OneDrive

Live

OAUTH 2.0

FILE STORAGE

Files & Documents

Every file, folder, and shared document your team stores lives in OneDrive. OneDrive MCP gives your agent authenticated access to file storage scoped to the user who authorized it.

  • Acts as the user: Access and write actions stay tied to the OneDrive account that authorized the agent.
  • Credentials stay vaulted: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: User permissions enforced. 90-day audit trail.
OneDrive
agent · Acme Q3
Run
Find all PDF contracts shared with me this month and list the senders.
S
onedrive_files_search
74ms
Document agent
9 PDF contracts shared this month. Top senders: Sarah (3 files, Acme MSA, SOW, NDA), James (2, Globex contract, addendum), Maria (2, Initech renewal, order form), David (2, Umbrella addendum, PO).
Sources: 9 PDFs, shared this month
onedrivemcp
9 files
18:29
Message Claude...

Tools your document agent reaches for on OneDrive, scoped per user.

CALL ANY TOOL
List, search, download, share files, and create folders in OneDrive.
onedrive_list_delta
List delta
Track changes to files and folders in the signed-in user's personal OneDrive since a previous sync, without re-scanning the entire drive. Call without a token to get the current state plus a delta token; pass the token back on later calls to get only what changed since then. Essential for keeping an external system in sync with OneDrive.
Parameters
Name
Type
Required
Description
token
string
Optional
The delta or next token from a previous list_delta response's @odata.deltaLink or @odata.nextLink. Omit on the first call to start a fresh sync from the current state.
onedrive_search_drive_items
Search drive items
onedrive_list_drives
List drives
onedrive_search_items_in_drive
Search items in drive
onedrive_list_versions
List versions
onedrive_get_drive
Get drive
onedrive_list_activities
List activities
onedrive_get_permission
Get permission
onedrive_list_permissions
List permissions
onedrive_get_thumbnails
Get thumbnails
onedrive_list_drive_items
List drive items
onedrive_get_drive_item
Get drive item
onedrive_list_recent_items
List recent items
onedrive_get_item_analytics
Get item analytics
onedrive_list_shared_items
List shared items
onedrive_get_special_folder
Get special folder
onedrive_list_items_by_path
List items by path
onedrive_get_version_content
Get version content
onedrive_list_items_in_drive
List items in drive
onedrive_get_item_by_path
Get item by path
onedrive_list_item_versions_in_drive
List item versions in drive
onedrive_get_item_in_drive
Get item in drive
onedrive_create_folder
Create folder
onedrive_update_permission
Update permission
onedrive_create_sharing_link
Create sharing link
onedrive_update_drive_item
Update drive item
onedrive_create_sharing_link_in_drive
Create sharing link in drive
onedrive_checkin_file
Checkin file
onedrive_invite_users
Invite users
onedrive_preview_item
Preview item
Build your Agent
Drop the toolkit in, point it at the user, and your document agent can use OneDrive from the first run.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
import { z } from "zod";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["onedrive"], toolNames: ["onedrive_files_list", "onedrive_file_get", "onedrive_file_download"] },
pageSize: 100,
});

const lcTools = tools.map((t) => new DynamicStructuredTool({
name: t.tool.definition.name,
description: t.tool.definition.description,
schema: z.object({}).passthrough(),
func: async (args) => {
const { data } = await sk.tools.executeTool({
toolName: t.tool.definition.name,
identifier: "user_123",
params: args,
});
return JSON.stringify(data);
},
}));

const agent = createReactAgent({ llm, tools: lcTools });
import { ScalekitClient } from "@scalekit-sdk/node";
import OpenAI from "openai";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["onedrive"], toolNames: ["onedrive_files_list", "onedrive_file_get", "onedrive_file_download"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
type: "function",
function: {
name: t.tool.definition.name,
description: t.tool.definition.description,
parameters: t.tool.definition.input_schema,
},
}));

const resp = await openai.responses.create({
model: "gpt-4o", input: prompt, tools: llmTools,
});
import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["onedrive"], toolNames: ["onedrive_files_list", "onedrive_file_get", "onedrive_file_download"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
name: t.tool.definition.name,
description: t.tool.definition.description,
input_schema: t.tool.definition.input_schema,
}));

const msg = await anthropic.messages.create({
model: "claude-sonnet-4-6", max_tokens: 1024,
tools: llmTools,
messages: [{ role: "user", content: prompt }],
});
import { Agent } from "@google/adk/agents";
import {
MCPToolset, StreamableHTTPConnectionParams,
} from "@google/adk/tools/mcp";

