Can I limit what agents can do in OneDrive?

Yes, twice over. The connection itself has an access level (Read-only, Read + write, Full access), and on top of that you can allow, scope, or deny each individual agent from the Integrations page.

Can I connect more than one OneDrive account?

Yes. Connect additional accounts from the same card and mark one as primary; agents use the primary unless a mission names a specific account.

How do I disconnect OneDrive?

Open Integrations, choose the account under OneDrive, and revoke it. Agents lose access immediately; nothing keeps working in the background.

File Storage

☁️ OneDrive integration

Access levels: Read-only · Read + write · Full access · Verified July 15, 2026

Connect OneDrive once and every agent in your squad can work in it for you, with exactly as much access as you decide to give, and a receipt for every call it makes.

What your squad can do in OneDrive

Look things up, get drive; get drive item by sharing url; get followed item, and more.
Do real work, add workbook worksheet; create item permission; create link; onedrive create folder, and more.
Run it on a schedule: any of the 71 available tools below can be part of a scheduled task or a mission.

How to connect

In your dashboard, open Integrations and find OneDrive.
Click Connect and pick an access level (we recommend Read + write): this is the ceiling for every agent.
Sign in to OneDrive in the window that opens and approve. You land back on the Integrations page with the account live.

You can change an account's access level any time under Manage. It applies instantly, no re-authorization. If the connection ever expires, the card shows Reconnect; one click re-authorizes the same account with the same settings.

Multiple accounts: connect as many as you need (say, yours and a client's). One is primary. Agents use it unless a mission says otherwise.

Access levels

The level you pick at connect time is enforced on our side for every agent call: an agent can never do more than the level allows, no matter what it's asked.

Level	What it allows
Read-only	Read your OneDrive files only.
Read + write	Read and upload/edit/delete files.	Recommended
Full access	Also access shared files and SharePoint sites.

On top of the connection's level, every agent can be individually allowed, scoped down, or denied for this app from the Integrations page. Deny an agent and it doesn't even see the connection.

Every tool, in plain terms

The 71 tools agents use in OneDrive through Mission Control, and the lowest access level that includes each. Agents discover these themselves. You never have to name a tool; asking in plain language is enough.

