OneDrive MCP integration for AI agents.
Connect AI agents to OneDrive through 13 structured actions, including download file, create folder, and delete item. Review authentication, inputs, workflow…
- ACTION CONTRACTS
- 13
- AUTHENTICATION
- OAuth 2.0
- SOURCE STATUS
- Provider-backed
CATALOG SOURCE REVIEWED AUGUST 23, 2026 / ACTION NAMES AND SCHEMAS DERIVED FROM WORKING MACHINES PROVIDER SOURCE
CAPABILITY PROFILE
What the OneDrive integration exposes
The OneDrive Agent App exposes 13 provider-backed actions for storage and productivity work. Its current contract lets an authorized agent download one file from onedrive by item id into local transit file storage, create a folder in onedrive, and delete a drive item from onedrive and move it to the recycle bin. These operations are called through Working Machines as typed capabilities rather than through browser navigation or copied UI steps.
A connection uses OAuth 2.0. Before execution, the agent can inspect the selected action, its required fields, declared scopes, and expected output contract. Provider credentials remain inside the Working Machines runtime; the calling agent receives the capability and its structured result, not the underlying secret.
For reliable operation, start with the narrowest action that satisfies the task, resolve stable provider identifiers before changing state, and validate the returned object or status after execution. Availability still depends on the connected OneDrive account, granted provider permissions, workspace policy, region, plan, and upstream API behavior.
VERIFIED ACTION SAMPLE
Real OneDrive capabilities.
Showing 12 of 13 actions. Risk labels are conservative signals based on operation names, not substitutes for provider documentation or runtime policy.
download_fileREADDownload one file from OneDrive by item ID into local transit file storage.
INPUTS: driveId / itemId / format / fileName
create_folderWRITECreate a folder in OneDrive.
INPUTS: driveId / name / parentItemId / parentPath / conflictBehavior
delete_itemHIGH IMPACTDelete a drive item from OneDrive and move it to the recycle bin.
INPUTS: driveId / itemId / ifMatch
download_file_by_pathREADDownload one file from OneDrive by path into local transit file storage.
INPUTS: driveId / itemPath / fileName
download_item_as_formatREADDownload one drive item into local transit storage after converting it to a supported Microsoft Graph format.
INPUTS: driveId / format / itemId / pathAndFilename / fileName
get_driveREADGet metadata for the current drive or a specific drive.
INPUTS: driveId / select
get_itemREADGet metadata for a drive item by item ID or path.
INPUTS: driveId / itemId / itemPath / select / expand
get_rootREADGet metadata for the root folder of the current drive or a specific drive.
INPUTS: driveId / select / expand
list_folder_childrenREADList the direct children of a folder in OneDrive.
INPUTS: driveId / folderItemId / folderPath / top / select
search_itemsREADSearch OneDrive for files and folders by keyword.
INPUTS: driveId / query / top / select / expand
update_file_contentWRITEReplace the content of one existing OneDrive file.
INPUTS: driveId / itemId / file / contentBase64 / text
update_item_metadataWRITERename, move, or update metadata for a drive item.
INPUTS: driveId / itemId / name / description / ifMatch
INPUT CONTRACTS
Know what the action needs before it runs.
download_file
driveIdOPTIONAL- Optional drive ID. Omit it to use the authenticated user's default OneDrive.
itemIdREQUIRED- OneDrive drive item ID.
formatOPTIONAL- Optional format to convert the file into before download.
fileNameOPTIONAL- Optional file name to use for the local transit file.
create_folder
driveIdOPTIONAL- Optional drive ID. Omit it to use the authenticated user's default OneDrive.
nameREQUIRED- Folder name.
parentItemIdOPTIONAL- OneDrive drive item ID.
parentPathOPTIONAL- Path from the drive root, starting with /.
conflictBehaviorOPTIONAL- Conflict behavior used when a folder with the same name already exists.
delete_item
driveIdOPTIONAL- Optional drive ID. Omit it to use the authenticated user's default OneDrive.
itemIdREQUIRED- OneDrive drive item ID.
ifMatchOPTIONAL- Optional eTag used for conditional delete requests.
download_file_by_path
driveIdOPTIONAL- Optional drive ID. Omit it to use the authenticated user's default OneDrive.
itemPathREQUIRED- Path to a drive item relative to the drive root. A leading slash is optional.
fileNameOPTIONAL- Optional file name to use for the local transit file.
PROVIDER-SPECIFIC WORKFLOWS
Jobs this Agent App can support
Inspect Download File
Download one file from OneDrive by item ID into local transit file storage. Use this as a bounded discovery step, retain the returned identifier, and avoid expanding the read beyond the task's stated scope.
download_fileControl Create Folder
Create a folder in OneDrive. Resolve the target first, present material changes for confirmation, and make retries idempotent where the provider supports it.
create_folderVerify with Download File By Path
Download one file from OneDrive by path into local transit file storage. Compare the returned provider state with the intended outcome and preserve stable IDs or canonical links in the run record.
download_file_by_pathSAFETY BOUNDARY
Operate OneDrive with explicit limits
- Authorize OneDrive with OAuth 2.0 and grant only the provider access required by the selected actions.
- 5 actions are change-capable by name. Confirm the target identity and material parameters before allowing a write.
- Treat `delete_item` as high-impact operations and require an explicit approval boundary.
- The sampled contract declares provider scopes including `Files.ReadWrite` and `Files.Read`; verify the complete action contract before execution.
- After a call, inspect the structured result and execution record before reporting that the OneDrive task completed successfully.
CONNECTION MODEL
OAuth 2.0
OneDrive uses OAuth 2.0. Connection requirements and availability are determined by the provider and the Working Machines deployment.
Working Machines stores provider credentials behind the execution boundary. An agent can use an authorized connection identity, but catalog discovery alone does not reveal OAuth tokens, API keys, or provider secrets.
- READ SIGNALS
- 8
- WRITE SIGNALS
- 4
- HIGH IMPACT
- 1
- REVIEW SIGNALS
- 0
EVIDENCE AND AVAILABILITY
Provider reference
Action names, input fields, authentication types, and counts on this page are generated from the Working Machines provider catalog. Provider behavior, quotas, object semantics, account eligibility, and regional availability remain governed by OneDrive.