OneDrive
Connect OneDrive to find, read and upload files, organize folders, share links with people, and restore earlier versions.
You register an app in the Microsoft Entra admin center, copy its Application (client) ID and a client secret Value into PopMCP, then sign in with Microsoft and approve access to your OneDrive.
- Setup time
- 5 min
- Auth
- OAuth authorization
- API base URL
- https://graph.microsoft.com/v1.0
- Rate limits
- OneDrive allows about 3,000 requests per 5 minutes per user, and each app gets a share of its organization's limit (from 1,250 resource units a minute for small organizations; a list or a write costs 2, a single read 1, a permission call 5). All of Microsoft Graph allows 130,000 requests per 10 seconds per app. A 429 says how long to wait in Retry-After.
Before you begin
- A Microsoft account with OneDrive: a personal Microsoft account (OneDrive, Outlook.com, Hotmail or Live), or a work or school account on Microsoft 365 with a license that includes OneDrive. A work account's OneDrive must have been opened once in a browser so Microsoft has set it up.
- A Microsoft Entra tenant you can register apps in: your organization's (members can register apps unless an admin turned that off, and the Application Developer role always can), or, with only a personal account, a tenant of your own such as the Default Directory of an Azure account.
- PopMCP's Redirect URI from the connect form: https://app.popmcp.com/api/providers/microsoft/callback
- Only for Files shared with me (other people's files, a colleague's or a team's drive): in most organizations an administrator approves that permission once. Your own files never need an admin by Microsoft's rules.
Get your credentials
Open App registrations
Go to entra.microsoft.com and sign in. If you belong to several tenants, use the Settings icon in the top bar to switch to the one that should own the app. Open Entra ID > App registrations and select New registration.
App registrations
| Display name | Application (client) ID | Created on | Certificates & secrets |
|---|---|---|---|
| Marketing siteSingle tenant only | 4c5d****-****-****-****-****8e21 | 3/14/2026 | Current |
Owned applications lists the apps you registered yourself.
Register the app
Enter a Name people will recognize, such as PopMCP: Microsoft shows it when asking for access. Under Supported account types pick Any Entra ID Tenant + Personal Microsoft accounts, so work, school and personal OneDrive accounts can all sign in, then select Register. Single tenant only works too for your organization's own accounts, but then the app's Directory (tenant) ID goes into PopMCP as well.
Register an application
The user-facing display name for this application.
Add PopMCP's Redirect URI
On the new app, open Authentication under Manage. On the Redirect URI configuration tab select Add Redirect URI, choose the Web tile, enter https://app.popmcp.com/api/providers/microsoft/callback exactly as PopMCP shows it, and select Configure.
PopMCP | Authentication
Choose Web, not Single-page application or Mobile and desktop: the address must match character for character.
Create a client secret
Open Certificates & secrets, stay on Client secrets and select New client secret. Enter a description such as PopMCP, choose when it expires (24 months at most; Microsoft recommends less than 12) and select Add. Copy the Value column straight away: Microsoft never shows it again. The Secret ID beside it is not the secret.
PopMCP | Certificates & secrets
| Description | Expires | Value | Secret ID |
|---|---|---|---|
| PopMCP | 4/24/2027 | Kq8~****************************3fZaCopy this one | 7d1e****-****-****-****-****0b9c |
Copy the Application (client) ID
Open Overview and copy the Application (client) ID. You only need the Directory (tenant) ID if you chose Single tenant only.
PopMCP
Overview
- Display name
- PopMCP
- Application (client) ID
- 2f6c****-****-****-****-****a91d
- Directory (tenant) ID
- 72f9****-****-****-****-****1db4
- Client credentials
- 0 certificate, 1 secret
- Redirect URIs
- 1 web, 0 spa, 0 public client
The Application (client) ID is a GUID. A value with a tilde in it is a client secret.
Paste both into PopMCP and sign in
In PopMCP put the ID in Application (client) ID and the secret's Value in Client secret Value (the Directory (tenant) ID under More options only for a Single tenant only app). To also open files other people shared with you, tick Files shared with me under More options. Select Sign in with Microsoft, pick the account whose OneDrive you want, and select Accept.