const toolset = new MCPToolset({
connectionParams: new StreamableHTTPConnectionParams({
url: "https://mcp.scalekit.com/onedrive",
headers: { Authorization: `Bearer ${userScopedToken}` },
}),
});

const agent = new Agent({
name: "agent", model: "gemini-2.0-flash",
tools: await toolset.getTools(),
});
Try these prompts
Paste any prompt into your agent to start using OneDrive.
Search & recall
Copy the prompt
Copied
Find all PDFs shared with me this week.
Copy the prompt
Copied
List files in [folder name].
Copy the prompt
Copied
Get metadata for [file name].
Copy the prompt
Copied
Search OneDrive for [keyword].
Action & sharing
Copy the prompt
Copied
Download [file name] as PDF.
Copy the prompt
Copied
Create a shared link for [file].
Copy the prompt
Copied
Create a folder named [name] in [parent].
Copy the prompt
Copied
Share [file] with [email] as editor.
Audits & reporting
Copy the prompt
Copied
Which files were modified today?
Copy the prompt
Copied
List files owned by [email].
Copy the prompt
Copied
Find files larger than 50MB.
Copy the prompt
Copied
Show files shared with anyone outside the org.
SEE HOW AUTH WORKS
Users authorize OneDrive once. Their credentials stay vaulted, every call is checked, and every action is logged.
1
Authorize
Your user connects
OneDrive
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
OneDrive
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
OneDrive
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
OneDrive
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
Same per-user auth pattern across other document agents and MCP connectors. Working code, live demos, fork what fits.
GTM and RevOps Teams
Deal room sync
Pulls opportunity context from Salesforce, captures key decisions from Slack, and syncs a running summary to the deal room doc in Google Drive, but only when the deal actually changed.
People Ops and HR teams
Performance review collector
Collects review feedback from Airtable and Google Forms scoped to each manager's direct reports, writes per-employee summaries to Notion, and DMs the manager a Slack digest.
People Ops and HR teams
Offer letter routing agent
Drafts the offer in PandaDoc, blocks on the hiring manager's approval in Slack, then emails the candidate their e-signature link. Every call runs as the recruiter who triggered it, never a shared HR bot.
Support and Ops Teams
Support ticket automation agent
Fetches new Zendesk tickets, drafts a reply from Notion knowledge base articles, digests what it cannot answer to Slack, and archives the rest, acting as the support agent rather than a shared API key.
Test other agents
Same per-user auth pattern across other document agents and MCP connectors. Working code, live demos, fork what fits.
SUPPORT
Support ticket automation (Google ADK)
Fetch, annotate, and archive Zendesk tickets with Notion context, digesting anything it cannot answer to Slack.
GTM
Deal room sync agent
Pull opportunity context from Salesforce, capture decisions from Slack, and keep the Google Drive deal room doc current.
PEOPLE OPS
Performance review collector agent
Collect review feedback from Airtable and Google Forms per manager, summarise each report in Notion, and DM the digest in Slack.
PEOPLE OPS
Offer letter routing agent
Draft the offer in PandaDoc, gate it on hiring manager approval in Slack, then email the candidate their signature link.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential so attribution, audit, and scope stay accurate.
// shared token
 audit → bot_service_account
 user_filter → broken

 // scalekit
 audit → user_abc
 scope → enforced ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
OneDrive today. Others tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access OneDrive as the user or as a shared key?
As the user. Each workspace member authorizes once and Scalekit resolves their credential at request time. Audit logs attribute every action to that user, not a shared service account.
Where is the OneDrive oauth 2.0 stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. Refresh is automatic. Revocation is a single dashboard action. Tokens never appear in prompts, logs, or LLM context.
Can I limit what the agent is allowed to do in OneDrive?
Yes. Pass a tool name filter to listScopedTools so the document agent only sees the subset you authorize. Pre-API-call scope checks block out-of-policy actions before the request reaches OneDrive.
What happens when a user revokes OneDrive access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
Can the agent access files in SharePoint document libraries through OneDrive?
Yes, if the authorizing user has access to the SharePoint site. Files synced via OneDrive for Business follow the same Microsoft Graph permissions. SharePoint sites the user hasn't been granted access to remain inaccessible.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""onedrive"": {
""url"": ""https://mcp.scalekit.com/onedrive"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.onedrive]
url = ""https://mcp.scalekit.com/onedrive""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""onedrive"": {
""url"": ""https://mcp.scalekit.com/onedrive"",
""type"": ""http""
}
}
}