Tool	What it does	Access level
Add workbook worksheet `ONE_DRIVE_ADD_WORKBOOK_WORKSHEET`	Adds a new worksheet to an existing Excel workbook in OneDrive or SharePoint.	Read + write, Full access
Checkin item `ONE_DRIVE_CHECKIN_ITEM`	Check in a checked out driveItem resource, making the version of the document available to others.	Read + write, Full access
Checkout item `ONE_DRIVE_CHECKOUT_ITEM`	Check out a driveItem to prevent others from editing it and make your changes invisible until checked in.	Read + write, Full access
Copy item `ONE_DRIVE_COPY_ITEM`	Copy a DriveItem (file or folder) to a new location asynchronously.	Read + write, Full access
Create item permission `ONE_DRIVE_CREATE_ITEM_PERMISSION`	Create a new permission on a OneDrive drive item.	Read + write, Full access
Create link `ONE_DRIVE_CREATE_LINK`	Create a sharing link for a DriveItem (file or folder) by its unique ID.	Read + write, Full access
Delete item `ONE_DRIVE_DELETE_ITEM`	Delete a DriveItem (file or folder) by its unique ID from the authenticated user's OneDrive.	Full access
Delete item permanently `ONE_DRIVE_DELETE_ITEM_PERMANENTLY`	Permanently delete a driveItem by its ID without moving it to the recycle bin.	Full access
Delete item permission `ONE_DRIVE_DELETE_ITEM_PERMISSION`	Delete a permission from a drive item. Use when you need to revoke sharing access to a file or folder. Only non-inherited sharing permissions can be deleted.	Full access
Delete share permission `ONE_DRIVE_DELETE_SHARE_PERMISSION`	Delete the permission navigation property for a shared drive item.	Full access
Delete workbook range `ONE_DRIVE_DELETE_WORKBOOK_RANGE`	Deletes a range of cells from a worksheet in an Excel workbook stored in OneDrive.	Full access
Delete workbook worksheet `ONE_DRIVE_DELETE_WORKBOOK_WORKSHEET`	Deletes a worksheet from a workbook in OneDrive by its ID or name.	Full access
Discard checkout `ONE_DRIVE_DISCARD_CHECKOUT`	Discard the checkout of a driveItem, releasing it and discarding any changes made while checked out.	Full access
Download file `ONE_DRIVE_DOWNLOAD_FILE`	Downloads a file from a user's OneDrive using its item ID, which must refer to a file and not a folder.	All levels
Download file by path `ONE_DRIVE_DOWNLOAD_FILE_BY_PATH`	Downloads the contents of a file from OneDrive by its path.	All levels
Download item as format `ONE_DRIVE_DOWNLOAD_ITEM_AS_FORMAT`	Download the contents of a driveItem converted to a specific format (e.g., PDF or HTML).	All levels
Download item version `ONE_DRIVE_DOWNLOAD_ITEM_VERSION`	Download the contents of a specific previous version of a drive item (file).	All levels
Follow item `ONE_DRIVE_FOLLOW_ITEM`	Follow a driveItem (file or folder) in OneDrive or SharePoint.	Read + write, Full access
Get drive `ONE_DRIVE_GET_DRIVE`	Retrieves the properties and relationships of a Drive resource by its unique ID.	All levels
Get drive item by sharing url `ONE_DRIVE_GET_DRIVE_ITEM_BY_SHARING_URL`	Resolve a OneDrive/SharePoint sharing URL (or shareId) to a DriveItem with driveId and itemId.	All levels
Get followed item `ONE_DRIVE_GET_FOLLOWED_ITEM`	Retrieve a specific followed driveItem from a drive.	All levels
Get group drive `ONE_DRIVE_GET_GROUP_DRIVE`	Retrieve the document library (drive) for a Microsoft 365 group.	All levels
Get item `ONE_DRIVE_GET_ITEM`	Retrieves the metadata of a DriveItem by its unique ID.	All levels
Get item permissions `ONE_DRIVE_GET_ITEM_PERMISSIONS`	Retrieves the permissions of a DriveItem by its unique ID within a specific Drive.	All levels
Get item thumbnails `ONE_DRIVE_GET_ITEM_THUMBNAILS`	Retrieve the thumbnails associated with a DriveItem.	All levels
Get item versions `ONE_DRIVE_GET_ITEM_VERSIONS`	Retrieve the version history of a DriveItem by its unique ID.	All levels
Get recent items `ONE_DRIVE_GET_RECENT_ITEMS`	Get files and folders recently accessed by the user.	All levels
Get root `ONE_DRIVE_GET_ROOT`	Retrieve metadata for the root folder of the signed-in user's OneDrive.	All levels
Get share `ONE_DRIVE_GET_SHARE`	Access a shared DriveItem or collection of shared items using a shareId or encoded sharing URL.	All levels
Get shared items `ONE_DRIVE_GET_SHARED_ITEMS`	Retrieve items shared with the authenticated user (not items the user has shared with others).	All levels
Get sharepoint list items `ONE_DRIVE_GET_SHAREPOINT_LIST_ITEMS`	Get the items (list items) within a specific SharePoint list on a site.	All levels
Get site `ONE_DRIVE_GET_SITE`	Retrieves metadata for a specific SharePoint site by its ID.	All levels
Get site page content `ONE_DRIVE_GET_SITE_PAGE_CONTENT`	Gets the content of a modern SharePoint site page.	All levels
Get special folder `ONE_DRIVE_GET_SPECIAL_FOLDER`	Retrieve a special folder in OneDrive by name.	All levels
Get user `ONE_DRIVE_GET_USER`	Retrieves the properties and profile information for a specific Microsoft user by their user ID or user principal name.	Read + write, Full access
Get workbook worksheet `ONE_DRIVE_GET_WORKBOOK_WORKSHEET`	Retrieves a specific worksheet from an Excel workbook stored in OneDrive or SharePoint using Microsoft Graph API.	Read + write, Full access
Grant share permission `ONE_DRIVE_GRANT_SHARE_PERMISSION`	Grant users access to a link represented by a permission using an encoded sharing URL.	Read + write, Full access
Invite user to item `ONE_DRIVE_INVITE_USER_TO_ITEM`	Invite users or grant permissions to a specific item in a OneDrive drive.	Read + write, Full access
