onedrive-blade-mcp

A token-efficient MCP server for OneDrive and SharePoint file operations via Microsoft Graph API.

18 tools covering browse, read, search, upload, share, versioning, delta sync, and SharePoint — with pipe-delimited output, write-gating, and dual auth.

Why this over generic file MCPs?

Delta sync is the killer feature for AI workflows — track what changed in a folder without re-listing thousands of files.

Features

• 18 tools — browse, read, search, upload, share, version history, delta sync, SharePoint
• Token-efficient output — pipe-delimited, field-selected, null fields omitted
• Write-gated by default — reads are free, writes require ONEDRIVE_WRITE_ENABLED=true
• Delta sync — incremental file change tracking with delta tokens
• SharePoint integration — sites, document libraries, and files
• Dual authentication — device code for interactive, client credentials for headless
• Sharing management — create links, check permissions, control scope
• FastMCP 2.0 — stdio and HTTP transports

Quick Start

# Install
git clone https://github.com/groupthink-dev/onedrive-blade-mcp.git
cd onedrive-blade-mcp
uv sync

# Configure
export ONEDRIVE_TENANT_ID="your-tenant-id"
export ONEDRIVE_CLIENT_ID="your-client-id"
export ONEDRIVE_AUTH_MODE="device_code"

# Run (stdio)
uv run onedrive-blade-mcp

Tools (18)

Meta

Read (8)

SharePoint (3)

Write (4, gated)

Sharing (2)

Delta Sync

Track file changes without re-listing entire directories:

# First call — returns current state + delta_link
drive_delta(folder_path="/Documents")

# Subsequent calls — returns only changes since last call
drive_delta(delta_link="aHR0cHM6Ly9ncmFwaC5taW...")

Returns created, modified, and deleted items with a fresh delta_link for the next call.

Authentication

Device Code (interactive)

export ONEDRIVE_AUTH_MODE="device_code"
export ONEDRIVE_TENANT_ID="your-tenant-id"
export ONEDRIVE_CLIENT_ID="your-client-id"

Client Credentials (headless)

export ONEDRIVE_AUTH_MODE="client_credentials"
export ONEDRIVE_TENANT_ID="your-tenant-id"
export ONEDRIVE_CLIENT_ID="your-client-id"
export ONEDRIVE_CLIENT_SECRET="your-client-secret"

Security Model

Claude Desktop Config

{
  "mcpServers": {
    "onedrive": {
      "command": "uv",
      "args": ["run", "--directory", "/path/to/onedrive-blade-mcp", "onedrive-blade-mcp"],
      "env": {
        "ONEDRIVE_TENANT_ID": "your-tenant-id",
        "ONEDRIVE_CLIENT_ID": "your-client-id",
        "ONEDRIVE_AUTH_MODE": "device_code"
      }
    }
  }
}

Claude Code

claude mcp add onedrive -- uv run --directory /path/to/onedrive-blade-mcp onedrive-blade-mcp

Environment Variables

Architecture

src/onedrive_blade_mcp/
├── server.py       — FastMCP 2.0 server, 18 @mcp.tool decorators
├── client.py       — Graph API client with dual auth, write gate, delta sync
├── formatters.py   — Token-efficient output (pipe-delimited, null omission)
├── models.py       — Config, constants
└── auth.py         — Device code + client credentials, bearer middleware

Built with FastMCP 2.0 and httpx.

Development

uv sync               # Install dependencies
uv run onedrive-blade-mcp   # Run locally (stdio)
uv run ruff check .    # Lint
uv run pytest tests/   # Tests (mocked, no OneDrive needed)

License

MIT