Microsoft Graph API for Outlook email, Calendar, OneDrive, and Teams.
Microsoft Graph API for Outlook email, Calendar, OneDrive, and Teams. Best for workflows that read or send email, manage calendar events, access files on OneDrive, or interact with Teams channels. Covers the entire Microsoft 365 suite — unlike Google Workspace (Google-native) or Slack (messaging-only), Microsoft 365 is the dominant enterprise productivity stack.10 example endpoints available through Lava’s AI Gateway. See the Microsoft 365 API docs for full documentation.
This provider requires your own credentials — connect your API key or OAuth account before use.
Lava supports two ways to connect a Microsoft 365 account. Both end in the same place — Lava stores an encrypted OAuth token scoped to your wallet and uses it only to forward your own API calls.Via MCP (automatic):
An agent connected to Lava’s MCP calls a Microsoft 365 endpoint for the first time.
Lava detects no stored credential and returns a browser_flow_required response containing an authorization URL.
Open the URL in a browser — you land on Microsoft 365’s consent screen.
Review the requested scopes (listed below) and click Allow.
Microsoft 365 redirects back to Lava. Your token is stored and the original agent call can now proceed.
Via dashboard:
Sign in at lava.so/dashboard and open Connected Services (/dashboard/wallet/connected-services).
Find Microsoft 365 in the list of available providers and click Connect.
Authorize in Microsoft 365’s consent screen.
You’re redirected back to the Connected Services page, where Microsoft 365 now appears under Stored Credentials.
Once connected, your credential is available to any agent or SDK call routed through Lava’s gateway — no token passing required. Call Microsoft 365 endpoints through https://api.lava.so/v1/forward and Lava injects your stored token automatically. See the Endpoints section below for example calls.
REST: DELETE https://api.lava.so/v1/credentials/microsoft_o365 (returns 204 No Content).
MCP: call the disconnect_service tool with service: "microsoft_o365".
Also revoke from Microsoft 365: visit https://myapps.microsoft.com/, find the Lava app, and click Remove. This revokes the token on Microsoft 365’s side in addition to deleting it from Lava.
Lava stores your Microsoft 365 OAuth access and refresh tokens encrypted at rest, scoped to your wallet. Tokens are used only to forward your own API calls to https://graph.microsoft.com/v1.0. Refresh tokens rotate automatically; if a refresh fails, your next call prompts you to reconnect. Lava does not read, cache, or redistribute Microsoft 365 content beyond what’s needed to proxy a single request.
const data = await lava.gateway('https://graph.microsoft.com/v1.0/me/sendMail', { body: {"message": { "subject": "Hello from Lava", "body": { "contentType": "Text", "content": "This email was sent via the Microsoft Graph API." }, "toRecipients": [ { "emailAddress": { "address": "recipient@example.com" } } ]}},});
curl -X POST "https://api.lava.so/v1/forward?u=https%3A%2F%2Fgraph.microsoft.com%2Fv1.0%2Fme%2FsendMail" \ -H "Authorization: Bearer $LAVA_SECRET_KEY" \ -H "Content-Type: application/json" \ -d '{"message":{"subject":"Hello from Lava","body":{"contentType":"Text","content":"This email was sent via the Microsoft Graph API."},"toRecipients":[{"emailAddress":{"address":"recipient@example.com"}}]}}'
