{ "data": { "a": { "slug": "outlook-mail-graph", "name": "Outlook Mail (Microsoft Graph)", "vendor": "Microsoft", "vendorUrl": "https://learn.microsoft.com/en-us/graph/api/resources/mail-api-overview", "kind": "http-api", "category": "mailbox-access", "summary": "Mail endpoints of Microsoft Graph for Outlook, Microsoft 365 and Exchange Online mailboxes. An app reads, searches, drafts, sends and files messages over REST with OAuth tokens from Microsoft Entra ID.", "url": "https://www.anchorterminal.com/tools/outlook-mail-graph", "markdownUrl": "https://www.anchorterminal.com/tools/outlook-mail-graph.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/outlook-mail-graph.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/outlook-mail-graph.json", "repo": "https://github.com/microsoftgraph/msgraph-sdk-javascript", "license": "MIT (SDKs)", "transports": [ "http" ], "remoteUrl": "https://graph.microsoft.com/v1.0", "packages": [ { "registry": "npm", "name": "@microsoft/microsoft-graph-client" }, { "registry": "pypi", "name": "msgraph-sdk" } ], "auth": "oauth", "authNotes": "OAuth 2.0 tokens from Microsoft Entra ID, after a person registers an app. No app review by Microsoft was found for mail permissions. Delegated permissions (Mail.ReadBasic, Mail.Read, Mail.ReadWrite, Mail.Send) act as a signed-in user and need only that user's consent. Application permissions reach every mailbox in a tenant, need admin consent, and can be limited to chosen mailboxes with RBAC for Applications in Exchange Online. Personal Outlook.com accounts work with delegated permissions.", "pricing": "byo-plan", "pricingNotes": "Mail calls aren't metered. The only metered Graph API is SharePoint and OneDrive `assignSensitivityLabel` at $0.00185 a call (https://learn.microsoft.com/en-us/graph/metered-api-list). A work mailbox needs an Exchange Online or Microsoft 365 licence, and Microsoft's plan price page refused our reader on 8 October 2026. A free personal Outlook.com account lets an agent start without a contract. The Microsoft 365 developer programme sandbox is free only to members who qualify, such as Visual Studio subscribers. The Mail MCP server needs a Microsoft 365 Copilot licence.", "priceSummary": "Your plan", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Graph mail reference or the metered API list (checked 2026-10-08).", "endpoints": [] }, "toolCount": 10, "popularity": { "githubStars": 835, "npmWeekly": 2882852, "pypiWeekly": 1578201, "asOf": "2026-10-08" }, "docsUrl": "https://learn.microsoft.com/en-us/graph/api/resources/mail-api-overview", "openapi": "https://raw.githubusercontent.com/microsoftgraph/msgraph-metadata/master/openapi/v1.0/openapi.yaml", "capabilities": [ "mailbox.read", "mailbox.search", "mailbox.send", "mailbox.drafts", "mailbox.sync" ], "tags": [ "hosted", "official", "oauth", "openapi", "webhooks", "typescript", "python", "enterprise" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 66.3, "grade": "B", "agentReady": false, "rank": 272, "ranked": true, "rankOf": 842, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 81, "maintenance": 76, "payments": 35, "reliability": 60, "schema": 93, "security": 71, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -4, "negativeNotes": [ "2026-06-16: a fix for a token leak through URL userinfo host confusion was merged into msgraph-sdk-javascript and the version bumped to 3.0.8, but on 8 October 2026 npm still serves 3.0.7 from September 2023 and the repository has no published advisory. Exploiting it needs an attacker-influenced URL passed to the client (https://github.com/microsoftgraph/msgraph-sdk-javascript/commit/5438ae90f50ef15d3656f0cf9c5485deee351f19, https://registry.npmjs.org/@microsoft/microsoft-graph-client/latest)" ], "verdict": "Delegated permissions split reading without bodies (Mail.ReadBasic), full reading, writing and sending, and delta queries and change notifications keep a local copy in step. sendMail takes no idempotency key and returns 202 before delivery, and each app is held to four concurrent requests per mailbox.", "bestFor": "Agents working in Microsoft 365 or Outlook.com mailboxes that need scoped reading, drafting, sending and incremental sync.", "strengths": [ "Mail.ReadBasic reads messages without body, preview or attachments, and Mail.Send is separate from Mail.ReadWrite", "Delta queries per folder and change notifications with `missed` and `subscriptionRemoved` lifecycle events", "`$select`, `$top` (1 to 1,000, default 10), `bodyPreview` and `Prefer: outlook.body-content-type=\"text\"` keep