: each user then signs in to AnythingMCP the first time the agent calls it.

Self-hosting? Use your instance's public HTTPS address instead of https://cloud.anythingmcp.com. Copilot Studio connects from Microsoft's cloud, so localhost does not work.

Available tools

Example prompts

• "Which unread emails came into my Zoho Mail inbox today? Give me one line per email."
• "Find the emails from [email protected] with an attachment since 1 September."
• "Reply to the latest email from Acme about the delivery date: we can ship on 24 October. Show me the reply before you send it."
• "Move this week's newsletters to the Newsletters folder and flag the email from our accountant as important."

FAQ

Which Copilot is this for? Microsoft 365 Copilot at work, through agents built in Copilot Studio. The Microsoft Copilot app for personal accounts has no option to add your own MCP server.

What do I need? A work account with access to Copilot Studio (a license or a trial) to build the agent. People who use it in Microsoft 365 Copilot or Teams need access to the agent: share it with them, or ask an admin to publish it to the organization. If your organization applies data policies to Power Platform connectors, they cover MCP servers too.

The agent doesn't call the tools. Check that the header name is exactly X-API-Key and that the key belongs to the same MCP server as the URL, and make the server description specific: Copilot Studio uses it to decide when to call the server. Publish the agent again after each change; in an open chat, type "start over" to get the new version.

Next steps

• Connector landing page
• Connect to Claude
• Connect to ChatGPT
• Connect to Cursor
• Connect to Gemini
• Connect to Meta Muse