List activities `ONE_DRIVE_LIST_ACTIVITIES`	Retrieve recent activities on the authenticated user's OneDrive.	All levels
List all drive items `ONE_DRIVE_LIST_ALL_DRIVE_ITEMS`	Recursively lists all files and folders in a OneDrive drive by traversing the entire folder hierarchy.	All levels
List bundles `ONE_DRIVE_LIST_BUNDLES`	Retrieve a list of bundle resources from a specified drive.	All levels
List drives `ONE_DRIVE_LIST_DRIVES`	Retrieve a list of Drive resources available to the authenticated user, or for a specific user, group, or site.	All levels
List folder children `ONE_DRIVE_LIST_FOLDER_CHILDREN`	List the direct children (files/folders) of a OneDrive/SharePoint folder by DriveItem ID or path.	All levels
List item activities `ONE_DRIVE_LIST_ITEM_ACTIVITIES`	List recent activities for a specific item in a OneDrive drive.	All levels
List root drive changes `ONE_DRIVE_LIST_ROOT_DRIVE_CHANGES`	List changes in the root of the user's primary drive using a delta token.	All levels
List sharepoint list items delta `ONE_DRIVE_LIST_SHAREPOINT_LIST_ITEMS_DELTA`	Track changes to items in a SharePoint list using a delta query.	All levels
List share permissions `ONE_DRIVE_LIST_SHARE_PERMISSIONS`	Retrieve permission details for a shared OneDrive or SharePoint item using a share ID.	All levels
List site columns `ONE_DRIVE_LIST_SITE_COLUMNS`	List all column definitions for a SharePoint site.	All levels
List site items delta `ONE_DRIVE_LIST_SITE_ITEMS_DELTA`	Track changes to DriveItems in the default document library of a SharePoint site.	All levels
List site lists `ONE_DRIVE_LIST_SITE_LISTS`	List all lists under a specific SharePoint site.	All levels
List site subsites `ONE_DRIVE_LIST_SITE_SUBSITES`	List all subsites of a SharePoint site. Use when you need to retrieve a collection of subsites for a given parent site. IMPORTANT: This action only works with organizational Microsoft 365 accounts (Azure AD/Entra ID acc…	All levels
List subscriptions `ONE_DRIVE_LIST_SUBSCRIPTIONS`	List the current subscriptions for the authenticated user or app.	All levels
List workbook worksheets `ONE_DRIVE_LIST_WORKBOOK_WORKSHEETS`	Retrieves a list of all worksheets in an Excel workbook stored in OneDrive or SharePoint.	All levels
Move item `ONE_DRIVE_MOVE_ITEM`	Move a file or folder to a new parent folder in OneDrive.	Read + write, Full access
Onedrive create folder `ONE_DRIVE_ONEDRIVE_CREATE_FOLDER`	Creates a new folder in the user's OneDrive with configurable conflict behavior, optionally within a specified parent_folder (by ID or full path from root) which, if not the root, must exist and be accessible.	Read + write, Full access
Onedrive create text file `ONE_DRIVE_ONEDRIVE_CREATE_TEXT_FILE`	Creates a new plain-text file with specified content in the authenticated user's personal OneDrive, using either the folder's unique ID or its absolute path relative to the user's OneDrive root (paths are automatically…	Read + write, Full access
Onedrive find file `ONE_DRIVE_ONEDRIVE_FIND_FILE`	Non-recursively finds an item (file or folder) in a specified OneDrive folder; if `folder` is provided as a path, it must actually exist.	All levels
Onedrive find folder `ONE_DRIVE_ONEDRIVE_FIND_FOLDER`	Finds folders by name within an accessible parent folder in OneDrive, or lists all its direct child folders if no name is specified.	All levels
Onedrive list items `ONE_DRIVE_ONEDRIVE_LIST_ITEMS`	Retrieves all files and folders as `driveItem` resources from the root of a specified user's OneDrive, automatically handling pagination.	All levels
Onedrive upload file `ONE_DRIVE_ONEDRIVE_UPLOAD_FILE`	Uploads a file to a specified OneDrive folder, automatically creating the destination folder if it doesn't exist, renaming on conflict, and supporting large files via chunking.	Read + write, Full access
Preview drive item `ONE_DRIVE_PREVIEW_DRIVE_ITEM`	Generates or retrieves a short-lived, permission-bound embeddable URL for a preview of a specific item.	All levels
Read workbook range `ONE_DRIVE_READ_WORKBOOK_RANGE`	Reads a range of cells from an Excel workbook worksheet stored in OneDrive or SharePoint using Microsoft Graph API.	All levels
Restore drive item `ONE_DRIVE_RESTORE_DRIVE_ITEM`	Restore a deleted OneDrive driveItem (file or folder) from the recycle bin.	Read + write, Full access
Search items `ONE_DRIVE_SEARCH_ITEMS`	Search OneDrive for files and folders by keyword.	All levels
Unfollow item `ONE_DRIVE_UNFOLLOW_ITEM`	Unfollow a driveItem by removing it from the user's followed items collection.	Full access
Update drive items permissions `ONE_DRIVE_UPDATE_DRIVE_ITEMS_PERMISSIONS`	Update the roles of an existing permission on a OneDrive drive item.	Read + write, Full access
Update drive item metadata `ONE_DRIVE_UPDATE_DRIVE_ITEM_METADATA`	Update the metadata of a specific item (file or folder) in OneDrive.	Read + write, Full access
Update file content `ONE_DRIVE_UPDATE_FILE_CONTENT`	Update an existing file's content in OneDrive.	Read + write, Full access
Update workbook range `ONE_DRIVE_UPDATE_WORKBOOK_RANGE`	Updates a range in a workbook worksheet using Microsoft Graph API.	Read + write, Full access
Update workbook worksheet `ONE_DRIVE_UPDATE_WORKBOOK_WORKSHEET`	Updates properties of a worksheet in an Excel workbook stored in OneDrive.	Read + write, Full access
Write workbook cell `ONE_DRIVE_WRITE_WORKBOOK_CELL`	Updates the value, formula, or format of a specific cell in an Excel workbook stored in OneDrive.	Read + write, Full access

