MICROSOFT 365 · TASKS
Task lists kept in Microsoft To Do, scoped to that person.
Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.
Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.
Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
microsoft_todo_add_task_attachmentWRITEAttach a file (max 3 MB, base64-encoded) to a To-Do task.
microsoft_todo_add_task_checklist_itemWRITEAdd a checklist item (sub-task) to a To-Do task.
microsoft_todo_complete_taskWRITEMark a To-Do task as completed.
microsoft_todo_create_shared_taskWRITECreate a task in a shared To-Do list. Requires Tasks.ReadWrite.Shared (grants write access to task lists shared by other users).
microsoft_todo_create_taskWRITECreate a new task in a Microsoft To-Do list.
microsoft_todo_create_task_listWRITECreate a new Microsoft To-Do task list.
microsoft_todo_delete_shared_taskWRITEDelete a task from a shared To-Do list. Requires Tasks.ReadWrite.Shared (grants delete access to tasks in lists shared by other users).
microsoft_todo_delete_taskWRITEDelete a task from a Microsoft To-Do list.
microsoft_todo_delete_task_attachmentWRITEDelete an attachment from a To-Do task.
microsoft_todo_delete_task_checklist_itemWRITEDelete a checklist item from a To-Do task.
microsoft_todo_delete_task_listWRITEDelete a Microsoft To-Do task list and all tasks within it.
microsoft_todo_get_taskREADGet a specific To-Do task.
microsoft_todo_list_shared_task_listsREADList To-Do task lists shared with the user by others. Requires Tasks.Read.Shared (grants access to task lists that others have explicitly shared with this user).
microsoft_todo_list_shared_tasksREADList tasks in a shared To-Do list. Requires Tasks.Read.Shared (grants read access to tasks in lists shared by other users).
microsoft_todo_list_task_attachmentsREADList all attachments on a To-Do task.
microsoft_todo_list_task_listsREADList the user's Microsoft To-Do task lists.
microsoft_todo_list_tasksREADList tasks in a Microsoft To-Do list.
microsoft_todo_reopen_taskWRITEReopen a completed To-Do task (reset status to notStarted).
microsoft_todo_update_shared_taskWRITEUpdate a task in a shared To-Do list. Requires Tasks.ReadWrite.Shared (grants write access to tasks in lists shared by other users).
microsoft_todo_update_taskWRITEUpdate a To-Do task.
microsoft_todo_update_task_checklist_itemWRITEUpdate a checklist item on a To-Do task (rename or check/uncheck).
microsoft_todo_update_task_listWRITERename a Microsoft To-Do task list.
Put Microsoft To Do behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.