Dev Tools & GitMCP Registrynpm7 toolsA · 82

Minerva MCP — Microsoft 365 & Azure

Name: Minerva MCP — Microsoft 365 & Azure
Author: HoussemMak

io.github.HoussemMak · Updated 3mo ago

Microsoft 365 & Azure admin: Graph, ARM, and the PowerShell cmdlets Graph does not expose.

At a glance

Minerva MCP — Microsoft 365 & Azure is an MCP server in the Dev Tools & Git category. It runs locally over stdio via `npx -y minerva-mcp --stdio`, and needs AZURE_CLIENT_SECRET. It exposes 7 tools, including microsoft_search, get_tenant_context and generate_security_report. It scores A (82/100) on the MCP Skills Hub health score as of Oct 28, 2026.

Source 1

One-click install

VS Code VS Code Insiders Cursor

Opens your editor and pre-fills the config. Your editor will ask before adding it.

How to install Minerva MCP — Microsoft 365 & Azure in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install Minerva MCP — Microsoft 365 & Azure in Claude CodeAnthropic's agentic CLI

Add the server

bash

claude mcp add minerva-mcp -e 'AZURE_CLIENT_SECRET=<AZURE_CLIENT_SECRET>' -- npx -y minerva-mcp --stdio

Fill in your credentials
Replace <AZURE_CLIENT_SECRET> with your real value. Keep secrets out of any config file you commit.
3
Verify it's connected
bash
```
claude mcp list
```
Sharing it with your team?
Add `--scope project` to write it to .mcp.json in the repository root, which you can commit (with the secrets left as environment variables).
Use it in a session
Ask Claude to use the tools this server exposes (e.g. microsoft_search, get_tenant_context, generate_security_report). It discovers them automatically.

How to install Minerva MCP — Microsoft 365 & Azure in Claude DesktopDesktop app (MCP config)

Open your MCP config
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

Add this server

json

{
  "mcpServers": {
    "minerva-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "minerva-mcp",
        "--stdio"
      ],
      "env": {
        "AZURE_CLIENT_SECRET": "<AZURE_CLIENT_SECRET>"
      }
    }
  }
}

Fill in your credentials
Replace <AZURE_CLIENT_SECRET> with your real value. Keep secrets out of any config file you commit.
Restart Claude Desktop
The tools appear under the 🔌 menu once the app reloads.

How to install Minerva MCP — Microsoft 365 & Azure in CursorAI-first code editor

Create / edit .cursor/mcp.json in your project

json

{
  "mcpServers": {
    "minerva-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "minerva-mcp",
        "--stdio"
      ],
      "env": {
        "AZURE_CLIENT_SECRET": "<AZURE_CLIENT_SECRET>"
      }
    }
  }
}

Fill in your credentials
Replace <AZURE_CLIENT_SECRET> with your real value. Keep secrets out of any config file you commit.
Enable it
Cursor Settings → MCP → toggle the server on. Tools become available to the Composer/Agent.

How to install Minerva MCP — Microsoft 365 & Azure in Codex CLIOpenAI coding agent

Add to ~/.codex/config.toml

toml

[mcp_servers.minerva-mcp]
command = "npx"
args = ["-y", "minerva-mcp", "--stdio"]
env = { AZURE_CLIENT_SECRET = "<AZURE_CLIENT_SECRET>" }

Fill in your credentials
Replace <AZURE_CLIENT_SECRET> with your real value. Keep secrets out of any config file you commit.
Run Codex
Codex loads MCP servers from config.toml on startup and exposes their tools to the agent.

How to install Minerva MCP — Microsoft 365 & Azure in WindsurfCodeium's agentic IDE

Edit ~/.codeium/windsurf/mcp_config.json

json

{
  "mcpServers": {
    "minerva-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "minerva-mcp",
        "--stdio"
      ],
      "env": {
        "AZURE_CLIENT_SECRET": "<AZURE_CLIENT_SECRET>"
      }
    }
  }
}

Fill in your credentials
Replace <AZURE_CLIENT_SECRET> with your real value. Keep secrets out of any config file you commit.
Reload
Windsurf → Cascade → refresh MCP servers. Cascade can now call the tools.

How to install Minerva MCP — Microsoft 365 & Azure in ClineVS Code autonomous agent

Open Cline → MCP Servers → Configure
Adds to cline_mcp_settings.json.

Add the server

json

{
  "mcpServers": {
    "minerva-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "minerva-mcp",
        "--stdio"
      ],
      "env": {
        "AZURE_CLIENT_SECRET": "<AZURE_CLIENT_SECRET>"
      }
    }
  }
}

Fill in your credentials
Replace <AZURE_CLIENT_SECRET> with your real value. Keep secrets out of any config file you commit.

How to install Minerva MCP — Microsoft 365 & Azure in VS CodeCopilot / MCP support

Create .vscode/mcp.json

json

{
  "servers": {
    "minerva-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "minerva-mcp",
        "--stdio"
      ],
      "env": {
        "AZURE_CLIENT_SECRET": "<AZURE_CLIENT_SECRET>"
      }
    }
  }
}

Fill in your credentials
Replace <AZURE_CLIENT_SECRET> with your real value. Keep secrets out of any config file you commit.
Start it
VS Code shows a ▶ Start action above the server entry. Agent mode (Copilot Chat) can then use the tools.

What does Minerva MCP — Microsoft 365 & Azure need from you?

API key — Client secret for app-only authentication. Leave unset to sign in interactively instead.

