Can I limit what agents can do in SharePoint?

Yes, twice over. The connection itself has an access level (Read-only, Read + write, Full access), and on top of that you can allow, scope, or deny each individual agent from the Integrations page.

Can I connect more than one SharePoint account?

Yes. Connect additional accounts from the same card and mark one as primary; agents use the primary unless a mission names a specific account.

How do I disconnect SharePoint?

Open Integrations, choose the account under SharePoint, and revoke it. Agents lose access immediately; nothing keeps working in the background.

File Storage

🏢 SharePoint integration

Access levels: Read-only · Read + write · Full access · Verified July 15, 2026

Connect SharePoint once and every agent in your squad can work in it for you, with exactly as much access as you decide to give, and a receipt for every call it makes.

What your squad can do in SharePoint

Look things up, break role inheritance on list; get all folders; get changes, and more.
Do real work, add attachment to list item; add field link to content type; add role assignment to item; add role assignment to list, and more.
Run it on a schedule: any of the 89 available tools below can be part of a scheduled task or a mission.

How to connect

In your dashboard, open Integrations and find SharePoint.
Click Connect and pick an access level (we recommend Read + write): this is the ceiling for every agent.
Sign in to SharePoint in the window that opens and approve. You land back on the Integrations page with the account live.

You can change an account's access level any time under Manage. It applies instantly, no re-authorization. If the connection ever expires, the card shows Reconnect; one click re-authorizes the same account with the same settings.

Multiple accounts: connect as many as you need (say, yours and a client's). One is primary. Agents use it unless a mission says otherwise.

Access levels

The level you pick at connect time is enforced on our side for every agent call: an agent can never do more than the level allows, no matter what it's asked.

Level	What it allows
Read-only	Read SharePoint sites and files.
Read + write	Read and write site content and list items.	Recommended
Full access	Manage site permissions, create/delete sites.

On top of the connection's level, every agent can be individually allowed, scoped down, or denied for this app from the Integrations page. Deny an agent and it doesn't even see the connection.

Every tool, in plain terms

The 89 tools agents use in SharePoint through Mission Control, and the lowest access level that includes each. Agents discover these themselves. You never have to name a tool; asking in plain language is enough.

