THRONE
See report Verify server

registry / record

@softeria/ms-365-mcp-server

npm / sealed 2026-06-12 / No. b661377d

> throne registry @softeria/ms-365-mcp-server sealed
receiptsealed evidence
scan id
b661377dd6474c5189b35eab68f39e64
target
@softeria/ms-365-mcp-server
sealed at
2026-06-12 18:23:50Z
evidence hash
sha256:ad4265297431f401421bfc8b0fd9873bdb493ce8466630d222c34e863eeaa2e9
01connectPASS1.1s

initialize ok: server Microsoft365MCP 0.119.0, negotiated protocolVersion 2025-11-25, capabilities ['tools']

02discoverPASS158ms

supported: tools/list (178 tools); method not found (tolerated): resources/list, prompts/list

03validate_schemasPASS450ms

all 178 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS1.1s

called 10 of 10 tools (cap 10): 4 ok, 6 returned tool-level errors (expected for synthesized args)

05error_handlingPASS10.4s

structured error responses, connection survived — wrong_type_args: accepted (returned result); unknown_method: error(-32601); invalid_id: no response (silent), connection alive

06streamingPASS1ms

no streaming-capable tool declared by this server; not applicable (pass-na)

07resource_lifecyclePASS1ms

resources capability not declared; not applicable (pass-na)

08concurrent_callsPASS3.9s

ladder 1/2/4/8 overlapping login calls: max_observed_stable_concurrency=8; all ids answered exactly once at every level

09reconnectPASS3.9s

transport closed and relaunched; re-handshake ok (protocolVersion 2025-11-25, first session was 2025-11-25)

01connectPASS1.1s

initialize ok: server Microsoft365MCP 0.119.0, negotiated protocolVersion 2025-11-25, capabilities ['tools']

02discoverPASS156ms

supported: tools/list (178 tools); method not found (tolerated): resources/list, prompts/list

03validate_schemasPASS392ms

all 178 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS1.3s

called 10 of 10 tools (cap 10): 4 ok, 6 returned tool-level errors (expected for synthesized args)

05error_handlingPASS10.2s

structured error responses, connection survived — wrong_type_args: accepted (returned result); unknown_method: error(-32601); invalid_id: no response (silent), connection alive

06streamingPASS0ms

no streaming-capable tool declared by this server; not applicable (pass-na)

07resource_lifecyclePASS2ms

resources capability not declared; not applicable (pass-na)

08concurrent_callsPASS5.0s

ladder 1/2/4/8 overlapping login calls: max_observed_stable_concurrency=8; all ids answered exactly once at every level

09reconnectPASS3.9s

transport closed and relaunched; re-handshake ok (protocolVersion 2025-11-25, first session was 2025-11-25)

chatgpt desktopemulation profile pending real-traffic captureCOMING SOON
SECURITY: REVIEW / 2 finding(s) / review material, not a verdict
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

execSync() called with a dynamically built command (heuristic — review): ''

package/bin/modules/generate-mcp-tools.mjs:19
LOWTHR-NET-05 / Hardcoded outbound endpoints

11 non-local endpoint host(s) referenced in code — verify each is expected for this server's purpose: docs.microsoft.com (package/dist/generated/client.js:6626), graph.microsoft.com (package/dist/cloud-config.js:4), learn.microsoft.com (package/examples/azure-container-apps/deploy.ps1:59), login.chinacloudapi.cn (package/dist/cloud-config.js:8), login.microsoftonline.com (package/dist/cloud-config.js:3), mcp.example.com (package/dist/cli.js:46), microsoftgraph.chinacloudapi.cn (package/dist/cloud-config.js:9), portal.azure.cn (package/dist/cloud-config.js:10), portal.azure.com (package/dist/cloud-config.js:5), schema.management.azure.com (package/examples/azure-container-apps/deploy.ps1:124), teams.microsoft.com (package/dist/lib/teams-url-parser.js:18)

package/dist/cli.js:46
VERDICT: FIT TO SHIPSANDBOXED RUN — submitted server executed in a disposable microVM — compatibility: 0 fail / 0 warn across 2 clients / security: review — 2 finding(s), 0 highsealed by THRONE / No. b661377d / 2026-06-12
THRONE: FIT TO SHIPwear the crown

paste this in your README. it renders the live verdict and links back to this record. if a release ever breaks the verdict, the badge says so on its own.

[![THRONE: FIT TO SHIP](https://api.usethrone.dev/api/badge/%40softeria%2Fms-365-mcp-server)](https://usethrone.dev/server/softeria-ms-365-mcp-server)
executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.