OWA Exchange MCP Server

MCP (Model Context Protocol) server for any Microsoft Exchange / OWA (Outlook Web Access) deployment. Gives LLM agents access to email, calendar, directory search, folders, availability, and meeting analytics via 30 tools.

Works with any on-premise or hosted Exchange server that exposes OWA.

Quick Start

# Copy and edit the MCP config with your OWA URL
cp .mcp.json.example .mcp.json

# One-time: set up encrypted credentials
python3 login.py --setup

# Login (opens headless browser, 2FA approval required)
python3 login.py

# Install the MCP server
pip install -e .

Install

Add to your MCP client config. Replace https://owa.example.com with your OWA URL.

Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "exchange": {
      "command": "uvx",
      "args": ["exchange-mcp-server"],
      "env": {
        "EXCHANGE_OWA_URL": "https://owa.example.com"
      }
    }
  }
}

Cursor (.cursor/mcp.json):

{
  "mcpServers": {
    "exchange": {
      "command": "uvx",
      "args": ["exchange-mcp-server"],
      "env": {
        "EXCHANGE_OWA_URL": "https://owa.example.com"
      }
    }
  }
}

Claude Code (.mcp.json):

{
  "mcpServers": {
    "exchange": {
      "command": "uvx",
      "args": ["exchange-mcp-server"],
      "env": {
        "EXCHANGE_OWA_URL": "https://owa.example.com"
      }
    }
  }
}

Configuration

Variable	Required	Description
`EXCHANGE_OWA_URL`	Yes	Base URL of your OWA instance
`EXCHANGE_COOKIE_FILE`	No	Path to session cookies file (default: `session-cookies.txt`)

Login

Option A: Via MCP tool (recommended)

The login tool handles credential setup and authentication within the MCP session — no separate terminal needed.

First time (setup + login):

login(master_password="...", username="user@example.com", password="...")

Subsequent logins (decrypts stored credentials):

login(master_password="...")

Option B: Via CLI

python3 login.py --setup   # First time: save encrypted credentials
python3 login.py            # Login with 2FA

Both methods:

Open a headless browser to your OWA URL
Submit credentials
Wait for 2FA approval (up to 90 seconds)
Save encrypted session cookies to session-cookies.txt

Credentials and session cookies are encrypted at rest with AES-256 (PBKDF2 key derivation, 480k iterations).

Tools (30)

Email (10)

Tool	Description
`get_emails`	List emails from a folder with filtering
`get_email`	Get full email content by ID
`send_email`	Send a new email
`reply_email`	Reply to an email
`forward_email`	Forward an email
`delete_email`	Delete an email
`move_email`	Move email to another folder
`mark_email_read`	Mark email as read/unread
`download_attachments`	Download file attachments from an email
`get_email_links`	Extract hyperlinks from an email body

Calendar (7)

Tool	Description
`get_calendar_events`	Get events in a date range (supports recurring expansion)
`create_meeting`	Create a meeting with attendees
`update_meeting`	Update an existing meeting
`cancel_meeting`	Cancel a meeting and notify attendees
`respond_to_meeting`	Accept, decline, or tentatively accept
`download_event_attachments`	Download file attachments from a calendar event
`get_event_links`	Extract hyperlinks from an event description

Directory (1)

Tool	Description
`find_person`	Search people in Active Directory

Folders (7)

Tool	Description
`get_folders`	List mail folders with unread counts
`create_folder`	Create a new mail folder
`rename_folder`	Rename an existing folder
`empty_folder`	Empty all items from a folder
`delete_folder`	Delete a mail folder
`move_folder`	Move a folder to a different parent
`check_session`	Check if the OWA session is authenticated

Availability (2)

Tool	Description
`find_free_time`	Find free slots in your calendar
`find_meeting_time`	Find common free slots for multiple people

Analytics (2)

Tool	Description
`get_meeting_stats`	Meeting count statistics for multiple people
`get_meeting_contacts`	Connection matrix — who you meet with most

Auth (1)

Tool	Description
`login`	Authenticate to OWA (credential setup + 2FA login)

Files

login.py                  # Browser-based 2FA login (standalone CLI)
exchange_mcp/
  server.py               # FastMCP server entry point
  owa_client.py           # OWA HTTP client
  auth.py                 # Async login logic (shared by MCP tool)
  tools/
    email.py              # Email tools
    calendar.py           # Calendar tools
    people.py             # Directory search
    folders.py            # Folder management & session check
    availability.py       # Free time / meeting time
    analytics.py          # Meeting stats & contacts
    auth.py               # Login tool
pyproject.toml            # Package config

Warning

Every Exchange / OWA deployment has its own authentication setup — some require 2FA (push notifications, TOTP, SMS), others use single-factor login or SSO. The login logic in this project (login.py and exchange_mcp/auth.py) is written for a specific 2FA flow (mobile push approval). If your OWA server uses a different 2FA method or no 2FA at all, you will need to modify or remove the login logic to match your environment.

Security

Credentials and session cookies encrypted with AES-256-Fernet
Master password never stored
PBKDF2 with 480,000 iterations for key derivation
Credential and cookie files have 0600 permissions
Cookies decrypted into memory only — never written to disk as plaintext (via MCP tool)
Session cookies never transmitted except to your OWA server

OWA Exchange MCP Server

Quick Install

OWA Exchange MCP Server

Quick Start

Install

Configuration

Login

Option A: Via MCP tool (recommended)

Option B: Via CLI

Tools (30)

Email (10)

Calendar (7)

Directory (1)

Folders (7)

Availability (2)

Analytics (2)

Auth (1)

Files

Warning

Security

Reviews