SIMOSphere AI · Governed Access for Microsoft 365

AI Governance Infrastructure for Microsoft 365.

От сообществаРаботаетБез входаГлобальныйБесплатноТолько чтение

Что умеет

Identity.Me: Retrieve the profile of the connected Microsoft 365 user, including id, display name, email address, job title, office location, and user principal name. Requires the User.Read.All applic
Mail.List: List the most recent messages in a mail folder of the connected mailbox. Returns id, subject, sender, received date, body preview, read status, and attachment indicator. Defaults to the Inb
Mail.Search: Search the connected mailbox using KQL (Keyword Query Language) syntax. Searches across all mail folders and returns matching messages with id, subject, sender, received date, and body pr

Какие данные видит

Нужен ли аккаунт

Не нужен: сервер работает без входа

AI Governance Infrastructure for Microsoft 365. Controlled, auditable, policy-enforced AI access to Mail, Calendar, SharePoint, OneDrive and Teams — deployed in your own Azure tenant. 24 Microsoft Graph tools with per-resource scope control, Need-to-Know compliance filter, AI heuristics engine, and revision-safe audit trail. DSGVO-first, EU AI Act ready, MCP-native.

For regulated industries: Banking (BaFin, DORA), Insurance (VAIT), Pharma (GxP), Legal, Critical Infrastructure (NIS2).

What separates us from Microsoft Copilot: Model-agnostic (MCP-native), EU sovereign, per-resource access control, full audit trail, AI Act ready.

Список инструментов сервера (24)

Технические названия из tools/list. Нужны только разработчикам.