Connect in PopMCP
Open your workspace, choose OneDrive in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| Application (client) IDtext | Only for your own app. In the Microsoft Entra admin center (entra.microsoft.com) open Entra ID, App registrations, New registration, pick Any Entra ID Tenant + Personal Microsoft accounts under Supported account types and select Register, then copy the Application (client) ID from Overview. |
| Client secret Valuesecret | In the app registration open Certificates & secrets, Client secrets, New client secret, then Add, and copy the Value column right away (it is shown once). Stored encrypted and used only on our server.Encrypted with AES-256-GCM on save and never shown again. |
| Directory (tenant) IDtext | Only for an app registered as Single tenant only. Copy it from the app's Overview page. |
| Extra accesschecklist | — |
https://app.popmcp.com/api/providers/microsoft/callbackIn your app registration open Authentication, select Add Redirect URI, choose Web, enter this exact URL and select Configure. It must match exactly, or Microsoft refuses the sign-in. Every Microsoft connector uses this same URL.
PopMCP verifies the credential against OneDrive immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Permissions to request
PopMCP asks OneDrive for exactly the permissions you tick in the connect form. Unticked permissions leave their tools listed but failing, so keep the defaults unless you have a reason to narrow them.
OneDrive grants exactly what you tick. 0 of 1 are on by default.
Other
all_filesFiles shared with meAlso open files other people shared with you, links into their OneDrive, and team or colleague drives. In many organizations an administrator must approve this once.
Verify it worked
PopMCP shows OneDrive as Connected under the account's address, and onedrive_get_drive returns the drive's type and how much of its storage is used.
Troubleshooting
"The app's redirect URI does not match"
Why: Microsoft answered AADSTS50011: PopMCP's callback is not registered as a Web redirect URI on the app, or differs by a character.
Fix: Open **Authentication**, select **Add Redirect URI**, choose **Web**, enter `https://app.popmcp.com/api/providers/microsoft/callback` and select **Configure**, then connect again.
"Microsoft did not accept the app's client secret"
Why: The **Secret ID** was pasted instead of the secret's **Value** (AADSTS7000215), or the Value was cut short when copying.
Fix: Under **Certificates & secrets** create a new client secret, copy its **Value** right away and paste it into PopMCP.
"The app's client secret has expired"
Why: Client secrets last at most 24 months (AADSTS7000222).
Fix: Create a new client secret under **Certificates & secrets** and reconnect OneDrive with its Value.
"This app does not accept the kind of Microsoft account you signed in with"
Why: The app's **Supported account types** leaves out the account you signed in with, typically a personal Outlook.com account on an organization-only app.
Fix: Register the app with **Any Entra ID Tenant + Personal Microsoft accounts**, or sign in with an account from the app's own organization.
"Your app is registered for one organization only"
Why: A Single tenant only app was used without its tenant (AADSTS50194).
Fix: Copy the **Directory (tenant) ID** from the app's **Overview**, enter it under **More options** in PopMCP and connect again.
"Your organization needs an administrator to approve this app"
Why: Your organization lets only admins approve apps, or only apps from verified publishers (AADSTS65001 or AADSTS90094).
Fix: An admin opens the app in the Microsoft Entra admin center, **API permissions**, and selects **Grant admin consent** for the organization. Then connect again.
"This Microsoft account has no OneDrive yet"
Why: A work or school account's OneDrive is created the first time someone opens it, and needs a license that includes OneDrive.
Fix: Open OneDrive once in a browser (office.com, then OneDrive) so Microsoft sets it up, or ask your Microsoft 365 admin for a license that includes it. Then connect again.
"This OneDrive connection can open only your own files"
Why: A tool named another person's drive, or a link into their OneDrive, and the connection was made without Files shared with me.
Fix: Reconnect OneDrive with **Files shared with me** ticked under **More options** (an administrator may have to approve it once). A sharing link can still be opened with open_sharing_link or onedrive_read_file.
Microsoft asks for an administrator only when Files shared with me is ticked
Why: Since 2025 Microsoft's default consent settings let people approve an app's access to their own files, but not to every file they can open (Files.Read.All, Files.ReadWrite.All).
Fix: Connect without Files shared with me for your own files, or ask an admin to open the app under **Enterprise apps**, **Permissions** and select **Grant admin consent**.
429 with a Retry-After header
Why: OneDrive allows about 3,000 requests per 5 minutes per user, and each app has a share of its organization's limit.
Fix: Wait the time Microsoft gives and try again. search_files, $select and onedrive_read_file do in one call what would otherwise take many.
Reference
Notion
Connect Notion to create and update pages, query and build databases, edit block content, and search your workspace. MCP setup for Claude and ChatGPT.
Outlook Mail
Connect Outlook Mail to search and read email, send, reply and forward with attachments, file messages into folders, and set rules and auto replies.