olk is a scriptable CLI and MCP server for Outlook mail, calendars, contacts, tasks, and OneDrive through Microsoft Graph. It works with personal Outlook.com accounts and enterprise Microsoft 365 accounts.

brew install rlrghb/tap/olk
# or
go install github.com/rlrghb/olkcli/cmd/olk@latest

The npm package is olkcli; the installed command is olk:

npm install -g olkcli

See macOS notes if macOS asks for Keychain access after an upgrade.

olk auth login
olk auth status
olk mail list --json --results-only --select id,subject,from
olk mail search 'from:[email protected] subject:urgent'
olk calendar view --days 7
olk contacts search "Alex"
olk todo lists list
olk drive ls

For work/school accounts and enterprise-only features:

olk auth login --enterprise

See the command reference for all commands and flags.

Use a cid: URL in the HTML and supply the matching image with repeatable --inline CID=PATH flags. This works for new drafts and true threaded reply or reply-all drafts:

olk mail reply <ID> --draft --html \
  --body '<p>See both images:</p><img src="cid:logo"><img src="cid:steps">' \
  --inline logo=logo.png --inline steps=steps.png

olk mail drafts create --to [email protected] --subject "Instructions" --html \
  --body '<p>Follow these steps:</p><img src="cid:steps">' \
  --inline steps=steps.png

Each CID must be unique and referenced by the HTML. Files must be images and each must be under 3 MB, the Microsoft Graph simple-attachment limit. Draft commands do not send mail; immediate sends and forwards do not accept --inline.

Results are written to stdout; diagnostics and prompts go to stderr.

olk mail list --json --results-only | jq '.[].subject'
olk contacts list --plain

Output modes are JSON (--json), TSV (--plain), and aligned tables by default. Use --concise to omit large bodies/previews and --select to limit fields where supported. See scripting and sync.

• Use --no-write --no-send --no-input for unattended read-only runs.
• MCP exposes curated tools and requires explicit opt-in for mutations.
• External mail, calendar, contact, and file text can be wrapped with --wrap-untrusted for agent-safe consumption.
• Refresh tokens are stored in the OS keychain; access tokens are kept in memory only.

Read the security and privacy guide before connecting an agent or sharing logs.

• Command reference
• Authentication and accounts
• Scripting and synchronization
• MCP and AI agents
• Security and privacy
• Enterprise app setup
• Development and releases
• Agent instructions

make build
make test
make lint

See development and releases for repository structure, validation, CI, and publishing details.

See LICENSE.