AZURE_TENANT_IDoptionalEnvironment variable
Entra tenant id. Only needed for unattended app-only sign-in; omit it to sign in interactively with a device code.
AZURE_CLIENT_IDoptionalEnvironment variable
Application (client) id. Defaults to the public Microsoft Graph PowerShell client, so it is optional for trying the server out.
AZURE_CLIENT_SECREToptionalsecretEnvironment variable
Client secret for app-only authentication. Leave unset to sign in interactively instead.
MINERVA_SHAREPOINT_URLoptionalEnvironment variable
SharePoint root URL, e.g. https://contoso.sharepoint.com. Required only by the SharePoint/PnP tool when PowerShell runs locally.

Pass secrets through your shell environment rather than committing them into a config file.

What tools does Minerva MCP — Microsoft 365 & Azure expose? (7)

Taken from the project's README — the server itself was not queried, so check its docs for the exact schemas.

microsoft_searchUnified Microsoft Search
get_tenant_contextOrganisation, licences, Secure Score
generate_security_reportTenant security posture
execute_exchange_onlineExchange Online cmdlets
execute_pnp_sharepointPnP PowerShell (SharePoint) cmdlets
execute_teams_adminTeams Admin cmdlets
execute_purview_compliancePurview / compliance cmdlets

What the code can do

Read from the published package source — never executed. Parsed 34 of 34 source files.

This server can run other programs on your machine, make network requests and read your environment variables.

How it was published

No provenance attestation — there is nothing linking this published artifact to a specific source commit.
1 npm maintainer — a single point of compromise · last published by houmak.

Maintainer of this package and think something here is wrong? Tell us and we'll correct it.

Before you install

Signals gathered from the source repo and package registry — not a safety verdict.

What it can reach

Runs code on your machine — Executes as a local process with your user's permissions, including filesystem access.
Downloads at launch — The package is fetched from its registry each run unless you pin a version.

Last commit 3 months ago — Actively maintained.
1 GitHub stars — Very little community usage so far.
45 weekly downloads — Very few installs — you would be an early user.

Client compatibility

Claude Code: NativeClaude Desktop: NativeCursor: NativeCodex CLI: NativeWindsurf: NativeCline: NativeVS Code: Native

Health score

A · 82

Maintenance, adoption, transparency and packaging — not a safety audit. How this is calculated

Maintenance30%91%
Last commit 91 days ago.
Adoption20%24%
1 stars, 45 weekly downloads.
Transparency20%100%
4/4: ✓ public source repo, ✓ declared license, ✓ documentation, ✓ discoverable tool list.
Provenance15%100%
Package and registry entry point at the same repository.
Packaging15%100%
Publishes a pinned version (0.4.2).

Documentation

Full README

Minerva MCP

Microsoft 365 and Azure administration for AI assistants — including the parts Microsoft Graph cannot reach.

An MCP server that lets Claude, Copilot, VS Code or any MCP client query and administer a Microsoft 365 tenant in plain language.

Why another Microsoft 365 MCP server?

There are already good ones, and this is not trying to replace them.

| | Lokka | ms-365-mcp-server | Minerva MCP | |---|:---:|:---:|:---:| | Microsoft Graph | ✅ | ✅ 300+ tools | ✅ generic call | | Azure Resource Manager | ✅ | — | ✅ | | Exchange Online cmdlets | — | — | ✅ | | SharePoint / PnP cmdlets | — | — | ✅ | | Teams Admin cmdlets | — | — | ✅ | | Purview / compliance cmdlets | — | — | ✅ | | Risk classification per action | — | — | ✅ | | Human approval before writes | — | read-only switch | ✅ native to the protocol | | MCP 2026-07-28 (stateless) | — | — | ✅ |

If you only need Graph, use Lokka or ms-365-mcp-server. They are excellent, more mature, and more widely used. Lokka in particular is written by a Microsoft Entra product manager.

Reach for this one when you hit the wall everyone hits eventually: a large part of Microsoft 365 administration has no Graph API. Mailbox permissions, transport rules, message trace, retention policies, sensitivity labels, Teams calling policies, SharePoint term stores, tenant-wide Exchange settings — those live in PowerShell and nowhere else. This server exposes them, with a risk classification and a confirmation step in front of anything that writes.

How it fits together

mermaid

flowchart LR
    A["AI clientClaude · VS Code · Copilot Studio"]
    B["minerva-mcp"]
    C{"Riskclassifier"}
    D["Humanconfirmation"]
    G["Microsoft GraphAzure ARM · Search"]
    P["PowerShell 7Exchange · PnP · Teams · Purview"]
    M["Microsoftauthorizes the token"]

    A -->|"stdio or HTTP"| B
    B --> C
    C -->|"read"| G
    C -->|"write"| D
    D -->|"signed mandate"| G
    D -->|"signed mandate"| P
    C -->|"read"| P
    G --> M
    P --> M

Reads go straight through. Writes stop at a classifier, come back to you as an input_required describing the action and its consequences, and only run once you confirm. Microsoft still has the final word: the server forwards a token, it never grants access.

Install

Excerpt — the full document is on GitHub.

Alternatives to Minerva MCP — Microsoft 365 & Azure

Maintain Minerva MCP — Microsoft 365 & Azure? Add a badge to your README

Shows its health grade, and links readers to install steps for every client.

markdown

[![Minerva MCP — Microsoft 365 & Azure on MCP Skills Hub](https://mcp-skills-hub.vercel.app/badge/io-github-houssemmak-minerva-mcp)](https://mcp-skills-hub.vercel.app/mcps/io-github-houssemmak-minerva-mcp)

Catalog data refreshed Oct 28, 2026. Something wrong? Report it.