Sign in Book a demo
Back to Tools
Productivity & Docs OAuth
Build Your Agent View Documentation
microsoft-onedrive logo

Microsoft OneDrive MCP Tools for AI Agents

Let an agent search, read, move, share, and delete files and folders in a user's OneDrive.

Available Tools

22 tools available in this integration

MicrosoftOnedrive.CopyItem

Copy a file or folder and wait for the copy to finish, returning the new item.

MicrosoftOnedrive.CreateFolder

Create a new folder in OneDrive.

MicrosoftOnedrive.CreateShareLink

Create a share link for a OneDrive item.

MicrosoftOnedrive.DeleteItem

Delete one or more files or folders from OneDrive in a single call.

MicrosoftOnedrive.DownloadFile

Download a OneDrive file's content as base64, paging large files by byte offset.

MicrosoftOnedrive.DownloadFileText

Read the text of a PDF or plain-text file in the user's own OneDrive.

MicrosoftOnedrive.FindDuplicateFiles

Find files that are byte-identical copies of each other across folders in one call.

MicrosoftOnedrive.GetCopyStatus

Check status of an async copy operation using the token an in-progress copy returned.

MicrosoftOnedrive.GetItem

Resolve a single OneDrive file or folder's metadata directly from its id.

MicrosoftOnedrive.GetMyDrive

Get metadata about the user's OneDrive (id, name, quota, owner).

MicrosoftOnedrive.GetSharedWithMe

List files shared with the current user.

MicrosoftOnedrive.ListDuplicateFiles

Find files that are byte-identical copies of each other across folders in one call.

MicrosoftOnedrive.ListFolderItems

List files and folders in a OneDrive folder.

MicrosoftOnedrive.ListItemPermissions

List who can currently access a OneDrive item: every share link and direct grant on it.

MicrosoftOnedrive.ListSharedItems

List files shared with the current user.

MicrosoftOnedrive.MoveItem

Move and/or rename one or more files or folders in OneDrive in a single call.

MicrosoftOnedrive.MoveItems

Move and/or rename one or more files or folders in OneDrive in a single call.

MicrosoftOnedrive.ReadFile

Read the text of a PDF or plain-text file in the user's own OneDrive.

MicrosoftOnedrive.RevokeItemPermission

Revoke one or all anonymous sharing grants on a OneDrive item.

MicrosoftOnedrive.SearchItems

Search for files and folders in the user's OneDrive.

MicrosoftOnedrive.TrashItems

Move one or more files or folders to the OneDrive recycle bin in a single call.

MicrosoftOnedrive.WhoAmI

Identify the current user and confirm OneDrive access for orientation.

Why agent-optimized tools matter

Built for intent, not API schemas

Ask the agent to "find the latest project brief, read it, and create a share link." Arcade picks the right Microsoft OneDrive tools without guessing item IDs or folder IDs.

Up to 100x fewer tokens

OneDrive search and folder listings return lightweight metadata by default and fetch file contents only when asked, so the agent can choose what to read without loading whole folders into the model.

Complete the workflow end to end

Find the file, read its text, move or rename it, create a share link, and revoke access through one toolkit designed around the complete file-management task.

Make actions predictable and controlled

Arcade tools return structured results and useful errors across users and runs. Teams can apply scope restrictions, redaction, and approval policies so agents follow the same controls every time.

Securing Microsoft OneDrive

The more capabilities agents get, the more useful they are. However, more capabilities bring more risks of undesired effects such as data loss and exfiltration.

This is why Arcade provides you with contextual rules that dictate how and when a tool is allowed to run. Arcade’s contextual access lets you govern tool visibility and behavior at every stage of execution and control who can see a tool, what inputs are allowed, and what comes back.

Learn about Contextual Access Policies

For Microsoft OneDrive, you can implement some of these policies:

