Microsoft To Do for AI agents

Microsoft To Do is a task management app for creating and tracking personal task lists, checklists, and reminders across devices. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Connect Microsoft To Do See the 22 actions ↓

Project managementOAuth 2.0MCP + RESTtodo.microsoft.com

AUDIT LOG · MICROSOFT TO DOPOLICY: acme-support

09:41:07 · claude · u_8f2read

microsoft_to_do.list_tasks

List Tasks✓ allowed · 212ms

09:41:08 · claude · u_8f2read

microsoft_to_do.get_task

Get Task✓ allowed · 164ms

09:41:09 · claude · u_8f2write

microsoft_to_do.create_task

Create Task✓ approved · approved by user

09:41:12 · claude · u_8f2destructive

microsoft_to_do.delete_task

Delete Task✕ blocked · policy: deny

EVERY MICROSOFT TO DO CALL, ON THE RECORD

01 · USE CASES

What agents do in Microsoft To Do.

Create a task on a list

Add a new task to a list after a request comes in from another channel.

Check a task list's items

List the tasks on a list to see what is outstanding, read-only.

Mark a task complete

Mark a task complete once the underlying work has been confirmed done by the person responsible.

02 · ACTIONS

22 Microsoft To Do actions, graded by risk.

Every Microsoft To Do action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

Look things up. Allowed by default.

microsoft_to_do.get_task
Get Task
microsoft_to_do.list_tasks
List Tasks
microsoft_to_do.get_task_list
Get Task List
microsoft_to_do.list_task_lists
List Task Lists
microsoft_to_do.get_current_user
Get Current User
microsoft_to_do.get_checklist_item
Get Checklist Item
microsoft_to_do.get_task_attachment
Get Task Attachment
microsoft_to_do.list_checklist_items
List Checklist Items
microsoft_to_do.list_task_attachments
List Task Attachments
microsoft_to_do.download_task_attachment
Download Task Attachment

write

Create and change things. Allow, or ask the user first.

microsoft_to_do.create_task
Create Task
microsoft_to_do.update_task
Update Task
microsoft_to_do.create_task_list
Create Task List
microsoft_to_do.update_task_list
Update Task List
microsoft_to_do.create_checklist_item
Create Checklist Item
microsoft_to_do.update_checklist_item
Update Checklist Item
microsoft_to_do.complete_task
Complete Task
microsoft_to_do.upload_task_attachment
Upload Task Attachment

destructive

Delete, cancel or archive. Ask first, or deny outright.

microsoft_to_do.delete_task
Delete Task
microsoft_to_do.delete_task_list
Delete Task List
microsoft_to_do.delete_checklist_item
Delete Checklist Item
microsoft_to_do.delete_task_attachment
Delete Task Attachment

03 · HOW IT WORKS

Microsoft To Do in three steps.

01Your users connect Microsoft To DoThey sign in to Microsoft To Do on Arc0 Connect, under your brand, and approve the access you ask for.
02You set the rulesReads run, writes like “create Task” can wait for the user, and “delete Task” can be denied outright.
03Any agent can actYour agent calls Microsoft To Do through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.

POLICY.TS

await arc0.policies.set('microsoft_to_do', {
  read: 'allow',
  write: 'ask',        // create_task
  destructive: 'deny',  // delete_task
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2

04 · AUTH AND DATA

How Microsoft To Do connects.

Users sign in to Microsoft To Do on Arc0 Connect and approve the scopes you request. Build with Arc0’s Microsoft To Do OAuth app, or bring your own so the Microsoft To Do consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

The same Microsoft To Do connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH: OAuth 2.0
CREDENTIALS: Per-tenant encrypted vault
MODEL SEES: Results only, never credentials
AUDIT LOG: Every call, on every plan

05 · WORKS WITH

Use Microsoft To Do from any agent.

Claude

ChatGPT

Cursor

Codex

VS Code

OpenAI Agents SDK

Claude Agent SDK

Vercel AI SDK

Mastra

LangGraph

06 · RELATED

More project management apps.

Google Tasks18 actions

Moco218 actions

Wrike144 actions

ALL PROJECT MANAGEMENT APPS →

07 · FAQ

Microsoft To Do and Arc0, answered.

Q01

Can I use Microsoft To Do with Claude, ChatGPT or Cursor?

Yes. Connect Microsoft To Do to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Microsoft To Do actions you allow.

Q02

How do users connect Microsoft To Do?

Q03

Which Microsoft To Do actions can my agent take?

22 in total: 10 read, 8 write and 4 destructive, such as “create Task”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Microsoft To Do?

Yes. Actions like “delete Task” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Microsoft To Do too?

Yes. The same Microsoft To Do connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Microsoft To Do into your agent.

Your users connect Microsoft To Do once, under your brand. Your agent gets 22 actions behind your policies, with every call on the record.

Connect Microsoft To Do Browse all apps →

Free to build · MCP + REST · Audit log on every plan