Office Outlook

Host a copy with our keys and logs.

• OUTLOOK_ACCESS_TOKEN — Pre-obtained Outlook bearer token. Overrides the browser bridge. Power users / CI only; tokens last about 25 hours.
• OUTLOOK_DISABLE_FETCHPROXY — Set to '1' to disable browser capture, requiring OUTLOOK_ACCESS_TOKEN.
• OUTLOOK_API_BASE — Override the Outlook REST base URL. Defaults to https://outlook.office.com/api/v2.0.
• OUTLOOK_WS_PORT — fetchproxy concentrator port used for token capture. Defaults to 37149, the fleet-wide shared port.
• OUTLOOK_WEB_HOST — Which Outlook Web host your signed-in tab is on: outlook.cloud.microsoft (default) or outlook.office.com for a tenant still on the legacy app. Only this one host is declared to the browser bridge.
• OUTLOOK_CAPTURE_TIMEOUT — Seconds to wait for the Outlook tab to make a request we can read a token from. Defaults to 30.
• OUTLOOK_TOKEN_CACHE — Set to 'false' to stop caching the captured token between runs. Defaults to true.
• OUTLOOK_TOKEN_FILE — Path to the cached token file. Defaults to ~/.office-outlook-mcp/token.json.
• OUTLOOK_OUTPUT_DIR — Absolute directory where outlook_export_messages and outlook_export_events write their files. Defaults to ~/Downloads/office-outlook-mcp. When set, a per-call dest must be inside it.
• FETCHPROXY_WS_HOST — Bind interface for the fetchproxy concentrator, a literal IP only (default 127.0.0.1). Keep on loopback; it exists for hosted deployments that run each MCP in its own network namespace.
• FETCHPROXY_IDENTITY_DIR — Absolute path where the fetchproxy long-term identity keypair is stored (default ~/.fetchproxy/identity/).
• MCP_CONFIRM_MODE — What outlook_send_message, outlook_reply, outlook_respond_to_invite and the other write tools do on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop): "ask-user" (default: the first call returns a preview and a confirmToken, and the model must get your approval in chat before using it), "auto" (the model may use the token after reviewing the preview itself) or "refuse". An unrecognised value is treated as refuse.
• MCP_CONFIRM_ELICITATION — "off" never shows a confirmation prompt, so every client gets the MCP_CONFIRM_MODE flow. Set it for a client that says it can show prompts but never does. Defaults to on.
• MCP_CONFIRM_TTL_SECONDS — How long a confirmToken stays valid, in seconds. Defaults to 600.
• MCP_CONFIRM_SECRET — Signing key for confirmTokens. Random per process by default; set it only if tokens must survive a server restart.
• OUTLOOK_COPILOT_MSAL_CACHE — Path to the MSAL token cache written by `opencode-m365 login`, read by outlook_ask_copilot. Defaults to ~/.config/opencode-copilot/msal-cache.json.