Outlook Skill (m365-cli)

Manage a personal Microsoft account (Outlook.com / Hotmail / Live) via the m365 CLI.
Use --json for structured output suitable for AI agent consumption (most commands support it).

Prerequisites

• - Node.js 18+
• INLINECODE2 installed globally: INLINECODE3
• Authenticated: INLINECODE4

If not authenticated, run login first. The CLI uses Device Code Flow — follow the on-screen URL and code.

Key Conventions

• - Use --json for programmatic output (most commands support it; trust/untrust do not).
• Personal accounts support: Mail (including delete, move, and folder management), Calendar, OneDrive, User search. Not SharePoint.
• Calendar datetime format: YYYY-MM-DDTHH:MM:SS (local) or YYYY-MM-DD (all-day).
• IDs: Email/event IDs are long opaque strings. Parse the id field from --json list/search output.
• Timezone: auto-detected. Override: export M365_TIMEZONE="Asia/Shanghai".

Provenance

• - Source repo: INLINECODE13
• Package: INLINECODE14
• Publisher: INLINECODE15
• Required binary: m365 from the m365-cli npm package

Quick Workflow Reference

Authentication

CODEBLOCK0

Mail

CODEBLOCK1

Calendar

CODEBLOCK2

OneDrive

CODEBLOCK3

For sharing, invitations, and advanced OneDrive options, see references/commands.md.

User Search

CODEBLOCK4

Common Patterns

Read and reply to email

CODEBLOCK5

Reply with attachment

CODEBLOCK6

Forward with attachment

CODEBLOCK7

Check calendar and schedule

CODEBLOCK8

Download email attachment

CODEBLOCK9

Delete and organize email

CODEBLOCK10

Manage mail folders

CODEBLOCK11

Trusted Senders (Security)

INLINECODE18 filters untrusted sender content (shows metadata only). Use --force to bypass.
See references/commands.md for whitelist management commands.

Full Command Reference

See references/commands.md for every command, subcommand, flag, and default value.

Troubleshooting

• - "Not authenticated": INLINECODE20
• Token expired: Auto-refreshes. If fails, re-run login.
• SharePoint errors: Personal accounts don't support SharePoint.
• Wrong timezone: INLINECODE21

Security & Privacy

This skill accesses personal email, calendar, files, and contacts — all sensitive PII.

• - Never read, output, or log ~/.m365-cli/credentials.json — it contains OAuth tokens.
• Never include full email bodies or attachment contents in agent output unless the user explicitly requested that specific email.
• Summarize email content instead of echoing it verbatim when presenting results to the user.
• Credential refresh is automatic; never attempt to manually edit or parse the token file.
• When listing emails, prefer showing metadata (subject, sender, date) over full body content.