Microsoft Graph TranscriptsSAFE
A remote Model Context Protocol (MCP) server that retrieves Microsoft Teams meeting transcripts via the Microsoft Graph API, using delegated **OAuth 2.0 On-Behalf-Of (OBO)** authentication. Designed for integration with Microsoft Copilot Studio (via the MCP Wizard), though any MCP-compatible client
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A remote Model Context Protocol (MCP) server that retrieves Microsoft Teams meeting transcripts via the Microsoft Graph API, using delegated OAuth 2.0 On-Behalf-Of (OBO) authentication.
Hosted on Azure Container Apps and designed for integration with Microsoft Copilot Studio (via the MCP Wizard), though any MCP-compatible client can connect.
Table of Contents
- Use Cases
- Features
- Combining with Other MCP Servers
- Architecture
- How It Works — Internals
- End-to-End Pipeline
- Meeting Discovery (Calendar API)
- Meeting Resolution (OnlineMeetings API)
- Transcript Download & Cleaning
- MCP Transport
- Authentication Chain
- Tools
- Prerequisites
- Quick Start
- Azure App Registration Setup
- Environment Variables
- Local Development
- Docker Build & Run
- Deploy to Azure Container Apps
- Copilot Studio Integration
- Using the Meeting Link for Downstream Actions
- Agent Instructions
- API Reference
- Project Structure
- Permissions Deep Dive
- Troubleshooting
- Development History
- License
Use Cases
Once an AI agent can access the full text of a meeting, the transcript becomes a launchpad for downstream automation:
4600afa7041eOBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add transcripts-mcp-server --env AZURE_CLIENT_SECRET=${AZURE_CLIENT_SECRET} -- npx -y [email protected]{
"mcpServers": {
"transcripts-mcp-server": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"AZURE_CLIENT_SECRET": "${AZURE_CLIENT_SECRET}"
}
}
}
}Exposed tools (3)
2 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_meeting_transcript | read | Retrieve the cleaned transcript for a Microsoft Teams meeting. |
list_recent_meetings | read | List recent Microsoft Teams online meetings for the signed-in user. |
save_transcript | write | Retrieve a meeting transcript and save it to a SharePoint document library. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (4)
/**
@azure/msal-node, @modelcontextprotocol/sdk, express, zod, @types/express, @types/node, rimraf, ts-node
- **One `Server` instance per request**: A fresh MCP `Server` is created for every incoming `POST /mcp`, wired with the user's Graph token, and disposed after the response. No sessions are maintained.
Gates applied: no_behavioural_pass, no_license.
4600afa7041efull audit observations/trust-audit/mcp-server/itspecialist111__microsoft-graph-transcripts.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | 4600afa7041e | SAFE | B | 89 | first audit |
Questions
What is the Microsoft Graph Transcripts MCP server?
A remote Model Context Protocol (MCP) server that retrieves Microsoft Teams meeting transcripts via the Microsoft Graph API, using delegated **OAuth 2.0 On-Behalf-Of (OBO)** authentication. Designed for integration with Microsoft Copilot Studio (via the MCP Wizard), though any MCP-compatible client
What tools does Microsoft Graph Transcripts expose?
3 in total: 2 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Microsoft Graph Transcripts safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Microsoft Graph Transcripts need?
It reads AZURE_CLIENT_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Microsoft Graph Transcripts run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as transcripts-mcp-server at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (4600afa7041e), read on 2026-10-09. The repository is watched and re-audited when it changes.