Microsoft 365 — can an agent use it?
Microsoft 365 has one of the deepest API surfaces of any SaaS platform: Microsoft Graph covers email, calendar, files, Teams, SharePoint, and dozens more services with a single endpoint. Documentation is best-in-class. The gap is discoverability — the main domain redirects to a login portal, and there is no first-party MCP server (community servers cover 300+ tools but are not Microsoft-maintained).
FIND & RETRIEVE · 7.5
ACT & TRANSACT · 6.4
TRUST & DURABILITY · 7.8
FIND & RETRIEVE7.5/10Can an agent get correct information?
Machine-readable surface5.5/10
llms.txt and sitemap present on microsoft.com, robots.txt has no AI-bot blocks, JSON-LD schema on the landing page. However, microsoft365.com redirects to m365.cloud.microsoft (a login portal) — agents hitting the canonical domain find a sign-in wall, not product information. Marketing content lives at microsoft.com/microsoft-365 instead. source
Information retrieval quality7.5/10
Pricing clearly published: Business Basic $7/user/mo (with Teams), Standard ~$12.50, Premium ~$22. Feature comparison available. 1TB OneDrive per user, 300-user cap on Business plans, enterprise pricing documented separately. Some plans require contacting sales. source
Documentation for machines9.5/10
Microsoft Graph documentation at learn.microsoft.com/graph is among the most comprehensive API docs in the industry. REST API reference for 15+ services, SDKs for 5 languages (JS, .NET, Python, Java, Go), interactive Graph Explorer, code samples, tutorials, versioned (v1.0 and beta). Throttling guidance, batch requests, change notifications all documented. source
ACT & TRANSACT6.4/10Can an agent do the job?
Action coverage9.5/10
Microsoft Graph API covers: email (read, send, manage rules, attachments), calendar (CRUD events, scheduling), files (OneDrive CRUD, sharing), contacts, Teams (channels, messages, meetings), SharePoint (sites, lists, pages), Planner (tasks, buckets), To Do, OneNote, Excel (read/write worksheets), Security, Identity, Reports, Bookings. Nearly every M365 service has full CRUD API coverage from a single endpoint. source
Agent protocol support6.5/10
No first-party Microsoft 365 MCP server, but Microsoft publishes an official MCP catalog at github.com/microsoft/mcp and Copilot Studio has MCP GA. Community MCP servers exist (softeria/ms-365-mcp-server with 300+ tools covering most Graph API surface). The MCP ecosystem is rich but the M365-specific server is community-maintained, not Microsoft-built. source
Access & auth friction7/10
OAuth 2.0 via Microsoft Entra (Azure AD) with delegated and application permission flows. MSAL libraries for major languages. Granular permission scopes per resource. App registration via portal.azure.com. However, setup complexity is higher than simpler OAuth flows — many agent-useful scopes require tenant admin consent, not just user consent. source
Agent payment capability1/10
No agent payment protocols (ACP, AP2, MPP, x402). M365 subscriptions are billed through the Microsoft admin center or CSP partners. An agent cannot programmatically subscribe, upgrade, change plans, or pay on behalf of a user. Commerce APIs exist for CSP partners but require partner-level agreements, not end-user agent access. source
Cost & rate fairness8/10
Graph API is included in every M365 subscription at no additional API cost. Throttling is well-documented: 429 status with Retry-After header, per-app and per-tenant limits vary by resource type (documented per service). JSON batching supported for efficiency. No agent-specific pricing discrimination. The 'API included in subscription' model is strong for cost predictability. source
TRUST & DURABILITY7.8/10Will it still work next quarter?
Permission & ToS stance7/10
Microsoft API Terms of Use (October 2025) explicitly govern Graph API use. No blanket bot/agent prohibition — terms require app registration, OAuth consent, and responsible data handling. Reasonable restrictions: no scraping copies, minimum data principle, no using API data for ads. Terms are agent-friendly IF you register your app and get proper consent. EU Commitments clause (AT.40721) further protects interoperability rights. source
Reliability & continuity8.5/10
Official status page at status.cloud.microsoft with per-service health. Commercially guaranteed 99.9% uptime SLA with financial-backed credits. Service health dashboard in admin center. Microsoft publishes incident post-mortems. Stable platform with 20+ year track record for Office/M365 services. source
Sources
Point-in-time assessment — services change terms, prices and APIs often. That volatility is itself scored under Reliability & continuity. Re-verified at least quarterly.
- microsoft.com/en-us/microsoft-365 — product home (accessed 2026-09-05)
- microsoft.com/en-us/microsoft-365/business/microsof… — pricing (Business Basic) (accessed 2026-09-05)
- microsoft.com/robots.txt — robots (accessed 2026-09-05)
- learn.microsoft.com/en-us/graph/overview — Graph API overview (accessed 2026-09-05)
- learn.microsoft.com/en-us/graph/throttling — throttling/rate limits (accessed 2026-09-05)
- learn.microsoft.com/en-us/legal/microsoft-apis/term… — API terms of use (accessed 2026-09-05)
- github.com/microsoft/mcp — Microsoft MCP catalog (accessed 2026-09-05)
- github.com/softeria/ms-365-mcp-server — community MCP server (300+ tools) (accessed 2026-09-05)
- status.cloud.microsoft — status page (accessed 2026-09-05)