microsoft-todo-mcp-server

Install

npx -y microsoft-todo-mcp-server@1.2.0

3 secret configuration fields are declared. Names and values are omitted here.

Built for

Any MCP client. Works as a standard MCP server, so it can be added to any MCP client, including Claude, Cursor and Codex. Based on the listing description and package type. This is not a certification from those products.

Transports: stdio.

Links

• Repository
• npm package microsoft-todo-mcp-server
• Registry record

Other

Audit report

Tested by AddonAudit.

Sandbox handshake completed, with warnings: advisories, install scripts present.

Automated smoke test, not a security guarantee.

Version

1.2.0

Audited

2 Nov 2026

Package

npm microsoft-todo-mcp-server

Advisories

0 critical, 1 high, 1 medium, 0 low

Time to ready

139 ms

Network

Disabled

• Pass Version. Pinned npm microsoft-todo-mcp-server@1.2.0
• Issue found Known vulnerabilities. Critical or high advisories were returned.
• Pass License. MIT
• Warn Install scripts. Install-time scripts: postinstall
• Pass Credential patterns. No credential patterns in the published artifact.
• Pass Package size. 231.4 KB
• Pass Maintainer activity. Active 5 days ago.
• Pass Sandbox. MCP handshake completed. 16 tools listed. Tool count measured offline in our sandbox; some servers load more tools when connected.

Tools

• auth-status Check if you're authenticated with Microsoft Graph API. Shows current token status and expiration time, and indicates if the token needs to be refreshed.
• get-task-lists Get all Microsoft Todo task lists (the top-level containers that organize your tasks). Shows list names, IDs, and indicates default or shared lists.
• get-task-lists-organized Get all task lists organized into logical folders/categories based on naming patterns, emoji prefixes, and sharing status. Provides a hierarchical view similar to folder organization.
• create-task-list Create a new task list (top-level container) in Microsoft Todo to help organize your tasks into categories or projects.
• update-task-list Update the name of an existing task list (top-level container) in Microsoft Todo.
• delete-task-list Delete a task list (top-level container) from Microsoft Todo. This will remove the list and all tasks within it.
• get-tasks Get tasks from a specific Microsoft Todo list. These are the main todo items that can contain checklist items (subtasks).
• create-task Create a new task in a specific Microsoft Todo list. A task is the main todo item that can have a title, description, due date, and other properties. Pass `recurrence` to make the task repeat (e.g. monthly bill payments, birthdays, weekly r
• update-task Update an existing task in Microsoft Todo. Allows changing any properties of the task including title, due date, importance, and recurrence. To stop a recurring task, pass `recurrence: null`. Pass a new `recurrence` object to change or add
• delete-task Delete a task from a Microsoft Todo list. This will remove the task and all its checklist items (subtasks).
• get-checklist-items Get checklist items (subtasks) for a specific task. Checklist items are smaller steps or components that belong to a parent task.
• create-checklist-item Create a new checklist item (subtask) for a task. Checklist items help break down a task into smaller, manageable steps.
• update-checklist-item Update an existing checklist item (subtask). Allows changing the text content or completion status of the subtask.
• delete-checklist-item Delete a checklist item (subtask) from a task. This removes just the specific subtask, not the parent task.
• archive-completed-tasks Move completed tasks older than a specified number of days from one list to another (archive) list. Useful for cleaning up active lists while preserving historical tasks.
• test-graph-api-exploration Test various Graph API queries to discover hidden properties or endpoints for folder/group organization in Microsoft To Do.

Token file path: /root/.config/microsoft-todo-mcp/tokens.json
Current working directory: <sandbox>
Microsoft Todo MCP CLI
getAccessToken called
No valid tokens available
Server started and listening

Raw audit JSON

Metadata checks

• Repository activity: Active in the last 180 days
• License: Recognized SPDX id
• Metadata quality: High

Score 100 uses public metadata only. It is separate from the audit tier. Payment never changes a score. How listings are checked.