Tool	What it does	Access level
Add attachment to list item `SHARE_POINT_ADD_ATTACHMENT_TO_LIST_ITEM`	Add an attachment to a SharePoint list item.	Read + write, Full access
Add field link to content type `SHARE_POINT_ADD_FIELD_LINK_TO_CONTENT_TYPE`	Add a field link to a list content type. Use when you want to associate an existing list field with a content type.	Read + write, Full access
Add role assignment to item `SHARE_POINT_ADD_ROLE_ASSIGNMENT_TO_ITEM`	Add a role assignment to a list item. Use when granting specific permissions to a user or group after breaking inheritance if needed. This action is externally visible and permanently alters item permissions; obtain exp…	Read + write, Full access
Add role assignment to list `SHARE_POINT_ADD_ROLE_ASSIGNMENT_TO_LIST`	Add a role assignment to a SharePoint list.	Read + write, Full access
Break role inheritance on item `SHARE_POINT_BREAK_ROLE_INHERITANCE_ON_ITEM`	Break permission inheritance on a list item.	Read + write, Full access
Break role inheritance on list `SHARE_POINT_BREAK_ROLE_INHERITANCE_ON_LIST`	Breaks permission inheritance on a SharePoint list, allowing you to set unique permissions.	Read + write, Full access
Check in file `SHARE_POINT_CHECK_IN_FILE`	Check in a file. Use after uploading or editing a document and you're ready to finalize changes.	Read + write, Full access
Create content type `SHARE_POINT_CREATE_CONTENT_TYPE`	Create a new content type in SharePoint. Use when you need to define a custom content type with specific metadata structure for lists or libraries.	Read + write, Full access
Create drive item sharing link `SHARE_POINT_CREATE_DRIVE_ITEM_SHARING_LINK`	Create a sharing link for a drive item in SharePoint or OneDrive.	Read + write, Full access
Create list field `SHARE_POINT_CREATE_LIST_FIELD`	Create a new field (column) in a SharePoint list.	Read + write, Full access
Create list item by id `SHARE_POINT_CREATE_LIST_ITEM_BY_ID`	Create a new item in a SharePoint list using the list's GUID.	Read + write, Full access
Create list item in folder `SHARE_POINT_CREATE_LIST_ITEM_IN_FOLDER`	Create a list item in a specific folder within a SharePoint list.	Read + write, Full access
Create web `SHARE_POINT_CREATE_WEB`	Create a new SharePoint subsite under the current site.	Read + write, Full access
Delete drive item version content `SHARE_POINT_DELETE_DRIVE_ITEM_VERSION_CONTENT`	Delete content for a specific version of a drive item in SharePoint.	Full access
Delete folder `SHARE_POINT_DELETE_FOLDER`	Deletes a folder from a SharePoint document library.	Full access
Delete list `SHARE_POINT_DELETE_LIST`	Delete a SharePoint list. Use when you need to remove a list by its GUID after confirming the correct list identifier.	Full access
Delete list by title `SHARE_POINT_DELETE_LIST_BY_TITLE`	Delete a SharePoint list by its title. Use when you need to permanently remove a list and all its contents by specifying the list name.	Full access
Delete list item `SHARE_POINT_DELETE_LIST_ITEM`	Delete a SharePoint list item. Use when you need to permanently remove an item by its ID. Use after obtaining the item's ETag to ensure concurrency control.	Full access
Delete recycle bin item permanent `SHARE_POINT_DELETE_RECYCLE_BIN_ITEM_PERMANENT`	Permanently delete a SharePoint Recycle Bin item.	Full access
Download file by server relative url `SHARE_POINT_DOWNLOAD_FILE_BY_SERVER_RELATIVE_URL`	Download a file by server-relative URL. Use when you need to fetch the raw bytes of a SharePoint file by its server-relative path.	All levels
Ensure user `SHARE_POINT_ENSURE_USER`	Ensures a user exists in a SharePoint site by their login name.	Read + write, Full access
Follow `SHARE_POINT_FOLLOW`	Follow a SharePoint user, document, site, or tag.	Read + write, Full access
Get all folders `SHARE_POINT_GET_ALL_FOLDERS`	Retrieve all folders in the SharePoint web.	All levels
Get changes `SHARE_POINT_GET_CHANGES`	Retrieve changes from SharePoint list change log.	Read + write, Full access
Get content type `SHARE_POINT_GET_CONTENT_TYPE`	Retrieve a single SharePoint content type by its ID.	Read + write, Full access
Get content types `SHARE_POINT_GET_CONTENT_TYPES`	Retrieves all content types from the current SharePoint site.	Read + write, Full access
Get content types for list `SHARE_POINT_GET_CONTENT_TYPES_FOR_LIST`	Retrieve all content types for a specific SharePoint list by GUID.	Read + write, Full access
Get context info `SHARE_POINT_GET_CONTEXT_INFO`	Retrieve SharePoint context information including the form digest value.	All levels
Get current user `SHARE_POINT_GET_CURRENT_USER`	Retrieve the current user for the site. Use after authenticating to get the current SharePoint user. A successful response confirms authentication only; access to specific sites, lists, or libraries depends on separate…	All levels
Get drive item analytics `SHARE_POINT_GET_DRIVE_ITEM_ANALYTICS`	Get analytics for a SharePoint drive item.	Read + write, Full access
Get file by server relative url `SHARE_POINT_GET_FILE_BY_SERVER_RELATIVE_URL`	DEPRECATED: Use GetSiteDriveItemByPath instead.	Read + write, Full access
Get folder by server relative url `SHARE_POINT_GET_FOLDER_BY_SERVER_RELATIVE_URL`	DEPRECATED: Use SHARE_POINT_GET_SITE_DRIVE_ITEM_BY_PATH instead.	Read + write, Full access
