Skip to content

Entrabot Identity Research

Source: https://github.com/microsoft/entrabot · License: MIT

Entrabot is a Python MCP server that gives a device-local agent its own Entra Agent ID and Agent User. The agent signs in autonomously, sends and receives Teams messages from its own account, uses its mailbox and Microsoft 365 files, and writes audit events against its own object ID. It runs on macOS, Linux, and Windows and works with Claude Code, Copilot CLI, or any MCP-speaking client.

All you need to get started is:

  • A Microsoft 365 development tenant where you can create app registrations and grant admin consent
  • A license that includes Teams and Outlook (E3 or E5 dev tenant licenses work)
  • Python 3.12 installed locally

The scripts take care of the rest: provisioning the Agent Identity Blueprint, Agent Identity, and Agent User in Entra; uploading a self-signed certificate; assigning the license; and configuring the local MCP server.

Microsoft Entra Agent ID and Microsoft Agent 365 — which enable these experiences — went GA on 2026-05-01. Entrabot is the reference implementation that pulls those primitives together on a real device, today.

Where to Start

Supported Platforms and Clients

  • Operating systems: macOS, Linux, Windows
  • MCP clients: Claude Code, GitHub Copilot CLI, and any other MCP-speaking host — see Clients Overview
  • Microsoft 365 surfaces: Teams chat, Outlook mail, OneDrive/SharePoint files (via Microsoft Agent 365 Work IQ)