Microsoft To Do MCP: Graph API access, tenant permitting

    Runs on Microsoft Graph, so your work tenant, not the server, decides what is possible.

    Community serversLast checked: September 2026

    Microsoft To Do MCP access comes from community servers built on Microsoft Graph. Microsoft publishes Graph, not an MCP server for To Do.

    What it can do

    • Read task lists and tasks
    • Create tasks with due dates and reminders
    • Complete and update tasks
    • Read checklist items on a task

    What it can't do

    • Work and school accounts often require admin consent, which many tenants refuse
    • Graph permission names are easy to get wrong, producing empty results rather than errors
    • Flagged-email tasks behave differently from ordinary tasks

    Microsoft To Do is not really a standalone target: everything goes through Microsoft Graph, which means the deciding factor is your account type, not the MCP server you choose. On a personal Microsoft account this is straightforward. On a work or school account, your tenant administrator decides whether it happens at all.

    Admin consent is the actual blocker

    Graph permissions for tasks frequently need administrator consent on managed tenants. If you are on a work account and the authorisation screen ends in a message about needing approval, no amount of config editing will fix it. That is a conversation with IT, and it is a reasonable thing for them to be careful about.

    Permissions that fail quietly

    Graph has both delegated and application permissions, and closely named scopes with different reach. The failure mode is not an error, it is an empty list — the assistant says you have no tasks and sounds certain. If reads come back empty on an account you know has tasks, suspect the scope before the server.

    Where it shines

    Flagged email. Outlook turns flagged messages into To Do items, and an assistant that can read that list turns "what did I flag this week and is any of it still open" into one question. That alone justifies the setup for people who live in Outlook.

    Where LemTask stands today

    LemTask does not ship an MCP server yet, and we are not going to pretend otherwise on a page developers will read. What LemTask has working right now is outbound and inbound webhooks, Zapier, Make and Apple Shortcuts, which covers "when a task is created, do X" and "create a task from anything that can send an HTTP request". An MCP connection is on the roadmap; when it ships and we have tested it end to end with Claude, this page will say so with the config block, and not a day earlier.

    Setup, step by step

    1. 1

      Register an app in Entra ID

      Create an app registration, add a redirect URI, and note the client ID and tenant ID. A personal Microsoft account is far simpler than a managed one.

    2. 2

      Add the right Graph task permissions

      Request the delegated task permissions that include write access, and get administrator consent if your tenant requires it.

    3. 3

      Wire the server into your client

      Add a maintained community server to your MCP client config with the client ID, tenant and secret as environment variables, then restart.

    4. 4

      Verify with a known list

      Ask for a list you know has tasks. An empty result on a populated list means a scope problem, not an empty account.

    Questions

    Related pages

    Want a task app that automates today?

    LemTask has no MCP server yet. It does have webhooks, Zapier, Make and Apple Shortcuts working now, plus tasks, habits, a focus timer and calendar sync. Free forever for individuals.