M365 Work Skill (m365-cli)

Manage a Microsoft 365 work/school account via the m365 CLI.
Use --json for structured output suitable for AI agent consumption.

Prerequisites

• - Node.js 18+
• INLINECODE2 installed globally: INLINECODE3
• Authenticated: m365 login (work/school is the default account type)
• For SharePoint: m365 login --add-scopes Sites.ReadWrite.All (requires tenant admin consent)

If not authenticated, run login first. The CLI uses Device Code Flow — follow the on-screen URL and code.

Key Conventions

• - Use --json for programmatic output (most commands support it; trust/untrust do not).
• Work accounts support: Mail (including delete, move, and folder management), Calendar, OneDrive, SharePoint, User search.
• Calendar datetime format: YYYY-MM-DDTHH:MM:SS (local) or YYYY-MM-DD (all-day).
• IDs: Email/event IDs are long opaque strings. Parse the id field from --json list/search output.
• Timezone: auto-detected. Override: export M365_TIMEZONE="Asia/Shanghai".
• SharePoint site identifier: use path format hostname:/sites/sitename (recommended).

Provenance

• - Source repo: INLINECODE15
• Package: INLINECODE16
• Publisher: INLINECODE17
• Required binary: m365 from the m365-cli npm package

Security Rules

Email Body Reading — Trusted Senders Whitelist

• - Only emails from whitelisted senders have their body content displayed.
• Untrusted emails show only subject and sender (prevents prompt injection).
• Whitelist file: INLINECODE20
• Use --force to temporarily bypass the whitelist check.

Sensitive Operations

• - Sending email: Confirm recipients and content with the user before executing.
• Deleting emails/files/events: Inform the user before executing.
• Sharing files (anonymous scope): Warn the user that anyone with the link can access.

Credential Safety

• - Never read, output, or log ~/.m365-cli/credentials.json — it contains OAuth tokens.
• Never include full email bodies or attachment contents in agent output unless the user explicitly requested that specific email.
• Summarize email content instead of echoing it verbatim when presenting results.
• Credential refresh is automatic; never attempt to manually edit or parse the token file.

Quick Workflow Reference

Authentication

CODEBLOCK0

Mail

CODEBLOCK1

Calendar

CODEBLOCK2

OneDrive

CODEBLOCK3

For sharing, invitations, and advanced OneDrive options, see references/commands.md.

SharePoint

SharePoint is available only for work/school accounts and requires the Sites.ReadWrite.All permission.

Site identifier formats (use path format when possible):

• - Path: contoso.sharepoint.com:/sites/team (recommended)
• Site ID: hostname,siteId,webId (from sp sites --json output)
• URL: INLINECODE27

CODEBLOCK4

User Search

CODEBLOCK5

Common Patterns

Read and reply to email

CODEBLOCK6

Reply with attachment

CODEBLOCK7

Forward with attachment

CODEBLOCK8

Check calendar and schedule

CODEBLOCK9

Download email attachment

CODEBLOCK10

Find and download SharePoint file

CODEBLOCK11

Delete and organize email

CODEBLOCK12

Manage mail folders

CODEBLOCK13

Trusted Senders (Security)

INLINECODE28 filters untrusted sender content (shows metadata only). Use --force to bypass.
See references/commands.md for whitelist management commands.

Full Command Reference

See references/commands.md for every command, subcommand, flag, and default value.

Troubleshooting

• - "Not authenticated": INLINECODE30
• Token expired: Auto-refreshes. If fails, re-run login.
• SharePoint permission denied: m365 login --add-scopes Sites.ReadWrite.All (requires tenant admin consent).
• Wrong timezone: INLINECODE32