sharepoint-docs-mcp
Verified Safeby ncdcdev
Overview
Provides SharePoint and OneDrive document search and download functionality through an MCP server.
Installation
uvx --from git+https://github.com/ncdcdev/sharepoint-docs-mcp sharepoint-docs-mcp --transport stdioEnvironment Variables
- SHAREPOINT_BASE_URL
- SHAREPOINT_TENANT_ID
- SHAREPOINT_AUTH_MODE
- SHAREPOINT_CLIENT_ID
- SHAREPOINT_CERTIFICATE_PATH
- SHAREPOINT_CERTIFICATE_TEXT
- SHAREPOINT_PRIVATE_KEY_PATH
- SHAREPOINT_PRIVATE_KEY_TEXT
- SHAREPOINT_OAUTH_CLIENT_ID
- SHAREPOINT_OAUTH_CLIENT_SECRET
- SHAREPOINT_OAUTH_SERVER_BASE_URL
- SHAREPOINT_OAUTH_ALLOWED_REDIRECT_URIS
- SHAREPOINT_SITE_NAME
- SHAREPOINT_ONEDRIVE_PATHS
- SHAREPOINT_DEFAULT_MAX_RESULTS
- SHAREPOINT_ALLOWED_FILE_EXTENSIONS
- SHAREPOINT_SEARCH_TOOL_DESCRIPTION
- SHAREPOINT_DOWNLOAD_TOOL_DESCRIPTION
Security Notes
The server relies on Azure AD for authentication, supporting both certificate-based (application permissions) and OAuth (user delegated permissions) methods. It uses environment variables for sensitive configurations, preventing hardcoded secrets. The `SharePointTokenVerifier` explicitly notes it accepts SharePoint tokens without full cryptographic validation, relying on the OIDC proxy flow's security (PKCE, direct Azure AD issuance). This is a documented design choice, not a direct vulnerability, but it's a point of awareness. Robust error handling and network timeouts are implemented.
Similar Servers
ms-365-mcp-server
Provide an MCP server to interact with Microsoft 365 services like Email, Calendar, Files, and Teams via the Graph API.
mcp-omnisearch
Provides a unified interface for LLMs to access multiple web search, AI response, content processing, and enhancement tools from various providers through the Model Context Protocol (MCP).
files-mcp-server
This server provides a Model Context Protocol (MCP) interface for local testing with Microsoft OneDrive and SharePoint resources, enabling clients to interact with files, folders, sites, and libraries.
opensearch-mcp-server-py
Enables AI assistants to interact with OpenSearch clusters, providing a standardized interface for search, mapping, and shard management.