microsoft-graph-mcp-server

The server uses `msal` for authentication and `httpx` for API calls, which are standard and secure libraries. Environment variables are correctly used for storing credentials, preventing hardcoding. Broad Azure AD application permissions (User.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All) are required, which is a significant privilege and necessitates careful management of the client secret and adherence to the principle of least privilege. The `install.sh` script uses `curl | sh` for `uv` installation, a common but potentially risky practice. Overall, the code itself follows good security practices, but the security of the deployment relies heavily on proper Azure AD configuration and secret management by the user.