outlook-mcp-server

The project primarily uses the Win32COM interface, ensuring all email operations happen locally on the user's Windows machine, which enhances privacy as no data leaves the computer. Input sanitization for Outlook's DASL-like search criteria (e.g., `search_term.replace("'", "''")`) is implemented to mitigate potential injection risks for email filters. There are no obvious signs of 'eval' or 'exec' on untrusted input. The server uses FastMCP, which typically implies local inter-process communication with an AI client. While `outlook_graph_api.py` and `graph_api_auth_local.py` exist, they represent an alternative cloud-based approach not central to this particular repository's core Win32COM focus. The `client_id` in `graph_api_auth_local.py` is a public application ID for demonstration and not a secret. Overall, for a local desktop application, it appears reasonably secure against common external threats.