SIMOSphere AI · Governed Access for Microsoft 365

SIMOSphere AI даёт ассистенту контролируемый доступ к почте, календарю и SharePoint в Microsoft 365

От сообществаРаботаетБез входаГлобальныйБесплатноТолько чтение

Что умеет

  • Читать и отправлять почту, искать письма по KQL-запросам
  • Создавать события и находить время встречи в календаре
  • Искать файлы и страницы в SharePoint и OneDrive
  • Искать людей и узнавать структуру подчинения
  • Читать и загружать файлы в библиотеки документов сайта

Какие данные видит

Ассистент получает доступ к ресурсам Microsoft 365 конкретного пользователя с контролем прав по каждому ресурсу и полным журналом действий.

Нужен ли аккаунт

Не нужен: сервер работает без входа

SIMOSphere AI — инфраструктура управления доступом AI к Microsoft 365, развёрнутая в собственном Azure-тенанте компании. MCP-сервер даёт 24 инструмента Microsoft Graph с контролем прав по каждому ресурсу, фильтром по принципу «нужно знать» и полным аудиторским следом действий. Подходит для регулируемых отраслей — банков, страховых, фармы и критической инфраструктуры.

Как подключить

Как подключить SIMOSphere AI · Governed Access for Microsoft 365 к Claude

Адрес сервера, который нужно вставить в настройках Claude:

https://m365-governance--simosphereai.run.tools

  1. Откройте Claude (сайт claude.ai или приложение для компьютера).
  2. Перейдите в Настройки → Коннекторы (в английском интерфейсе: Settings → Connectors).
  3. Нажмите Добавить пользовательский коннектор (Add custom connector).
  4. Вставьте адрес сервера, скопированный ниже, в поле URL удалённого MCP-сервера и нажмите Добавить.
  5. В чате нажмите + → Коннекторы и включите новый коннектор.

Пользовательские коннекторы доступны на тарифах Free, Pro, Max, Team и Enterprise. На Free можно добавить только один. В Team и Enterprise коннектор сначала добавляет владелец организации в Настройки организации → Коннекторы.

Авторизация

После нажатия Добавить откроется окно входа в сервис. Войдите под своим аккаунтом и подтвердите доступ. Пароль Claude не видит.

Как подключить SIMOSphere AI · Governed Access for Microsoft 365 к ChatGPT

Адрес сервера, который нужно вставить в настройках ChatGPT:

https://m365-governance--simosphereai.run.tools

  1. Откройте ChatGPT в браузере (chatgpt.com). Нужен тариф Plus, Pro, Business, Enterprise или Edu.
  2. Один раз включите режим разработчика: Настройки → Приложения → Дополнительные настройки → Режим разработчика (Settings → Apps → Advanced settings → Developer mode).
  3. Откройте Настройки → Коннекторы и нажмите Создать (Create).
  4. Заполните форму: Название (любое), Описание (одна фраза, что делает сервис), URL MCP-сервера (скопируйте ниже).
  5. В поле Аутентификация выберите OAuth, если сервис требует вход, иначе Нет. Нажмите Создать.
  6. В новом чате откройте + → Приложения/Коннекторы и включите коннектор.

Название раздела у OpenAI менялось (Connectors → Apps/Plugins). Если пункт называется иначе, ищите «режим разработчика» в настройках. В рабочих пространствах Business/Enterprise администратор должен разрешить пользовательские коннекторы.

Авторизация

При первом использовании ChatGPT откроет окно входа в сервис. Войдите и подтвердите доступ.

Как подключить SIMOSphere AI · Governed Access for Microsoft 365 к Cursor

Адрес сервера, который нужно вставить в настройках Cursor:

https://m365-governance--simosphereai.run.tools

Быстрый способ: нажмите кнопку Открыть в Cursor ниже, Cursor сам предложит добавить сервер.

Вручную:

  1. В Cursor откройте Settings → Cursor Settings → MCP и нажмите Add new global MCP server.
  2. Вставьте JSON, скопированный ниже, в открывшийся файл ~/.cursor/mcp.json (для одного проекта: .cursor/mcp.json в корне проекта).
  3. Сохраните файл. Сервер появится в списке MCP; при необходимости пройдите авторизацию по кнопке рядом с ним.

Авторизация

Если сервис требует вход, рядом с сервером в списке MCP появится кнопка авторизации.

Список инструментов сервера (24)

Технические названия из tools/list. Нужны только разработчикам.

