outlook-skill-clawhubRead, search, and manage Outlook emails and calendar via Microsoft Graph API with delegate support. Your AI assistant authenticates as itself but accesses the owner's mailbox/calendar as a delegate. Modified for delegate access from https://clawhub.ai/jotamed/outlook
Install via ClawdBot CLI:
clawdbot install 87Marc/outlook-skill-clawhubAccess another user's Outlook/Microsoft 365 email and calendar as a delegate via Microsoft Graph API.
This skill is designed for scenarios where:
assistant@domain.com)| Feature | Direct Access (/me) | Delegate Access (/users/{id}) |
|---------|----------------------|--------------------------------|
| API Base | /me/messages | /users/{owner}/messages |
| Send Email | Appears "From: Owner" | Appears "From: Assistant on behalf of Owner" |
| Calendar | Full control | Based on permission level granted |
| Permissions | Mail.ReadWrite, Mail.Send | Mail.ReadWrite.Shared, Mail.Send.Shared, Calendars.ReadWrite.Shared |
~/.outlook-mcp/config.json{
"client_id": "your-app-client-id",
"client_secret": "your-app-client-secret",
"owner_email": "owner@domain.com",
"delegate_email": "assistant@domain.com"
}The owner_email is the mailbox the assistant will access as a delegate.
The app registration needs delegated permissions (not application permissions):
Mail.ReadWrite.Shared - Read/write access to shared mailboxesMail.Send.Shared - Send mail on behalf of othersCalendars.ReadWrite.Shared - Read/write shared calendarsUser.Read - Read assistant's own profileoffline_access - Refresh tokensThe owner must grant the assistant delegate access via Exchange/Outlook:
PowerShell (Admin):
# Grant mailbox access
Add-MailboxPermission -Identity "owner@domain.com" -User "assistant@domain.com" -AccessRights FullAccess
# Grant Send-on-Behalf
Set-Mailbox -Identity "owner@domain.com" -GrantSendOnBehalfTo "assistant@domain.com"
# Grant calendar access (Editor = can create/modify events)
Add-MailboxFolderPermission -Identity "owner@domain.com:\Calendar" -User "assistant@domain.com" -AccessRights Editor -SharingPermissionFlags DelegateOr via Outlook Settings:
The owner can add the assistant as a delegate in Outlook ā File ā Account Settings ā Delegate Access.
The assistant authenticates as itself via OAuth2, then accesses the owner's resources using the /users/{owner@domain.com}/ endpoint.
./scripts/outlook-token.sh refresh # Refresh expired token
./scripts/outlook-token.sh test # Test connection to BOTH accounts
./scripts/outlook-token.sh get # Print access token./scripts/outlook-mail.sh inbox [count] # Owner's inbox
./scripts/outlook-mail.sh unread [count] # Owner's unread
./scripts/outlook-mail.sh search "query" [count] # Search owner's mail
./scripts/outlook-mail.sh from <email> [count] # Owner's mail from sender
./scripts/outlook-mail.sh read <id> # Read email content./scripts/outlook-mail.sh mark-read <id> # Mark as read
./scripts/outlook-mail.sh mark-unread <id> # Mark as unread
./scripts/outlook-mail.sh flag <id> # Flag as important
./scripts/outlook-mail.sh delete <id> # Move to trash
./scripts/outlook-mail.sh archive <id> # Move to archive
./scripts/outlook-mail.sh move <id> <folder> # Move to folder./scripts/outlook-mail.sh send <to> <subj> <body> # Send on behalf of owner
./scripts/outlook-mail.sh reply <id> "body" # Reply on behalf of ownerNote: Emails will show "Assistant on behalf of Owner" in the From field.