identity.me	Retrieve the profile of the connected Microsoft 365 user, including id, display name, email address, job title, office location, and user principal name. Requires the User.Read.All application permission. Useful for confirming which mailbox the current API token is bound to.
mail.list	List the most recent messages in a mail folder of the connected mailbox. Returns id, subject, sender, received date, body preview, read status, and attachment indicator. Defaults to the Inbox; use the folder parameter to access SentItems, Drafts, or any custom folder. Supports pagination via top and skip. Requires the Mail.Read application permission. Results may be filtered by the tenant Need-to-Know policy.
mail.search	Search the connected mailbox using KQL (Keyword Query Language) syntax. Searches across all mail folders and returns matching messages with id, subject, sender, received date, and body preview. Example queries: "from:alice@example.com subject:budget", "hasAttachments:true received>2024-01-01". Requires the Mail.Read application permission. Results may be filtered by the tenant Need-to-Know policy.
mail.read	Read a single email message by its ID, including the full HTML body, sender, recipients (to and cc), received date, and attachment indicator. Use this after mail.list or mail.search to retrieve the complete content of a specific message. Requires the Mail.Read application permission. The body may be redacted by the tenant Need-to-Know policy.
mail.send	Send an email on behalf of the connected mailbox owner. The server automatically appends a signed audit footer with a verification link to every outgoing message; this footer cannot be removed or suppressed. Sending is subject to the mailbox sending policy: per-hour quota, maximum recipients per message, and optional external-recipient restrictions. If the mailbox has confirmation mode enabled, the message enters a pending state until the mailbox owner approves it. Requires the Mail.Send application permission. This action is irreversible once the message is delivered.
mail.draft	Create a draft email in the connected mailbox owner's Drafts folder. The draft is not sent automatically and must be reviewed and sent manually by the mailbox owner in their mail client. Accepts the same parameters as mail.send (to, cc, subject, bodyHtml). Unlike mail.send, no audit footer is appended to drafts. Requires the Mail.ReadWrite application permission.
mail.reply	Reply to an existing email message on behalf of the connected mailbox owner. Fetches the original message to determine recipients, then sends the reply through the same pipeline as mail.send: the signed audit footer is appended, sending policy quotas apply, and confirmation mode is respected if enabled. Set replyAll to true to include all original recipients (to and cc). Requires the Mail.Send application permission. This action is irreversible once delivered.
calendar.list	List upcoming calendar events for the connected mailbox owner within a time window. Defaults to the next 14 days if no date range is specified. Returns event id, subject, start/end times, attendees, location, and all-day indicator, ordered by start time. Useful for checking schedules and finding upcoming meetings. Requires the Calendars.Read application permission.
calendar.create	Create a new calendar event on the connected mailbox owner's primary calendar. Supports adding attendees, a physical or virtual location, and an HTML description body. Set isOnlineMeeting to true to automatically provision a Microsoft Teams meeting link. Invitation emails are sent to attendees by Microsoft 365. Requires the Calendars.ReadWrite application permission.
calendar.findMeetingTimes	Find available meeting time slots where all specified attendees are free. Returns suggested time windows based on calendar availability within the given date range. Useful for scheduling meetings without conflicts. If no time range is specified, Microsoft 365 uses default business hours for the next few days. Requires the Calendars.Read application permission.
calendar.freeBusy	Retrieve the free/busy availability schedule for one or more Microsoft 365 users within a specified time range. Returns an availability view string per user, where each character represents the status for one time interval (0=free, 1=tentative, 2=busy, 3=out-of-office, 4=working-elsewhere). Useful for quickly checking who is available at a glance. Supports up to 20 users per request. Requires the Calendars.Read application permission.
files.list	List files and folders in the connected mailbox owner's OneDrive. Returns id, name, size, file/folder type, web URL, and last modified date for each item. Use itemId="root" to list the drive root, or pass a specific folder ID to list its children. Requires the Files.Read.All application permission.
files.search	Search the connected mailbox owner's OneDrive for files and folders by name or content. Returns matching items with id, name, web URL, size, and last modified date. The search covers file names, folder names, and indexed file contents (e.g. text inside Office documents and PDFs). Requires the Files.Read.All application permission.
people.search	Search contacts and the Microsoft Entra ID directory from the connected mailbox owner's perspective. Returns matching people with id, display name, email addresses, job title, and company name, ranked by relevance to the mailbox owner (frequent contacts rank higher). Useful for finding email addresses, resolving names, or discovering colleagues. Requires the User.Read.All application permission.
people.myManager	Retrieve the direct manager of the connected mailbox owner as configured in Microsoft Entra ID (Azure AD). Returns the manager's profile including display name, email, and job title, or {manager: null} if no manager is assigned. Requires the User.Read.All application permission.
site.metadata	Retrieve metadata for the connected SharePoint site, including display name, web URL, description, creation and last-modified dates, and site collection details. Useful for confirming which SharePoint site the current API token is bound to. Requires the Sites.Selected application permission.
site.lists	List all SharePoint lists and document libraries on the connected site. Returns id, name, display name, description, list type metadata, and creation/modification dates for each list. Use the returned list ID with site.list.items to retrieve individual list items. Requires the Sites.Selected application permission.
site.list.items	List items from a specific SharePoint list on the connected site, with all custom fields expanded. Returns up to 200 items per request. Use the list ID obtained from site.lists. Each item includes its fields (columns) as key-value pairs. Requires the Sites.Selected application permission.
site.search	Search the connected SharePoint site for matching pages, list items, and files using the Microsoft Search API. The search is automatically scoped to the site's URL path. Returns results across drive items, list items, and site pages. Requires the Sites.Selected application permission.
site.drive.list	List files and folders in the connected SharePoint site's default document library. Returns id, name, size, file/folder type, web URL, and last modified date for each item. Use folderId="root" to list the library root, or pass a specific folder ID to list its children. Requires the Sites.Selected application permission.
site.drive.read	Get detailed metadata and thumbnail URLs for a single file or folder in the connected SharePoint site's default document library. Returns the full drive item resource including name, size, web URL, parent reference, and expanded thumbnail collection. Requires the Sites.Selected application permission.
site.drive.upload	Upload a small file (maximum 4 MB) to a folder in the connected SharePoint site's default document library. The file content must be provided as a Base64-encoded string. If a file with the same name already exists in the target folder, it will be overwritten (creating a new version). For files larger than 4 MB, use the Microsoft Graph upload session API directly. Requires write-level Sites.Selected application permission.
site.drive.share	Create a sharing link for a file or folder in the connected SharePoint site's default document library. The link can grant view-only or edit access, and can be scoped to the organization (requires sign-in) or anonymous (anyone with the link). Returns the sharing URL that can be distributed to recipients. Requires write-level Sites.Selected application permission.
site.pages.list	List all modern SharePoint pages published on the connected site. Returns page metadata including title, URL, and layout type. Only modern (non-classic) pages are included. Requires the Sites.Selected application permission.