Borrowing it
Nothing to install: this file belongs to lihaokun/outlook-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/lihaokun/outlook-mcp/master/CLAUDE.mdgit clone --depth 1 https://github.com/lihaokun/outlook-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/lihaokun/outlook-mcp/claude-md)<a href="https://agentmods.dev/instructions/lihaokun/outlook-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/lihaokun/outlook-mcp/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/lihaokun/outlook-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/lihaokun/outlook-mcp/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00489 | $0.00489 |
| Opus 5 | $0.00244 | $0.00244 |
| Sonnet 5 | $0.00098 | $0.00098 |
| Haiku 4.5 | $0.00049 | $0.00049 |
Grade A, and why
outlook-mcp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
outlook-mcp
MCP server for Outlook — 通过 Windows COM 接口为 AI 助手提供邮件、联系人和日历操作能力
项目结构
outlook_mcp/ — 核心源码
server.py — MCP Server（FastMCP 工具注册与路由）
outlook.py — Outlook COM 接口封装（win32com）
docs/ — 设计文档与流程规范
workflow.md — 开发工作流程规范（@docs/workflow.md）
design/ — 架构与细化文档
技术栈
- 语言：Python 3.10+
- COM 接口：pywin32 (
win32com.client) - MCP 框架：mcp[cli] (FastMCP)
- 传输：stdio
- 平台：Windows（需 Outlook 桌面版运行中）
常用命令
# 安装（开发模式）
pip install -e .
# 运行 MCP Server
outlook-mcp
# 或通过 Python 模块运行
python -m outlook_mcp.server
代码风格
- 命名：Python 内部 snake_case，MCP 工具参数 camelCase（与 thunderbird-mcp 一致）
- 注释语言：英文（docstring），中文（设计文档）
参考实现
- thunderbird-mcp：https://github.com/TKasperczyk/thunderbird-mcp — 对标工具接口设计
- mail-assistant：https://github.com/lihaokun/mail-assistant — 上游项目，定义功能规格
已知限制与注意事项
- Outlook 桌面客户端必须处于运行状态，否则 COM 调用失败
- 发送/回复/转发调用
.Display()而非.Send()，需用户手动确认 - COM 对象不可跨线程使用
EntryID在邮件移动到不同 Store 后可能改变- 中文版 Outlook 文件夹名为 "收件箱" 而非 "Inbox"，代码已做兼容
- outlook.py 中严禁 print() 到 stdout（会破坏 JSON-RPC 通信）
工作流程
遵循 @docs/workflow.md 中定义的开发流程规范。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 59 lines · 489 tokens per session scan A 0b07cb682cbc
outlook-mcp CLAUDE.md is an instructions file published in the GitHub repository lihaokun/outlook-mcp (1 stars, last pushed 6mo ago), licensed MIT. It adds 489 tokens to every session, about $0.0024 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
deepseek-harness AGENTS.md
AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.