What agents can't do in OneDrive (yet)

File writes overwrite by path. Uploading to a path that already exists replaces that file. Tell agents to use new filenames or a dedicated folder for generated files. Grant Read-only if the account holds files no agent should ever touch.
If something you need is missing, there's usually a path: add the service's API key under Settings → Custom integrations and your agents can call it directly. See custom integrations & secrets. You can also ask your lead agent to open a ticket describing what it needs.

Using it in missions

Just ask in plain language: “check OneDrive for …”, “create … in OneDrive”, “every Monday, … ”, and the agent finds the right tool, runs it, and reports back with a receipt in your Runs ledger. Anything outward-facing (sending, posting, publishing) that a mission didn't clearly authorize comes back to you as a ticket first.

Troubleshooting

Agent says	What's happening	Fix
"OneDrive isn't connected"	No active connection (or this agent is denied)	Connect on the Integrations page; check the agent's per-app policy
"The connection has expired"	OneDrive ended the authorization (they all do periodically)	Click Reconnect on the account, same settings, one click
"I'm not allowed to do that"	The action is above the account's access level, or the agent is scoped down	Raise the level under Manage, or adjust that agent's policy
It did something unexpected	The ask was ambiguous (e.g. matched an existing item)	Be explicit, "create a NEW …", and give agents a working folder where relevant