MICROSOFT 365 · EMAIL
Mail read and send, scoped on its own rather than bundled with files.
Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.
Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.
Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
microsoft_outlook_add_attachment_to_draftWRITEAttach a file (base64-encoded) to a draft message.
microsoft_outlook_create_draftWRITECreate a draft email message.
microsoft_outlook_create_mail_folderWRITECreate a new mail folder.
microsoft_outlook_delete_mail_folderWRITEDelete a mail folder.
microsoft_outlook_delete_messageWRITEDelete an email message.
microsoft_outlook_delete_shared_mailbox_messageWRITEDelete a message from a shared mailbox.
microsoft_outlook_flag_messageWRITEFlag a message for follow-up.
microsoft_outlook_forward_messageWRITEForward an email to new recipients.
microsoft_outlook_get_attachmentREADGet a specific attachment from an email message.
microsoft_outlook_get_automatic_repliesREADGet automatic reply (out of office) settings.
microsoft_outlook_get_mailbox_settingsREADGet mailbox settings (timezone, auto-replies, working hours).
microsoft_outlook_get_mailbox_timezoneREADGet the user's mailbox timezone.
microsoft_outlook_get_messageREADGet a specific email message with full body.
microsoft_outlook_get_shared_mailbox_messageREADGet a specific message from a shared mailbox.
microsoft_outlook_list_attachmentsREADList attachments on an email message.
microsoft_outlook_list_mail_foldersREADList the user's mail folders.
microsoft_outlook_list_message_metadataREADList email message headers/metadata with minimal fields (no body).
microsoft_outlook_list_messagesREADList email messages from the user's mailbox.
microsoft_outlook_list_shared_mailbox_messagesREADList messages in a shared mailbox.
microsoft_outlook_mark_message_readWRITEMark a message as read.
microsoft_outlook_mark_message_unreadWRITEMark a message as unread.
microsoft_outlook_move_messageWRITEMove an email message to another mail folder.
microsoft_outlook_move_shared_mailbox_messageWRITEMove a message in a shared mailbox to another folder.
microsoft_outlook_reply_from_shared_mailboxWRITEReply to a message from a shared mailbox.
microsoft_outlook_reply_to_messageWRITEReply (or reply-all) to an email message.
microsoft_outlook_send_draftWRITESend a previously created draft.
microsoft_outlook_send_from_shared_mailboxWRITESend an email from a shared mailbox.
microsoft_outlook_send_mailWRITESend an email via Microsoft Outlook.
microsoft_outlook_unflag_messageWRITERemove the follow-up flag from a message.
microsoft_outlook_update_automatic_repliesWRITEUpdate automatic reply (out of office) settings.
microsoft_outlook_update_draftWRITEUpdate an existing draft email.
microsoft_outlook_update_mail_folderWRITERename a mail folder.
microsoft_outlook_update_mailbox_settingsWRITEUpdate mailbox settings.
Put Outlook behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.