Microsoft OneDrive to MCP: Drive Microsoft OneDrive from any AI Agent

💡 No install? Use cloud.anythingmcp.com directly. Sign in, click Connectors → OneDrive (Microsoft 365), paste your credentials, mint an MCP API key and you're done. No Docker, no git clone, no local server.

Microsoft OneDrive

Let your AI work in OneDrive: browse and search files and folders, see details and who has access, create folders, upload and update text files, copy, rename and move. OneDrive for work or school and personal OneDrive through Microsoft Graph, signed in with your Microsoft account.

Setup

1. Open the Microsoft Entra admin center (entra.microsoft.com) or the Azure portal and go to Applications → App registrations → New registration.

2. Name the app (for example "AnythingMCP Microsoft 365") and choose the Supported account types. The choice decides what goes into MICROSOFT_TENANT_ID:

   • Accounts in this organizational directory only (single tenant): only users of your organisation can sign in. Use the Directory (tenant) ID from the app's Overview page (a GUID) or your domain, such as contoso.onmicrosoft.com.
   • Accounts in any organizational directory (multi-tenant): use organizations.
   • Accounts in any organizational directory and personal Microsoft accounts: use common (work, school and personal accounts) or consumers (personal accounts only).

   If the value does not match the account type, Microsoft refuses the sign-in (AADSTS50194 or AADSTS50020).

3. Under Redirect URI, pick the platform Web and enter https://cloud.anythingmcp.com/api/mcp-oauth/callback. If you host AnythingMCP yourself, enter https://your-anythingmcp-host/api/mcp-oauth/callback instead. The URI must match character for character, otherwise Microsoft answers AADSTS50011.

4. Open API permissions → Add a permission → Microsoft Graph → Delegated permissions and add offline_access, User.Read and Files.ReadWrite. offline_access is what makes Microsoft issue a refresh token; without it the connector stops an hour after you authorize it.

5. Open Certificates & secrets → New client secret. Copy the secret Value, not the Secret ID; it is shown only once. Note the expiry date: when the secret expires, the connector stops working until you create a new one and paste it in.

6. Paste the Application (client) ID from the Overview page into MICROSOFT_CLIENT_ID, the secret value into MICROSOFT_CLIENT_SECRET and the tenant value from step 2 into MICROSOFT_TENANT_ID, then install the connector.

7. On the connector page, click Authorize with Provider and sign in with the account whose OneDrive the AI should work with. The refresh token is stored encrypted, and access tokens (valid for about an hour) are renewed automatically.

8. Start with onedrive_get_drive: it shows which OneDrive the connector is signed in to and how much storage is left.

One Entra app for all Microsoft connectors: the app registration you made for the Outlook, SharePoint or Excel connector works here too. Open it, add the permission from step 4 under API permissions, keep the same redirect URI and reuse the same client ID, secret and tenant. Each connector asks only for its own permissions when you authorize it:

• Outlook: Mail.ReadWrite, Mail.Send, Calendars.ReadWrite
• OneDrive: Files.ReadWrite
• Excel: Files.ReadWrite (plus Files.ReadWrite.All for workbooks in SharePoint or shared with you)
• SharePoint: Sites.ReadWrite.All and Files.ReadWrite.All

All of them also need offline_access and User.Read.

Admin consent: these delegated permissions normally do not need an administrator, but many organisations turn off user consent. If the sign-in shows "Need admin approval" (AADSTS65001 or AADSTS90094), a tenant administrator opens the app registration once and clicks API permissions → Grant admin consent for the organisation. After that every user can authorize. Each connector still works only with what the account that signed in may see.

Files shared with you: Files.ReadWrite covers your own OneDrive. To open files that other people shared with you, add Files.ReadWrite.All to the app registration, replace Files.ReadWrite with it in the connector's OAuth settings and authorize again.

Read-only setup: replace the scopes in the connector's OAuth settings with offline_access User.Read Files.Read (or Files.Read.All), authorize again and disable onedrive_create_folder, onedrive_upload_text_file, onedrive_replace_file_content, onedrive_copy_item, onedrive_rename_item and onedrive_move_item.

Switched off at install: onedrive_delete_item, onedrive_create_sharing_link and onedrive_invite. Sharing links and invitations are off on purpose: they give other people access to your files, and a document the AI reads could contain text asking it to share something. Turn a tool on only if the AI really needs it. Deleted items go to the OneDrive recycle bin and can be restored from there.

Files and content: the connector lists, searches and describes files, but it does not download them: the AI gives you the file's link instead. It can create text files (.txt, .md, .csv, .json, .html, .xml) of up to about 4 MB and overwrite them; OneDrive keeps the previous content in the file's version history. For the cells of Excel workbooks, use the Microsoft Excel connector.

Common errors: 401 InvalidAuthenticationToken means the authorization was revoked or the client secret expired; paste a new secret if needed and click Authorize with Provider again. 403 accessDenied means a permission from step 4 is missing or was not consented, or you may not change that item. 404 itemNotFound means the id or path is wrong, the item was deleted or it lives in someone else's drive. 409 nameAlreadyExists means an item with that name is already in the folder. 423 resourceLocked means the file is open for editing or checked out.

The connector does not download file content, upload binary files or files over 4 MB, restore versions, empty the recycle bin or open other users' OneDrives and SharePoint libraries (the Microsoft SharePoint connector covers those).

Prerequisites: MICROSOFT_CLIENT_ID, MICROSOFT_CLIENT_SECRET, MICROSOFT_TENANT_ID

Install the connector locally

curl -fsSL https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml -o docker-compose.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d

Open http://localhost:3000/connectors/store, pick OneDrive (Microsoft 365) and paste in the env vars listed under Prerequisites.

Available tools

Example prompts

• "What's in my Documents/Reports 2026 folder, and which files changed this week?"
• "Find the files about the Hamburg trade fair, including the ones colleagues shared with me."
• "Create a folder Q4 Planning and save these meeting notes in it as notes.md."
• "Who has access to the Contracts folder, and does it have any sharing links?"

Next steps

• Connect to Claude
• Connect to ChatGPT