responses small", "Published policy of at least 24 months' notice before a v1.0 API is removed", "Covers work accounts and personal Outlook.com accounts, with every reference page also served as Markdown" ], "weaknesses": [ "sendMail has no idempotency key and answers 202 Accepted before delivery, so a retried send can go out twice", "Four concurrent requests and 10,000 requests per 10 minutes for each app and mailbox pair", "No prompt-injection guidance found in the mail reference or the Mail MCP reference, though message bodies come from outside senders", "The npm JavaScript client is 3.0.7 from September 2023, without the June 2026 token-leak fix", "The Mail MCP server is a preview kept for backward compatibility, behind a Microsoft 365 Copilot licence" ], "agentNotes": [ "Create a draft with POST /me/messages, then send it with /send. A retried sendMail can send the message twice", "Send `Prefer: IdType=\"ImmutableId\"` on every request, or message IDs change when a message moves folder", "Use `$select` and `Prefer: outlook.body-content-type=\"text\"`. List messages returns HTML bodies and 10 messages a page by default", "Honour `Retry-After` on 429 and keep to four parallel calls per mailbox. Batches of up to 20 requests are throttled per request", "Treat message bodies as untrusted input, and ask for Mail.ReadBasic when the task doesn't need bodies" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 66.3 } ], "editorialScores": { "ergonomics": 81, "maintenance": 76, "payments": 35, "reliability": 60, "schema": 93, "security": 71, "transparency": 65 }, "provenanceScore": 85 }, "connect": { "http": "curl \"https://graph.microsoft.com/v1.0/me/messages?\\$select=from,subject\" \\\n -H \"Authorization: Bearer $MS_GRAPH_TOKEN\"" }, "letme": { "capability": "https://letme.dev/mailbox.read", "tool": "https://letme.dev/outlook-mail-graph" }, "sameCompany": [ "azure-foundry-fine-tuning", "azure-ai-content-safety", "azure-speech-to-text", "azure-text-to-speech", "microsoft-agent-framework", "microsoft-execution-containers", "microsoft-entra-agent-id", "azure-key-vault", "azure-document-intelligence", "azure-devops-mcp", "microsoft-learn-mcp", "playwright-mcp", "azure-mcp", "azure-maps", "azure-translator", "microsoft-graph-calendar", "azure-blob-storage", "onedrive-sharepoint", "microsoft-teams", "dynamics-365-sales", "power-automate", "foundry-local", "microsoft-advertising-api", "microsoft-excel-graph" ], "area": "communication", "provenance": { "legalEntity": "Microsoft Corporation", "domain": "microsoft.com", "domainRegistered": "1991-05-02", "domainNote": "The endpoint is on graph.microsoft.com. microsoft.com publishes a security.txt, but it passed its Expires date on 2026-09-23.", "endpointOnVendorDomain": true, "terms": "https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use", "privacy": "https://privacy.microsoft.com/en-us/privacystatement", "statusPage": "https://status.cloud.microsoft", "changelog": "https://developer.microsoft.com/en-us/graph/changelog", "securityTxt": "expired", "checked": "2026-10-08", "notes": [ "The Microsoft service health page at status.cloud.microsoft needs JavaScript to show anything.", "The Microsoft APIs terms of use say they were last updated in October 2025.", "privacy.microsoft.com answered our reader with 403 on 8 October 2026, so the privacy URL follows the Microsoft Graph calendar listing and wasn't reread.", "RDAP for microsoft.com gives a registration date of 1991-05-02." ], "score": 85 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/outlook-mail-graph.json", "live": { "slug": "outlook-mail-graph", "probe": { "target": "https://graph.microsoft.com/v1.0", "method": "get", "lastAt": "2026-10-09T12:15:31.158948822Z", "lastOk": true, "lastStatus": 200, "lastMs": 3, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 4, "p95ms24h": 18, "samples24h": 223, "samples30d": 223, "days": [ { "date": "2026-10-08", "probes": 93, "ok": 93 }, { "date": "2026-10-09", "probes": 130, "ok": 130 } ] }, "versions": [ { "registry": "github", "name": "microsoftgraph/msgraph-sdk-javascript", "version": "3.0.7", "released": "2023-09-19", "seenAt": "2026-10-08T16:24:30.348454398Z" }, { "registry": "npm", "name": "@microsoft/microsoft-graph-client", "version": "3.0.7", "seenAt": "2026-10-08T16:24:29.99296352Z" }, { "registry": "pypi", "name": "msgraph-sdk", "version": "1.64.0", "released": "2026-10-06", "seenAt": "2026-10-08T16:24:30.234677595Z" } ], "githubStars": 835, "npmWeekly": 2882852, "pypiWeekly": 