identity.meRetrieve the profile of the connected Microsoft 365 user, including id, display name, email address, job title, office location, and user principal name. Requires the User.Read.All application permission. Useful for confirming which mailbox the current API token is bound to.
mail.listList the most recent messages in a mail folder of the connected mailbox. Returns id, subject, sender, received date, body preview, read status, and attachment indicator. Defaults to the Inbox; use the folder parameter to access SentItems, Drafts, or any custom folder. Supports pagination via top and skip. Requires the Mail.Read application permission. Results may be filtered by the tenant Need-to-Know policy.
mail.searchSearch the connected mailbox using KQL (Keyword Query Language) syntax. Searches across all mail folders and returns matching messages with id, subject, sender, received date, and body preview. Example queries: "from:alice@example.com subject:budget", "hasAttachments:true received>2024-01-01". Requires the Mail.Read application permission. Results may be filtered by the tenant Need-to-Know policy.
mail.readRead a single email message by its ID, including the full HTML body, sender, recipients (to and cc), received date, and attachment indicator. Use this after mail.list or mail.search to retrieve the complete content of a specific message. Requires the Mail.Read application permission. The body may be redacted by the tenant Need-to-Know policy.
mail.sendSend an email on behalf of the connected mailbox owner. The server automatically appends a signed audit footer with a verification link to every outgoing message; this footer cannot be removed or suppressed. Sending is subject to the mailbox sending policy: per-hour quota, maximum recipients per message, and optional external-recipient restrictions. If the mailbox has confirmation mode enabled, the message enters a pending state until the mailbox owner approves it. Requires the Mail.Send application permission. This action is irreversible once the message is delivered.
mail.draftCreate a draft email in the connected mailbox owner's Drafts folder. The draft is not sent automatically and must be reviewed and sent manually by the mailbox owner in their mail client. Accepts the same parameters as mail.send (to, cc, subject, bodyHtml). Unlike mail.send, no audit footer is appended to drafts. Requires the Mail.ReadWrite application permission.
mail.replyReply to an existing email message on behalf of the connected mailbox owner. Fetches the original message to determine recipients, then sends the reply through the same pipeline as mail.send: the signed audit footer is appended, sending policy quotas apply, and confirmation mode is respected if enabled. Set replyAll to true to include all original recipients (to and cc). Requires the Mail.Send application permission. This action is irreversible once delivered.
calendar.listList upcoming calendar events for the connected mailbox owner within a time window. Defaults to the next 14 days if no date range is specified. Returns event id, subject, start/end times, attendees, location, and all-day indicator, ordered by start time. Useful for checking schedules and finding upcoming meetings. Requires the Calendars.Read application permission.
calendar.createCreate a new calendar event on the connected mailbox owner's primary calendar. Supports adding attendees, a physical or virtual location, and an HTML description body. Set isOnlineMeeting to true to automatically provision a Microsoft Teams meeting link. Invitation emails are sent to attendees by Microsoft 365. Requires the Calendars.ReadWrite application permission.
calendar.findMeetingTimesFind available meeting time slots where all specified attendees are free. Returns suggested time windows based on calendar availability within the given date range. Useful for scheduling meetings without conflicts. If no time range is specified, Microsoft 365 uses default business hours for the next few days. Requires the Calendars.Read application permission.
calendar.freeBusyRetrieve the free/busy availability schedule for one or more Microsoft 365 users within a specified time range. Returns an availability view string per user, where each character represents the status for one time interval (0=free, 1=tentative, 2=busy, 3=out-of-office, 4=working-elsewhere). Useful for quickly checking who is available at a glance. Supports up to 20 users per request. Requires the Calendars.Read application permission.
files.listList files and folders in the connected mailbox owner's OneDrive. Returns id, name, size, file/folder type, web URL, and last modified date for each item. Use itemId="root" to list the drive root, or pass a specific folder ID to list its children. Requires the Files.Read.All application permission.
files.searchSearch the connected mailbox owner's OneDrive for files and folders by name or content. Returns matching items with id, name, web URL, size, and last modified date. The search covers file names, folder names, and indexed file contents (e.g. text inside Office documents and PDFs). Requires the Files.Read.All application permission.
people.searchSearch contacts and the Microsoft Entra ID directory from the connected mailbox owner's perspective. Returns matching people with id, display name, email addresses, job title, and company name, ranked by relevance to the mailbox owner (frequent contacts rank higher). Useful for finding email addresses, resolving names, or discovering colleagues. Requires the User.Read.All application permission.
people.myManagerRetrieve the direct manager of the connected mailbox owner as configured in Microsoft Entra ID (Azure AD). Returns the manager's profile including display name, email, and job title, or {manager: null} if no manager is assigned. Requires the User.Read.All application permission.
site.metadataRetrieve metadata for the connected SharePoint site, including display name, web URL, description, creation and last-modified dates, and site collection details. Useful for confirming which SharePoint site the current API token is bound to. Requires the Sites.Selected application permission.
site.listsList all SharePoint lists and document libraries on the connected site. Returns id, name, display name, description, list type metadata, and creation/modification dates for each list. Use the returned list ID with site.list.items to retrieve individual list items. Requires the Sites.Selected application permission.
site.list.itemsList items from a specific SharePoint list on the connected site, with all custom fields expanded. Returns up to 200 items per request. Use the list ID obtained from site.lists. Each item includes its fields (columns) as key-value pairs. Requires the Sites.Selected application permission.
site.searchSearch the connected SharePoint site for matching pages, list items, and files using the Microsoft Search API. The search is automatically scoped to the site's URL path. Returns results across drive items, list items, and site pages. Requires the Sites.Selected application permission.
site.drive.listList files and folders in the connected SharePoint site's default document library. Returns id, name, size, file/folder type, web URL, and last modified date for each item. Use folderId="root" to list the library root, or pass a specific folder ID to list its children. Requires the Sites.Selected application permission.
site.drive.readGet detailed metadata and thumbnail URLs for a single file or folder in the connected SharePoint site's default document library. Returns the full drive item resource including name, size, web URL, parent reference, and expanded thumbnail collection. Requires the Sites.Selected application permission.
site.drive.uploadUpload a small file (maximum 4 MB) to a folder in the connected SharePoint site's default document library. The file content must be provided as a Base64-encoded string. If a file with the same name already exists in the target folder, it will be overwritten (creating a new version). For files larger than 4 MB, use the Microsoft Graph upload session API directly. Requires write-level Sites.Selected application permission.
site.drive.shareCreate a sharing link for a file or folder in the connected SharePoint site's default document library. The link can grant view-only or edit access, and can be scoped to the organization (requires sign-in) or anonymous (anyone with the link). Returns the sharing URL that can be distributed to recipients. Requires write-level Sites.Selected application permission.
site.pages.listList all modern SharePoint pages published on the connected site. Returns page metadata including title, URL, and layout type. Only modern (non-classic) pages are included. Requires the Sites.Selected application permission.