{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_84mbxwg97tuw","handle":"ews-mcp-orf","url":"https://wellknown.network/agents/ews-mcp-orf","links":{"self":"https://wellknown.network/agents/ews-mcp-orf/record.json","html":"https://wellknown.network/agents/ews-mcp-orf","markdown":"https://wellknown.network/agents/ews-mcp-orf/record.md","api":"https://wellknown.network/api/v1/agents/ews-mcp-orf","status":"https://wellknown.network/api/v1/agents/ews-mcp-orf/status","claim":"https://wellknown.network/agents/ews-mcp-orf/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/ews-mcp-orf/claim.json","badge":"https://wellknown.network/agents/ews-mcp-orf/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/ews-mcp-orf/history","tools":"https://wellknown.network/api/v1/agents/ews-mcp-orf/tools"},"ard":{"identifier":"urn:air::server:ews-mcp-orf","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"ews-mcp-orf","summary":"EWS MCP server — a lean, safety-gated, cache-first tool surface for an executive-mailbox assistant (see DESIGN.md). Internally packaged fork of azizmazrou/ews-mcp; provenance in PROVENANCE.md at the repo root.","description":"# ews-mcp-orf\n\nMCP server for an on-premises Microsoft Exchange mailbox via EWS — a lean,\nsafety-gated tool surface for LLM assistants: capability tiers, send\nkill-switch, two-phase content-bound send confirmation, recipient guard,\nand a hash-chained audit log.\n\n> This is the internally packaged distribution of\n> [`azizmazrou/ews-mcp`](https://github.com/azizmazrou/ews-mcp) (MIT).\n> It carries local hardening patches (attachment size cap, recipient\n> canonicalization, audit fail-closed, persistent confirm tokens,\n> system-trust TLS). Full architecture and development docs live in the\n> source repository.\n\n## Install & run (stdio — the default)\n\nRequires [uv](https://docs.astral.sh/uv/) (a single EXE; it manages its\nown Python) — no Docker, no venv, no checkout:\n\n```bash\nuvx --from ews-mcp-orf ewsmcp\n```\n\nPin a version for pilot deployments:\n\n```bash\nuvx --from ews-mcp-orf==4.5.0a1.post1 ewsmcp\n```\n\n**Claude Code** (one command, then restart the session):\n\n```bash\nclaude mcp add exchange \\\n  -e EWS_SERVER_URL=\"https://mail.example.com/EWS/Exchange.asmx\" \\\n  -e EWS_EMAIL=\"user@example.com\" \\\n  -e EWS_USERNAME=\"DOMAIN\\\\user\" \\\n  -e EWS_PASSWORD=\"…\" \\\n  -e EWS_CAPABILITY_TIER=\"read\" \\\n  -e SEND_ENABLED=\"false\" \\\n  -e EWS_TZ=\"Europe/Vienna\" \\\n  -- uvx --from ews-mcp-orf ewsmcp\n```\nOn Windows, Integrated Authentication is available as an explicit opt-in:\n\n```bash\nEWS_AUTH_MODE=process \\\nEWS_SERVER_URL=\"https://mail.example.com/EWS/Exchange.asmx\" \\\nEWS_EMAIL=\"user@example.com\" \\\nuvx --from ews-mcp-orf ewsmcp\n```\n\nThis uses the current Windows logon token through SSPI and does not use\n`EWS_USERNAME` or `EWS_PASSWORD`. The default `EWS_AUTH_MODE=credentials`\nremains portable across Windows, Linux and macOS.\n\n**Claude Desktop** — add to `claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"exchange\": {\n      \"command\": \"uvx\",\n      \"args\": [\"--from\", \"ews-mcp-orf\", \"ewsmcp\"],\n      \"env\": {\n        \"EWS_SERVER_URL\": \"https://mail.example.com/EWS/Exchange.asmx\",\n   …","publisher":null,"homepage":null,"repository":null,"version":"4.6.0","license":null,"protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:ews-mcp-orf","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","summary":"pypi","version":"pypi","description":"pypi"}},"derived":{"capabilities":[{"slug":"dev.version-control","name":"Version Control","confidence":0.825,"provenance":"derived"},{"slug":"security.identity","name":"Identity & Access","confidence":0.825,"provenance":"derived"}],"categories":["dev","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"ews-mcp-orf","registry":"pypi","observedAt":"2026-11-05T21:26:38.982Z","publishedAt":"2026-09-16T07:57:02.542125Z","latestVersion":"4.6.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"ews-mcp-orf","url":"https://pypi.org/project/ews-mcp-orf/","firstSeenAt":"2026-09-18T08:26:25.102Z","fetchedAt":"2026-11-05T21:25:20.299Z","normalizedAt":"2026-11-05T21:25:20.299Z"}]},"firstSeenAt":"2026-09-18T08:26:25.102Z","updatedAt":"2026-11-05T21:26:38.982Z"}