Get group users `SHARE_POINT_GET_GROUP_USERS`	Retrieves all users who are members of a specified SharePoint group.	Read + write, Full access
Get group users by id `SHARE_POINT_GET_GROUP_USERS_BY_ID`	Retrieve all users in a specific SharePoint site group by group ID.	Read + write, Full access
Get item attachment content `SHARE_POINT_GET_ITEM_ATTACHMENT_CONTENT`	Download an attachment from a SharePoint list item.	All levels
Get list by guid `SHARE_POINT_GET_LIST_BY_GUID`	Retrieve a SharePoint list by its GUID. Use when you need to fetch list metadata by its unique identifier. Prefer over name-based lookup tools when the GUID is known, as names may collide across similarly named lists.	Read + write, Full access
Get list by title `SHARE_POINT_GET_LIST_BY_TITLE`	Retrieve a SharePoint list by its title. Use when you need to fetch list metadata by title.	Read + write, Full access
Get list content type by id `SHARE_POINT_GET_LIST_CONTENT_TYPE_BY_ID`	Retrieve a specific content type from a SharePoint list by its ID.	Read + write, Full access
Get list items `SHARE_POINT_GET_LIST_ITEMS`	Retrieve items from a SharePoint list. Use when you need to fetch list entries with optional OData parameters.	All levels
Get list items by guid `SHARE_POINT_GET_LIST_ITEMS_BY_GUID`	Retrieve items from a SharePoint list using its GUID.	All levels
Get list item by id `SHARE_POINT_GET_LIST_ITEM_BY_ID`	Retrieve a SharePoint list item by ID. Use when you need to fetch a specific item after knowing its ID.	Read + write, Full access
Get list item version `SHARE_POINT_GET_LIST_ITEM_VERSION`	Retrieve a specific version of a SharePoint list item.	Read + write, Full access
Get my followed `SHARE_POINT_GET_MY_FOLLOWED`	Get entities the current user is following.	All levels
Get my followers `SHARE_POINT_GET_MY_FOLLOWERS`	Retrieves the list of users who are following the authenticated user in SharePoint.	All levels
Get role definitions `SHARE_POINT_GET_ROLE_DEFINITIONS`	List role definitions at the web level. Role definition IDs and names are scoped per web/site collection, never hard-code them, as admins can modify role sets and IDs differ across site collections. Always resolve curre…	All levels
Get site collection info `SHARE_POINT_GET_SITE_COLLECTION_INFO`	Fetch site collection metadata (URL, ID, root web URI) only, not list item or document-level details.	Read + write, Full access
Get site drive item by path `SHARE_POINT_GET_SITE_DRIVE_ITEM_BY_PATH`	Retrieve a file or folder by its server-relative path in a SharePoint site.	Read + write, Full access
Get site page content `SHARE_POINT_GET_SITE_PAGE_CONTENT`	Retrieve modern SharePoint Site Pages content by reading list item fields.	All levels
Get user effective permissions on web `SHARE_POINT_GET_USER_EFFECTIVE_PERMISSIONS_ON_WEB`	Get a user's effective permissions on the current SharePoint site (Web).	All levels
Get webhook subscription `SHARE_POINT_GET_WEBHOOK_SUBSCRIPTION`	Retrieve a specific webhook subscription by ID from a SharePoint list.	Read + write, Full access
Get webhook subscriptions `SHARE_POINT_GET_WEBHOOK_SUBSCRIPTIONS`	Retrieve all webhook subscriptions on a SharePoint list.	Read + write, Full access
Get web info `SHARE_POINT_GET_WEB_INFO`	Retrieve information about the current SharePoint web (site) using REST API.	Read + write, Full access
Is followed `SHARE_POINT_IS_FOLLOWED`	Check if the current user is following a specified actor.	All levels
List all lists `SHARE_POINT_LIST_ALL_LISTS`	Retrieves all lists in the current SharePoint web/site.	All levels
List drives rest api `SHARE_POINT_LIST_DRIVES_REST_API`	Retrieve drives using SharePoint REST API v2.0.	All levels
List drive children `SHARE_POINT_LIST_DRIVE_CHILDREN`	List children (files and folders) in a SharePoint drive using REST API v2.0.	All levels
List drive recent items `SHARE_POINT_LIST_DRIVE_RECENT_ITEMS`	List recently modified items in a SharePoint drive using Microsoft Graph API.	All levels
List files in folder `SHARE_POINT_LIST_FILES_IN_FOLDER`	List files within a SharePoint folder (non-recursive; does not enumerate subfolders).	All levels
List item attachments `SHARE_POINT_LIST_ITEM_ATTACHMENTS`	List all attachments for a SharePoint list item.	All levels
List list columns `SHARE_POINT_LIST_LIST_COLUMNS`	List all column definitions in a SharePoint list.	Read + write, Full access
List recycle bin items `SHARE_POINT_LIST_RECYCLE_BIN_ITEMS`	List items in the SharePoint Recycle Bin. Use when you need to retrieve deleted items and page through results.	All levels
List sites `SHARE_POINT_LIST_SITES`	Retrieve all SharePoint sites accessible to the user.	All levels
List site groups `SHARE_POINT_LIST_SITE_GROUPS`	List SharePoint site groups for a site collection.	All levels
List site users `SHARE_POINT_LIST_SITE_USERS`	List users in the site collection. Results include person users, groups, and system principals by default; use filter 'PrincipalType eq 1' to restrict to individual users.	All levels
List subfolders in folder `SHARE_POINT_LIST_SUBFOLDERS_IN_FOLDER`	List immediate child folders within a SharePoint folder.	All levels
Log event `SHARE_POINT_LOG_EVENT`	Log custom usage analytics events in SharePoint for tracking user activities.	Read + write, Full access
