Copilot gets a key to your Microsoft 365 tenant

What it does

Work IQ is Microsoft’s official plugin marketplace for GitHub Copilot: a set of MCP servers, skills, and tools that let an AI assistant read (and in the preview plugin, write) your Microsoft 365 data. Ask “what meetings do I have tomorrow” or “summarize emails from Sarah about the budget” and the agent queries your actual tenant. It ships as a CLI (workiq ask, workiq mcp) and as installable Copilot CLI plugins.

The interesting bit

The boring part is the valuable part: this is essentially an auth-and-consent bridge. The hard problem isn’t querying email — it’s getting an AI tool safely consented into an Entra tenant, and the repo leans into that with an admin enablement guide and a one-click consent URL. The plugin split is also sensible: read-only natural-language queries in the stable plugin, broader CRUD entity tools quarantined in workiq-preview.

Key highlights

• Four plugins: workiq (natural-language M365 queries), workiq-preview (adds structured fetch/create/update/delete and schema discovery), microsoft-365-agents-toolkit (scaffolding and evals for declarative agents), and workiq-productivity (read-only insights like meeting costs and org charts).
• Runs as a standalone MCP server via Node.js 18+; no runtime beyond that.
• Cross-platform: Windows, Linux, and macOS, x64 and ARM64.
• Open to community plugins via a documented contribution flow.

Caveats

• Public Preview — features and APIs may change without notice.
• Requires tenant admin consent for M365 data access; non-admins are stuck until someone with rights approves.
• The write-capable tools live only in the preview plugin, so treat structured M365 mutations as experimental.

Verdict

Worth a look if you live in Copilot CLI and your tenant admin is friendly. If you’re not on Microsoft 365, or admin consent is a bureaucratic odyssey, there’s nothing here for you.