rubi.works
Rubi 365 MCP Custom MCP Server · Product & Scope Overview
Let your AI assistant run your inbox, calendar, and tasks without ever sending a thing on its own.

Rubi 365 MCP is a safety-first bridge between your AI agent and Microsoft 365. Claude can triage your Outlook mail, manage your calendar, and run task workflows through the official Microsoft Graph API. The guardrails are the point: email tools write drafts only, events land on your calendar without blasting invites, and deletions need your confirmation. The agent prepares the work. You decide what goes out.

Mail, calendar, and tasks are where most teams start. Because the server is built on Microsoft Graph, the same governed, drafts-first pattern can extend to other Microsoft 365 resources such as OneDrive and SharePoint as your needs grow.

Mail Triage & Drafting

Your agent finds the right messages and prepares replies for you to review. It searches across folders with precise queries (sender, subject, date, attachments, with AND/OR/NOT logic), reads messages, and drafts replies and forwards.

search (KQL) create_reply_draft flag / move attachments

Calendar Management

The agent builds your week without firing off invites. It reads events, creates and updates them on your own calendar, and checks free/busy across people before proposing a time.

list_events create_event check_availability

Microsoft To Do Workflows

Turn a message into a tracked follow-up without leaving the conversation. The agent manages your task lists and attaches context, so an email or a URL becomes an action item.

list_task_lists create_task link_task_resource

Safety Rules Built In

This is the headline difference. Email tools are drafts-only and never send automatically, events land on your calendar with no auto-invites, and deleting anything requires explicit confirmation.

Drafts-only mail No auto-invites Confirm before delete

Human-in-the-Loop

Nothing leaves without a human look. Every response includes the Outlook web link for the item the agent touched, so you review the draft, event, or task and finalise it yourself.

webLink on every action Review-then-send

Secure, Per-User Stack

Every action runs as you, scoped to exactly what you can already do, through your Microsoft Entra ID sign-in. Tokens are delegated and short-lived, so the agent can never exceed your own permissions. Built on Python, runs on Azure Functions, with secrets held in Azure Key Vault and never seen by the AI.

Microsoft Entra ID SSO Azure Functions Azure Key Vault Microsoft Graph
How we get it running
1
Tenant registration

We register the server as a single sign-on application in your Microsoft Entra ID tenant.

2
Graph permissions

Delegated Microsoft Graph scopes for mail, calendar, and tasks, consented at the tenant level.

3
Connector setup

The Rubi 365 connector is added to Claude so each user can connect with their own sign-in.

4
Per-user sign-in

Each person signs in once through Entra ID, scoping every action to their own mailbox and calendar.

5
Workflow prompts

Ready-made prompts are enabled, such as summarize inbox, prepare week, and email to task.

6
Connection check

A test run confirms Graph access and per-user scoping before live use.

What you provide
Microsoft 365 tenant

With Outlook Mail, Calendar, and Microsoft To Do in use.

Entra ID admin consent

An administrator to approve the app registration and Graph scopes.

User licences

Microsoft 365 licences covering the people who will use the agent.

Claude access

Claude accounts for the team, ready to add the Rubi 365 connector.

Scope notice: This document covers the Microsoft 365 capabilities in your package: Outlook Mail, Calendar, and Microsoft To Do, delivered through the safety model above. The same server can extend to other resources such as OneDrive, SharePoint, and Teams as a scoped add-on. Those extensions and any custom workflow development are quoted separately.

Book Meeting