Edit

Work IQ MCP overview (preview)

The Work IQ MCP server exposes Microsoft 365 intelligence capabilities to AI agents through the Model Context Protocol (MCP). It provides a set of generic tools that enable agents to read, create, update, and delete Microsoft 365 entities, invoke Microsoft 365 Copilot for natural-language reasoning, and discover API schemas - all through a single MCP endpoint.

Design principles

Work IQ MCP is built on the following design principles:

  • Fewer tools, more paths. Generic tools operate on resource paths. New workloads add paths, not tools - the tool surface never grows.
  • Introspection over enumeration. Agents ask for schemas at runtime (get_schema) rather than loading thousands of type definitions into context.
  • Policy over scopes. Four broad OAuth permissions gate capability; fine-grained access control is enforced per path, method, and tenant policy.

Tool categories

The 10 tools are organized into four categories:

Category Tools Description
Entity tools fetch, create_entity, update_entity, delete_entity, do_action, call_function CRUD operations and actions on Microsoft 365 resources via Microsoft Graph
Copilot tools ask, list_agents Invoke Microsoft 365 Copilot for natural-language intelligence and discover available agents
Schema tools get_schema, search_paths Discover available API paths and retrieve OpenAPI schemas at runtime

For detailed information about each tool, including parameters, see Work IQ MCP tool reference.

How tools work

Tools work with relative resource paths. The path shows the resource, and the tool acts as the verb:

fetch /me/messages                         → read my emails
do_action /me/sendMail                     → send an email
create_entity /me/events                   → create a calendar event
fetch /me/chats/{id}/messages              → read Teams chat messages
call_function /search/query                → semantic search
ask "What deals closed this quarter?"      → invoke Copilot agent

New workloads, backends, and data sources add paths, not tools. The tool surface stays fixed at 10.

Authentication

The Work IQ MCP server uses Microsoft Entra ID for authentication. MCP clients automatically discover the authentication configuration through the /.well-known/oauth-protected-resource endpoint. For details on required permissions, see Work IQ API permissions reference.

Related content

  • Last updated on