Connect
Optimize
Secure
OneNote MCP Server
for AI Agents
Production-ready OneNote MCP server with 37 extensible actions — plus built-in authentication, security, and optimized execution.
OneNote MCP Server
Built by 
StackOne
StackOne 
Coverage
37 Agent Actions
Create, read, update, and delete across OneNote — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your OneNote MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every OneNote tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every OneNote call.
Tools Discovery →What is the OneNote MCP Server?
A OneNote MCP server lets AI agents read and write OneNote data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's OneNote MCP server ships with 37 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Cursor, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All OneNote MCP Tools and Actions
Every action from OneNote's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Notebooks
- Create Notebook
Creates a new notebook in the user's default notebooks location
- Copy Notebook
Creates a copy of a notebook to a specified destination
- List Notebooks
Retrieves a collection of all notebooks accessible to the user
- Get Notebook
Retrieves the properties and metadata of a specific notebook by ID
User Notebooks
- Create User Notebook
Creates a new notebook for a specific user in their default notebooks location
- List User Notebooks
Retrieves a collection of notebooks for a specific user by ID or userPrincipalName
- Get User Notebook
Retrieves the properties and metadata of a specific notebook for a specific user by ID
Users
- List Users
Retrieve a list of user objects. By default, returns a limited set of properties (businessPhones, displayName, givenName, id, jobTitle, mail, mobilePhone, officeLocation, preferredLanguage, surname, userPrincipalName). Use $select to specify alternative properties.
- Get User
Retrieve the properties and relationships of a specific user by their ID or userPrincipalName. By default, only a limited set of properties are returned (businessPhones, displayName, givenName, id, jobTitle, mail, mobilePhone, officeLocation, preferredLanguage, surname, userPrincipalName). Use the select parameter to return an alternative property set.
Sections
- Create Section
Creates a new section in a specified notebook
- Get Section
Retrieves the properties and metadata of a specific section by ID
User Sections
- List User Sections
Retrieves all sections accessible to a specific user across all their notebooks
- Get User Section
Retrieves the properties and metadata of a specific section for a specific user by ID
Pages
- Create Page
Creates a new page in a specified section with HTML content
- Get Page
Retrieves the properties and metadata of a specific page by ID
- Delete Page
Deletes a page from OneNote
User Pages
- Create User Page
Creates a new page in a specific user's OneNote default section with HTML content
- List User Pages
Retrieves all pages accessible to a specific user across all their notebooks and sections
Other (19)
- Copy Section To Notebook
Copies a section to a specific notebook
- Copy Section To Section Group
Copies a section to a specific section group
- Create Section In Group
Creates a new section within a specific section group
- Copy Page To Section
Copies a page to a different section
- List Notebook Sections
Retrieves all sections within a specific notebook
- List Notebook Section Groups
Retrieves all section groups within a specific notebook
- Get Recent Notebooks
Retrieves the most recently accessed notebooks for the user
- List All Sections
Retrieves all sections accessible to the user across all notebooks
- List Section Pages
Retrieves all pages within a specific section
- List All Section Groups
Retrieves all section groups accessible to the user
- Get Section Group
Retrieves the properties and metadata of a specific section group by ID
- List Section Group Sections
Retrieves all sections within a specific section group
- List Nested Section Groups
Retrieves all nested section groups within a parent section group
- List User Section Groups
Retrieves all section groups accessible to a specific user
- List All Pages
Retrieves all pages accessible to the user across all notebooks and sections
- Get Page Content
Retrieves the HTML content of a specific page
- Get Page Preview
Retrieves a preview image and excerpt text of a page
- Get Operation Status
Retrieves the status of a long-running asynchronous operation
- Get Page Resource
Retrieves the binary content of a specific resource (image or file) from a page
Set Up Your OneNote MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to OneNote in under 10 lines of code.
MCP Clients
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}More Documents & Knowledge MCP Servers
Confluence
133+ actions
Lokalise
101+ actions
ClickUp
92+ actions
Discourse
67+ actions
Google Drive
47+ actions
JotForm
44+ actions
Figma
39+ actions
OneNote MCP Server Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
OneNote MCP Server FAQ
OneNote MCP server vs direct API integration — what's the difference?
A OneNote MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling OneNote. A OneNote MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling OneNote at runtime. StackOne provides both.
How does OneNote authentication work for AI agents?
OneNote authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own OneNote account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are OneNote MCP tools vulnerable to prompt injection?
Yes — OneNote MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a OneNote agent and how do I avoid it?
Context bloat happens when OneNote tool schemas and API responses eat your OneNote agent's memory, preventing it from reasoning effectively. A single OneNote query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my OneNote agent can access?
Yes — you can limit which actions your OneNote agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my OneNote MCP server?
Yes — you can create custom agent actions for your OneNote MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research OneNote's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a OneNote MCP server?
Skip a OneNote MCP server if your integration is purely software-to-software — direct OneNote API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call OneNote actions at runtime.
What AI frameworks and AI clients does the StackOne OneNote MCP server support?
The StackOne OneNote MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.