OutNote

Headless Microsoft 365 over Graph - mail, calendar, Teams, OneDrive, SharePoint, OneNote, To Do, Planner and Assignments, without an app registration.

What is OutNote?

Every "read my mailbox over Graph" tutorial makes you register an Azure app and get admin consent - which a locked-down tenant (a school, a company) simply refuses. OutNote sidesteps that entirely.

It signs in (via entrance) with the pre-consented OfficeHome first-party client, gets a FOCI family refresh token, and a broker trades it for whichever first-party client's token a given call needs - all without another sign-in, and each already consented in the tenant. One headless login (password + TOTP, no browser), then clean reads and writes across the whole account.

Features

• 🔓 No app registration, no admin consent - rides pre-consented Microsoft first-party clients
• 🤖 Fully headless - password + TOTP MFA over pure HTTP (or a browser fallback via entrance)
• 💾 Log in once - the family refresh token is persisted (0600) and reused, so later runs skip the sign-in
• 📬 Broad coverage - mail, calendar, Teams chats & channels, OneDrive, SharePoint, OneNote, To Do, Planner, Assignments
• ✉️ Writes too - send mail, Teams messages (with @mentions), events, uploads, OneNote pages, tasks
• 🧾 Text out - Teams/OneNote HTML to text, .docx/.pptx/.xlsx/.pdf extraction
• ⚡ Robust - 429/5xx backoff, $batch, delta queries, nextLink paging
• 🖥️ CLI - outnote --text chats --unread

Install

pip install outnote        # or: uv add outnote

Python 3.10+; ms-entrance is pulled in automatically. pip install "outnote[pdf]" adds PDF text extraction.

Quickstart

from outnote import authenticate

note = authenticate("you@school.ch", "password", totp_secret="JBSWY3DPEHPK3PXP")

note.emails(top=5, unread=True)
note.chats()
note.send_to("friend@school.ch", "on my way")
note.download(item_id)
note.search_emails("invoice")

Docs

• Usage - sign-in, reading, writing, the CLI
• Method reference - every method, its endpoint, and the caveats
• FOCI clients - the client/scope map and how to re-probe your tenant

Disclaimer

OutNote is published for educational and research purposes only - to document how Microsoft 365's first-party OAuth2 clients and the Graph API behave for a browserless client.

Use it only against accounts you own, or with the explicit authorization of the account or tenant owner. You alone are responsible for your use of it and for complying with Microsoft's terms, your identity provider's terms, your institution's acceptable-use policy, and applicable law. The software is provided "as is", without warranty of any kind, and the author accepts no liability for misuse. Not affiliated with or endorsed by Microsoft.

License

MIT (c) PianoNic