Microsoft SharePoint MCP server.
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
list_sitesSearch and list SharePoint sites accessible to the signed-in user.Search and list SharePoint sites accessible to the signed-in user.
No input schema was published for this tool.
get_siteGet metadata for a SharePoint site by its Graph site ID or hostname:path form.Get metadata for a SharePoint site by its Graph site ID or hostname:path form.
No input schema was published for this tool.
get_site_idResolve a SharePoint site hostname and server-relative path to its Graph GUID. Use the returned id with other tools.Resolve a SharePoint site hostname and server-relative path to its Graph GUID. Use the returned id with other tools.
No input schema was published for this tool.
get_driveGet the default document library (drive) for a SharePoint site, or a specific drive when drive_id is supplied.Get the default document library (drive) for a SharePoint site, or a specific drive when drive_id is supplied.
No input schema was published for this tool.
list_listsList all lists and document libraries in a SharePoint site.List all lists and document libraries in a SharePoint site.
No input schema was published for this tool.
get_listGet metadata and column schema for a specific SharePoint list or library.Get metadata and column schema for a specific SharePoint list or library.
No input schema was published for this tool.
list_columnsList all column definitions for a SharePoint list.List all column definitions for a SharePoint list.
No input schema was published for this tool.
list_itemsQuery items in a SharePoint list with optional OData $filter, $select, and pagination.Query items in a SharePoint list with optional OData $filter, $select, and pagination.
No input schema was published for this tool.
get_itemGet a single SharePoint list item by its ID, including all field values.Get a single SharePoint list item by its ID, including all field values.
No input schema was published for this tool.
create_itemCreate a new item in a SharePoint list.Create a new item in a SharePoint list.
No input schema was published for this tool.
update_itemUpdate one or more fields of an existing SharePoint list item.Update one or more fields of an existing SharePoint list item.
No input schema was published for this tool.
delete_itemprivilegedPermanently delete a SharePoint list item.Permanently delete a SharePoint list item.
No input schema was published for this tool.
upload_fileprivilegedUpload a file to a SharePoint document library. Files over 4 MB are automatically chunked via an upload session.Upload a file to a SharePoint document library. Files over 4 MB are automatically chunked via an upload session.
No input schema was published for this tool.
download_fileDownload a file from a SharePoint document library. Returns content as base64.Download a file from a SharePoint document library. Returns content as base64.
No input schema was published for this tool.
create_folderCreate a folder in a SharePoint document library.Create a folder in a SharePoint document library.
No input schema was published for this tool.
delete_fileprivilegedPermanently delete a file or folder from a SharePoint document library.Permanently delete a file or folder from a SharePoint document library.
No input schema was published for this tool.
get_file_contentRetrieve the raw text content of a file in SharePoint. Best for plain-text, CSV, JSON, or Markdown files.Retrieve the raw text content of a file in SharePoint. Best for plain-text, CSV, JSON, or Markdown files.
No input schema was published for this tool.
get_file_metadataGet file properties (name, size, MIME type, created/modified dates, web URL) without downloading content.Get file properties (name, size, MIME type, created/modified dates, web URL) without downloading content.
No input schema was published for this tool.
get_documentRetrieve both metadata and text content of a SharePoint file in one call. Optimised for AI consumption of documents.Retrieve both metadata and text content of a SharePoint file in one call. Optimised for AI consumption of documents.
No input schema was published for this tool.
searchRun a Microsoft Search query across SharePoint content with full control over entity types and result shape.Run a Microsoft Search query across SharePoint content with full control over entity types and result shape.
No input schema was published for this tool.
search_sharepointFocused full-text search across SharePoint lists and document libraries with ranked results. Supports KQL syntax (e.g. 'budget filetype:xlsx', 'author:"John Smith"').Focused full-text search across SharePoint lists and document libraries with ranked results. Supports KQL syntax (e.g. 'budget filetype:xlsx', 'author:"John Smith"').
No input schema was published for this tool.
get_user_profileGet the signed-in user's Microsoft 365 profile (id, displayName, mail, jobTitle, department, etc.).Get the signed-in user's Microsoft 365 profile (id, displayName, mail, jobTitle, department, etc.).
No input schema was published for this tool.
create_siteCreate a new SharePoint site. Team sites are provisioned via a Microsoft 365 Group (requires Group.ReadWrite.All). Communication sites are created via the SharePoint REST API (requires Sites.FullControl.All).Create a new SharePoint site. Team sites are provisioned via a Microsoft 365 Group (requires Group.ReadWrite.All). Communication sites are created via the SharePoint REST API (requires Sites.FullControl.All).
No input schema was published for this tool.
23 of 23 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Microsoft SharePoint MCP server.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
55 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+43 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.