Microsoft Agent 365 Interoperability for Smart, Secure Productivity

Yesterday we launched Agent 365 – Microsoft’s enterprise control plane for AI agents, designed to make agents secure, compliant, and ready for large-scale deployment within organizations. Agents enabled with Agent 365 have a unique identity using Microsoft Entra Agent ID, which acts as the identity foundation, Zero Trust policy engine, and enforcement of least privilege access. When agents are enabled with Agent 365, IT departments can enforce governance, security teams can safeguard access, developers can confidently build and innovate enabling agents to safely work within Microsoft 365. For more information, see the From Innovation to Enterprise Trust with Microsoft Agent 365 blog post.

Scaling Agents with Agent 365 Interoperability

In this blog, we cover Agent 365 Interoperability, which equips any agent with apps and data to simplify human-agent workflows, including:

Microsoft 365 apps – Equip agents to use Microsoft 365 apps like Outlook, Teams, and Word to take action, build content, and collaborate alongside users in Teams.

Open ecosystem – Open to any agent, whether built with Microsoft solutions or our partner ecosystem, and extends to all relevant tools that agents need from Microsoft and partners.

Work IQ – Connect agents to knowledge sources from across your company, providing agents with your work context to accelerate onboarding into existing business processes.

Unlocking interoperability for Microsoft Agent 365

We’re announcing Microsoft Agent 365 Notifications (in public preview), which allow developers build agents that can respond to human interactions across Microsoft applications.

See the notifications module in action (starting at 3:15):

With notifications, agents can receive and process alerts when users interact with them through email, document comments, or other collaborative scenarios including. The following notifications are available in Frontier starting today:

Outlook Email: Agent receives an email or is mentioned in an email conversation.

Teams: Agent receives and responds to Teams messages.

Word: Agent receives notifications of @mentions in document review comments.

Excel: Agent is mentioned in a comment in an Excel.

PowerPoint: Agent is mentioned in a comment in a PowerPoint.

Lifecycle Events: Agent lifecycle notifications (user identity created, workload onboarding, user deleted).

For more information, see Notify agents.

We’re also announcing Microsoft Agent 365 MCP servers (in public preview) to enable agents access to data from multiple different sources using Power Platform connectors or API calls that connect to Microsoft 365 and Dynamics 365 apps.

See Agent 365 MCP servers in action:

With Microsoft Agent 365 MCP servers, agents can be grounded in your organization’s data and processes so that they can deliver secure, context-aware outcomes. Here are the servers that are available in frontier starting today:

Outlook Mail MCP Server: Create, update, and delete messages; reply and reply‑all; semantic search.

Outlook Calendar MCP Server: Create, list, update, and delete events; accept and decline; resolve conflicts.

Teams MCP Server: Create, update, and delete chats; add members; post messages; channel operations.

Copilot Search MCP server: Chat with Microsoft 365 Copilot, start a conversation, continue multi‑turn threads, and ground responses with files.

SharePoint and OneDrive MCP Server: Upload files, get metadata, search, manage lists.

User Profile MCP Server: Get manager, direct reports, and profile info; search users.

Dataverse MCP Server (now generally available): Connects semantically indexed enterprise data from Microsoft Dynamics 365 and Power Platform. See the full list of available tools.

For more information, see Agent 365 tooling servers overview.

All your agents can be enabled for Agent 365 Interoperability

Agent 365 works with any agent, no matter what platform you use, so you can deliver enterprise-grade identity, security, and Microsoft 365 integration without compromise:

Any agent stack with the Agent 365 SDK. If your agent runs on a third-party or custom platform, you can enable interoperability today using the Agent 365 SDK. This brings Agent 365 Notifications and Agent 365 tooling to your agent for secure, context-aware workflows.

Microsoft Foundry & Agent Framework. Agents built on Microsoft Foundry or the Microsoft Agent Framework can turn on interoperability starting today, unlocking notifications and tooling across Microsoft 365 apps and enterprise controls.

Microsoft Copilot Studio. Beginning in December 2025, you can use Copilot Studio to build low-code agents with interoperability built in – no heavy development required.

In addition, agent developers can extend Agent 365 Interoperability on Microsoft agent platforms by unlocking rich ecosystem of partner integration. Partners can also publish servers to be used by others through the Agent Tools catalogue. For more information, see Get your MCP servers certified.

The following example shows how a partner like CData is able to publish their CData Connect AI MCP Server in Microsoft Copilot Studio tools catalog. This enables enterprises to rapidly build and deploy AI agents that can securely read, write, and act on real-time data across 350+ enterprise systems including Salesforce, Snowflake, NetSuite, SAP, and ServiceNow.

See CData Connect AI MCP Server in action:

Test agent interoperability with sample evals

Agent developers often spend weeks building scenario-specific datasets for testing, a process that’s both time-consuming and diverts focus from actual agent innovation. To accelerate agent testing, we’re also announcing Sample Evals for Agent Interoperability, coming in December. Sample Evals provide open source data sets, evals sets, and mock tools to benchmark the performance of agents across realistic scenarios. By providing curated evaluation suites with synthetic data, you can start testing immediately.

Curated Open Sourced Evals – Ready to use evaluation datasets with synthetic data that targets agent planning using emulated MCP server.

Easy set up – Evaluation harness works across M365 surfaces (email, calendar) and is optimized for local execution in a ‘sandbox’ with minimal setup.

Detailed run time analytics – Granular trajectory metrics such as accuracy, latency, and data grounding to help you understand test results.

Local Leaderboard – Aggregate results across runs from different self-hosted agents to compare performance across agents in a single leader board.

Discover, secure, and manage access for interoperability

Agent 365 is your single control plane for all AI agents across the enterprise—and that control extends to interoperability features like notifications and MCP servers. IT teams get one place to discover agents, enforce policies, and monitor activity, ensuring security and compliance at scale.

See this in action:

Agent 365 delivers centralized governance and observability so organizations can confidently manage interoperability features like notifications and MCP servers:

Governable by IT policies via Microsoft 365 Admin Center (MAC). Admins manage all MCP server access directly from the Microsoft 365 Admin Center. This means admins can block or permit specific agent capabilities—such as sending emails across the entire organization, with changes enforced instantly at runtime. Every policy update is applied consistently, ensuring that the governance remains tight and predictable for every agent instance.

Observable via Microsoft Purview / Defender. Every agent action emits telemetry through the Agent 365 SDK (Agent 365 Observability), streaming detailed logs (traces including entries for Agent 365 notifications and tool calls) into Microsoft Defender and Purview. In Defender, under the “Investigation and response” on the left sidebar, we enable Advanced hunting to see agent level telemetry. Together, these tools provide full visibility and auditability, so organizations always know what their agents are doing, when, and under what policy conditions.

Start building enterprise-ready agents today

Microsoft Agent 365 Interoperability is redefining how organizations can securely and efficiently deploy AI agents at scale. Don’t wait—start leveraging Agent 365 Interoperability today to scale your agent development and deliver enterprise-ready solutions faster than ever.

Try it Now. Agent 365 is available starting today in Microsoft 365 Admin Center with Frontier, Microsoft’s early access program for the latest AI innovations.