1578201, "securityTxt": { "url": "https://microsoft.com/.well-known/security.txt", "state": "expired", "expires": "2026-09-23T16:00:00.000Z", "checkedAt": "2026-10-08T15:39:08.216544687Z" }, "updatedAt": "2026-10-09T12:15:31.158948822Z" } }, "answer": "Outlook Mail (Microsoft Graph) scores 66.3 (B) on agent readiness against Zoho Mail API's 53.8 (D), and leads in 6 of 7 scored categories.", "b": { "slug": "zoho-mail", "name": "Zoho Mail API", "vendor": "Zoho", "vendorUrl": "https://www.zoho.com/mail/", "kind": "http-api", "category": "mailbox-access", "summary": "Zoho Mail is Zoho's hosted business email service. Its REST API lets an application read, search, send and organise mail in a Zoho Mail account and administer an organisation's users, domains, groups and policies, with OAuth 2.0 access.", "url": "https://www.anchorterminal.com/tools/zoho-mail", "markdownUrl": "https://www.anchorterminal.com/tools/zoho-mail.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/zoho-mail.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/zoho-mail.json", "license": "Proprietary service under the Zoho Terms of Service and the Zoho Mail usage policy. No source repository was found", "transports": [ "http" ], "packages": [], "auth": "oauth", "authNotes": "OAuth 2.0 only. A person registers a client in the Zoho API console (server-based, client-based, mobile, non-browser with device authorisation, or a self client for one's own account) and approves scopes of the form `ZohoMail.\u003cresource\u003e.\u003coperation\u003e`. Registration is self-serve, with no app review or sales approval found. The access token lasts one hour and goes in `Authorization: Zoho-oauthtoken \u003ctoken\u003e`. The refresh token lasts until revoked. Organisation calls need an administrator's account. Each data centre has its own accounts host and API host.", "pricing": "freemium", "pricingNotes": "API access comes with a mailbox plan and has no per-call charge. Mail Free covers up to five users on one domain with no card and is available in some regions only. Paid plans cost $1 to $6 a user a month billed yearly, with a 15-day trial of the highest edition and no card. The API guide says plan and mail policy decide which APIs an account can call (https://www.zoho.com/mail/zohomail-pricing.html, checked 2026-10-09).", "priceSummary": "$1 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API guide, the OAuth guide or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://www.zoho.com/mail/help/api/", "llmsTxt": "https://www.zoho.com/mail/help/llms.txt", "capabilities": [ "mailbox.read", "mailbox.search", "mailbox.send", "mailbox.drafts", "mailbox.sync" ], "tags": [ "hosted", "closed-source", "oauth", "mcp", "webhooks", "free-tier", "no-card", "llms-txt", "email", "status-page", "bug-bounty", "soc2", "eu-data-residency" ], "graded": true, "anchor": { "graded": true, "score": 53.8, "grade": "D", "agentReady": false, "rank": 626, "ranked": true, "rankOf": 842, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 56, "maintenance": 33, "payments": 30, "reliability": 63, "schema": 45, "security": 67, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "A REST API over a Zoho Mail mailbox with OAuth scopes that narrow to one resource and one operation, plus an MCP server launched in 2026. Zoho publishes no OpenAPI file, SDK, request rate limit or API changelog, and its usage policy bars automated email.", "bestFor": "An agent working inside its owner's Zoho Mail mailbox or administering a Zoho Mail organisation, where narrow scopes and the MCP server keep access small.", "strengths": [ "OAuth scopes name one resource and one operation, such as `ZohoMail.messages.READ`, so an agent can hold read access without send or delete.", "Every reference page has a Markdown twin, indexed in `https://www.zoho.com/mail/help/llms.txt`, with a curl sample and a sample response.", "Zoho Mail MCP exposes the API methods as tools on a remote server, and the owner picks which tools a server carries.", "The Mail Free plan covers five users on one domain with no card, and the MCP FAQ says free and paid plans both work.", "Delete moves a message to Trash unless `expunge=true` is sent, and audit records, login history and SMTP logs are readable through the Logs API." ], "weaknesses": [ "The Zoho Mail usage policy, updated 2 September 2026, lists automated, bulk and transactional emails among uses that are not allowed.", "No OpenAPI file, official REST SDK or dated API changelog was found. The path carries no version.", "The getting started guide says each API has its own rate limit and gives no numbers. The