Access when tools are listed for a user
  • Hide MicrosoftOnedrive.DeleteItem from agents unless the roles your IDP marks as OneDrive administrators are active, so an agent cannot remove files or folders outside its assigned scope.
  • Restrict MicrosoftOnedrive.RevokeItemPermission to agents operating under your data-owner role, so automation cannot cut off a colleague or external partner's access.
  • Deny MicrosoftOnedrive.CreateShareLink to read-only agents, so they cannot publish private files through new anonymous links.
  • Hide MicrosoftOnedrive.MoveItems from agents without your approved file-operations role, so they cannot rename or relocate files across your OneDrive.
  • Deny MicrosoftOnedrive.TrashItems to agents outside the roles your IDP marks as workspace managers, so routine automation cannot send shared files to the recycle bin.
Pre-execution before each tool call
  • Require human approval before MicrosoftOnedrive.MoveItem changes the location or name of files in your protected folders, so an agent cannot disrupt an approved folder structure.
  • Block MicrosoftOnedrive.CreateShareLink when the target item is marked confidential or the requested scope is anonymous, so private documents cannot be shared without review.
  • Require human approval before MicrosoftOnedrive.DeleteItem runs on folders or files outside the agent's temporary workspace, so a mistaken cleanup cannot remove team content.
  • Block MicrosoftOnedrive.MoveItems when any destination falls outside the agent's assigned workspace, so a batch request cannot scatter files into unrelated folders.
  • Require human approval before MicrosoftOnedrive.TrashItems removes more than a defined number of items, so a faulty cleanup cannot empty a folder in one call.
Post-execution after the tool returns
  • Deny MicrosoftOnedrive.DownloadFile outright for files marked confidential, under legal hold, or matching your secrets and credentials patterns, so their contents never reach the model.
  • Redact email addresses, sharing-link URLs, and direct-grant identifiers from MicrosoftOnedrive.ListItemPermissions results before the model sees who can access an item.
  • Strip personal contact details and external account identifiers from MicrosoftOnedrive.GetSharedWithMe results, so the model can use shared-file metadata without exposing collaborator information.
  • Redact Social Security numbers, bank account numbers, and API keys from MicrosoftOnedrive.DownloadFileText results before the model sees document contents.
  • Strip full folder paths and owner identifiers from MicrosoftOnedrive.ListDuplicateFiles results, so duplicate-file cleanup does not expose private directory structure.
  • Redact item names and paths for files shared by external accounts in MicrosoftOnedrive.ListSharedItems results, so the model cannot infer confidential project details from shared-file metadata.

How to use Microsoft OneDrive with your agent

Pick your MCP client below and follow the setup to connect OneDrive through Arcade. Each end user authorizes their own Microsoft account.

Your questions, answered

A Microsoft OneDrive MCP server exposes OneDrive capabilities as structured tools that an AI agent can call through the Model Context Protocol. After a user authorizes their Microsoft account, the agent can search, read, organize, share, and manage permitted files and folders.

Microsoft OneDrive does not provide a first-party MCP server for these actions. Arcade adds the runtime around Microsoft Graph access, including per-user OAuth, agent-optimized tools, approval workflows, redaction, scope controls, and access from supported agent clients.

Arcade agents can search and list files and folders, read PDF and plain-text content, download files, find duplicate files, inspect sharing access, create folders and share links, copy, move, rename, trash, delete, and revoke anonymous sharing grants. They can also identify the connected user and inspect OneDrive metadata.

Arcade requests delegated Microsoft Graph permissions for the actions you enable. Read-only workflows need file and drive read access; creating, moving, copying, deleting, sharing, or revoking access needs write permissions. Grant the narrowest permissions that support your workflow.

Yes. Each user authorizes their own Microsoft account through OAuth. OneDrive actions run under that user's authorization, so the agent can access only the files and permissions that user has approved.

Yes. Contextual Access policies can require human approval before consequential OneDrive actions such as deleting, trashing, creating a share link, moving files, or revoking access. The call proceeds only once the policy is satisfied.

Arcade proxies OneDrive API calls and does not persist your file content as part of normal tool execution. OAuth credentials are brokered and stored encrypted at rest, and the model never receives raw credentials.

Any framework or client that can connect to Arcade's MCP gateway or tool APIs works, including LangChain, OpenAI Agents, CrewAI, Claude Desktop, Claude Code, Cursor, Visual Studio Code, Microsoft Copilot Studio, and GitHub Copilot.

Arcade refreshes access while the user's Microsoft authorization remains valid. If access is revoked, rotated, or can no longer be refreshed, OneDrive actions stop until the user reconnects their account.

Microsoft Graph and OneDrive throttling, storage limits, file-size limits, and sharing restrictions still apply. Large downloads are paged by byte offset, and copy operations may run asynchronously while their status is checked separately.

Ready to actually ship your agent?

Connect your agent to Microsoft OneDrive with managed OAuth, agent-optimized tools and approval controls for consequential actions.

Build Your Agent Read the Microsoft OneDrive Quickstart