Recycle file `SHARE_POINT_RECYCLE_FILE`	Move a file to the Recycle Bin. Use when you need to recycle a file after confirming its folder and filename paths.	Full access
Recycle list item `SHARE_POINT_RECYCLE_LIST_ITEM`	Move a list item to the Recycle Bin. Use when you need to soft-delete an item but preserve the ability to restore it.	Full access
Rename folder `SHARE_POINT_RENAME_FOLDER`	Renames a SharePoint folder by updating its list item metadata.	Read + write, Full access
Render list data as stream `SHARE_POINT_RENDER_LIST_DATA_AS_STREAM`	Retrieve list items from SharePoint with rich metadata and formatting.	All levels
Restore drive item version `SHARE_POINT_RESTORE_DRIVE_ITEM_VERSION`	Restore a previous version of a SharePoint drive item.	Read + write, Full access
Restore recycle bin item `SHARE_POINT_RESTORE_RECYCLE_BIN_ITEM`	Restore a SharePoint Recycle Bin item. Use when you need to recover a deleted item by providing its GUID.	Read + write, Full access
Search query `SHARE_POINT_SEARCH_QUERY`	Search SharePoint content using Keyword Query Language (KQL).	All levels
Search suggest `SHARE_POINT_SEARCH_SUGGEST`	Get search query suggestions. Use when you need to provide autocomplete options for user search input.	Read + write, Full access
Sharepoint check out file `SHARE_POINT_SHAREPOINT_CHECK_OUT_FILE`	Check out a file in a document library. Use when you need to lock a file before making changes.	Read + write, Full access
Sharepoint create folder `SHARE_POINT_SHAREPOINT_CREATE_FOLDER`	Creates a new folder in SharePoint using the REST API.	Read + write, Full access
Sharepoint create list `SHARE_POINT_SHAREPOINT_CREATE_LIST`	Creates a new list in SharePoint using the REST API.	Read + write, Full access
Sharepoint create list item `SHARE_POINT_SHAREPOINT_CREATE_LIST_ITEM`	Creates a new item in a SharePoint list. Returns an `item_data` object containing `item_id`, `Title`, and timestamps on success.	Read + write, Full access
Sharepoint create user `SHARE_POINT_SHAREPOINT_CREATE_USER`	DEPRECATED: Use SHARE_POINT_ENSURE_USER instead (supports email param directly).	Read + write, Full access
Sharepoint find user `SHARE_POINT_SHAREPOINT_FIND_USER`	Searches for a user in the SharePoint site by email address and returns their profile information if found.	Read + write, Full access
Sharepoint remove user `SHARE_POINT_SHAREPOINT_REMOVE_USER`	Removes a user from SharePoint. Returns success even if user doesn't exist or was never a member; check response fields `was_removed` (bool) and `message` (str) to distinguish an actual removal from a no-op.	Full access
Undo checkout file `SHARE_POINT_UNDO_CHECKOUT_FILE`	Undo a file checkout, discarding any changes made while checked out.	Full access
Update content type `SHARE_POINT_UPDATE_CONTENT_TYPE`	Update a SharePoint content type's properties such as name, description, group, or hidden status.	Read + write, Full access
Update drive item `SHARE_POINT_UPDATE_DRIVE_ITEM`	Update the properties of a drive item (file or folder) in SharePoint using SharePoint REST API.	Read + write, Full access
Update list `SHARE_POINT_UPDATE_LIST`	Update properties of an existing SharePoint list.	Read + write, Full access
Update list item `SHARE_POINT_UPDATE_LIST_ITEM`	Update fields on an existing SharePoint list item.	Read + write, Full access
Update site `SHARE_POINT_UPDATE_SITE`	Update properties of the current SharePoint site (web).	Read + write, Full access
Upload file `SHARE_POINT_UPLOAD_FILE`	Upload a file to a SharePoint document library or folder.	Read + write, Full access
Upload from url `SHARE_POINT_UPLOAD_FROM_URL`	Fetch a file from a URL and upload it to SharePoint.	Read + write, Full access

What agents can't do in SharePoint (yet)

Anything not in the table above. The tools mirror what SharePoint makes available to connected apps. If SharePoint doesn't expose an operation, agents can't perform it either.
If something you need is missing, there's usually a path: add the service's API key under Settings → Custom integrations and your agents can call it directly. See custom integrations & secrets. You can also ask your lead agent to open a ticket describing what it needs.

Using it in missions

Just ask in plain language: “check SharePoint for …”, “create … in SharePoint”, “every Monday, … ”, and the agent finds the right tool, runs it, and reports back with a receipt in your Runs ledger. Anything outward-facing (sending, posting, publishing) that a mission didn't clearly authorize comes back to you as a ticket first.

Troubleshooting

Agent says	What's happening	Fix
"SharePoint isn't connected"	No active connection (or this agent is denied)	Connect on the Integrations page; check the agent's per-app policy
"The connection has expired"	SharePoint ended the authorization (they all do periodically)	Click Reconnect on the account, same settings, one click
"I'm not allowed to do that"	The action is above the account's access level, or the agent is scoped down	Raise the level under Manage, or adjust that agent's policy
It did something unexpected	The ask was ambiguous (e.g. matched an existing item)	Be explicit, "create a NEW …", and give agents a working folder where relevant