./scripts/outlook-calendar.sh events [count] # Owner's upcoming events
./scripts/outlook-calendar.sh today # Owner's today
./scripts/outlook-calendar.sh week # Owner's week
./scripts/outlook-calendar.sh read <id> # Event details
./scripts/outlook-calendar.sh free <start> <end> # Owner's availability./scripts/outlook-calendar.sh create <subj> <start> <end> [location]
./scripts/outlook-calendar.sh quick <subject> [time]The key change is replacing /me with /users/{owner_email}:
# Direct access (old)
API="https://graph.microsoft.com/v1.0/me"
# Delegate access (new)
OWNER=$(jq -r '.owner_email' "$CONFIG_FILE")
API="https://graph.microsoft.com/v1.0/users/$OWNER"When sending mail as a delegate, you must specify the from address:
{
"message": {
"subject": "Meeting follow-up",
"from": {
"emailAddress": {
"address": "owner@domain.com"
}
},
"toRecipients": [{"emailAddress": {"address": "recipient@example.com"}}],
"body": {"contentType": "Text", "content": "..."}
}
}The recipient sees: "Assistant on behalf of Owner
| Action | Required Permission | Exchange Setting |
|--------|-------------------|-----------------|
| Read owner's mail | Mail.ReadWrite.Shared | FullAccess or Reviewer |
| Modify owner's mail | Mail.ReadWrite.Shared | FullAccess or Editor |
| Send as owner | Mail.Send.Shared | SendOnBehalf |
| Read owner's calendar | Calendars.ReadWrite.Shared | Reviewer+ |
| Create events on owner's calendar | Calendars.ReadWrite.Shared | Editor |
"Access denied" or "403 Forbidden"
ā Check that the assistant has MailboxPermission on the owner's mailbox
"The mailbox is not found"
ā Verify owner_email in config.json is correct
"Insufficient privileges"
ā App registration missing .Shared permissions (check Azure AD)
Emails send but don't show "on behalf of"
ā Missing SendOnBehalf permission. Run:
Set-Mailbox -Identity "owner@domain.com" -GrantSendOnBehalfTo "assistant@domain.com""Token expired"
ā Run outlook-token.sh refresh
~/.outlook-mcp/ - protect this directory~/.outlook-mcp/config.json - Client ID, secret, and owner/delegate emails~/.outlook-mcp/credentials.json - OAuth tokens (access + refresh)/users/{owner} instead of /meowner_email and delegate_email config fieldsfrom field.Shared variantsGenerated Mar 1, 2026
An AI assistant acts as a delegate for an executive, managing their email inbox by prioritizing messages, flagging urgent items, and sending responses on their behalf. It also schedules meetings and updates the executive's calendar, ensuring efficient time management without direct intervention.
In a customer service team, an AI assistant accesses a shared mailbox as a delegate to handle incoming inquiries, send follow-up emails, and escalate issues. This streamlines response times and ensures consistent communication while reducing manual workload for support agents.
A project manager grants delegate access to an AI assistant to manage team communications and calendar events. The assistant sends updates, schedules project meetings, and tracks deadlines, facilitating collaboration and keeping all stakeholders informed without constant manual oversight.
Medical staff use an AI assistant as a delegate to handle appointment scheduling, patient follow-up emails, and administrative reminders. This improves operational efficiency in clinics by automating routine tasks while maintaining compliance with delegated access protocols.
Law firms employ an AI assistant to access a lawyer's mailbox as a delegate, organizing case-related emails, sending document requests, and scheduling court dates. This enhances productivity by automating administrative duties and ensuring timely communication with clients and courts.
Offer this skill as part of a monthly or annual subscription service for businesses, providing automated email and calendar management. Revenue is generated through tiered pricing based on usage levels, number of delegates, and advanced features like analytics.
Sell enterprise licenses to large organizations for integrating the skill into their existing AI assistant platforms. This includes customization, dedicated support, and compliance with security standards, driving revenue through one-time fees or annual contracts.
Provide a free basic version with limited delegate access and features, then upsell premium plans for advanced functionalities like bulk email handling or calendar analytics. Revenue comes from conversions to paid plans and add-on services.
š¬ Integration Tip
Ensure proper Azure AD app registration with delegated permissions and configure Exchange delegate settings via PowerShell or Outlook to avoid authentication issues.
CLI to manage emails via IMAP/SMTP. Use `himalaya` to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MIME Meta Language).
Read and send email via IMAP/SMTP. Check for new/unread messages, fetch content, search mailboxes, mark as read/unread, and send emails with attachments. Works with any IMAP/SMTP server including Gmail, Outlook, 163.com, vip.163.com, 126.com, vip.126.com, 188.com, and vip.188.com.
Gmail API integration with managed OAuth. Read, send, and manage emails, threads, labels, and drafts. Use this skill when users want to interact with Gmail. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
Automatically logs into email accounts (Gmail, Outlook, QQ Mail, etc.) and generates daily email summaries. Use when the user wants to get a summary of their emails, check important messages, or create daily email digests.
Fetch content from Feishu (Lark) Wiki, Docs, Sheets, and Bitable. Automatically resolves Wiki URLs to real entities and converts content to Markdown.
Manage Feishu (Lark) calendars by listing, searching, checking schedules, syncing events, and marking tasks with automated date extraction.