response code list has no 429.", "External sending is capped at 50 to 500 emails an hour by sender reputation, with a block of up to one hour once the cap is reached.", "The OAuth guide's token, refresh and revoke examples carry the client secret and refresh token in the URL query string." ], "agentNotes": [ "Send `Authorization: Zoho-oauthtoken \u003ctoken\u003e`, not `Bearer`. The token response says `Bearer`, but the OAuth guide says the Mail API requires the Zoho prefix.", "Use the host for the account's data centre, such as `mail.zoho.eu` or `mail.zoho.in`. Call `GET /api/accounts` first for the `accountId` every mailbox call needs.", "Reading a message body needs both `folderId` and `messageId`. List and search calls return a summary only, 10 messages by default and 200 at most.", "Request `ZohoMail.messages.READ` alone for a reading agent. Add `CREATE` only when it must send, and leave `DELETE` out unless required.", "Refresh the access token every hour, and post OAuth parameters in the request body where the server accepts it, to keep secrets out of URLs." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.8 } ], "editorialScores": { "ergonomics": 56, "maintenance": 33, "payments": 30, "reliability": 63, "schema": 45, "security": 67, "transparency": 51 }, "provenanceScore": 95 }, "connect": { "http": "curl \"https://mail.zoho.com/api/accounts\" \\\n -X GET \\\n -H \"Accept: application/json\" \\\n -H \"Authorization: Zoho-oauthtoken $ZOHO_ACCESS_TOKEN\"" }, "letme": { "capability": "https://letme.dev/mailbox.read", "tool": "https://letme.dev/zoho-mail" }, "sameCompany": [ "zoho-books", "zoho-zeptomail", "zoho-crm", "zoho-desk", "zoho-recruit", "zoho-people" ], "area": "communication", "unitPrices": [ { "item": "Mail Lite, 5 GB", "unit": "seat-month", "usd": 1, "note": "billed yearly, no monthly plan. $1.25 for 10 GB" }, { "item": "Workplace Standard", "unit": "seat-month", "usd": 3, "note": "billed yearly. $4 billed monthly. 30 GB mailbox plus the office suite" }, { "item": "Mail Premium", "unit": "seat-month", "usd": 4, "note": "billed yearly, no monthly plan. 50 GB mailbox with retention and eDiscovery" }, { "item": "Workplace Professional", "unit": "seat-month", "usd": 6, "note": "billed yearly. 100 GB mailbox" } ], "provenance": { "legalEntity": "Zoho Corporation Private Limited", "domain": "zoho.com", "domainRegistered": "2004-01-16", "endpointOnVendorDomain": true, "terms": "https://www.zoho.com/terms.html", "privacy": "https://www.zoho.com/privacy.html", "statusPage": "https://status.zoho.com", "changelog": "https://www.zoho.com/mail/whats-new.html", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "The Terms of Service (last updated 2 March 2022) are the service agreement for Zoho's online services. The contracting entity depends on the customer's region, Zoho Corporation Private Limited for India and Zoho Corporation for the United States (https://www.zoho.com/legal/zoho-contracting-entities.html).", "The Zoho Mail usage policy at https://www.zoho.com/mail/help/usage-policy.html, last updated 2 September 2026, adds rules for the mail service and bars automated and bulk email.", "The privacy policy was last updated on 22 December 2025. Part II covers data Zoho processes on a customer's behalf.", "security.txt at www.zoho.com gives a bug bounty contact, security@zohocorp.com, a policy link and an expiry of 30 June 2028.", "What's New is a product changelog dated by month, with the latest entries under August 2026. No API changelog was found.", "The US API answers on mail.zoho.com. Other data centres use mail.zoho.eu, mail.zoho.in, mail.zoho.com.au, mail.zoho.jp, mail.zohocloud.ca, mail.zoho.com.cn, mail.zoho.ae and mail.zoho.sa. OAuth runs on accounts.zoho.com.", "RDAP for zoho.com gives a registration date of 2004-01-16 and expiry on 2031-01-16." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/zoho-mail.json" }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Microsoft", "b": "Zoho", "name": "Vendor" }, { "a": "https://graph.microsoft.com/v1.0", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth", "name": "Auth" }, { "a": "Your plan", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT (SDKs)", "b": "Proprietary service under the Zoho Terms of Service and the Zoho Mail usage policy. No source repository was found", "name": "Licence" }, { "a": "10", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-06", "b": "none", "name": "Last release" }, { "a": "2025-10-01", "b": "2022-03-02", "name": "Terms last updated" }, { "a": "2026-09-01", "b": "2025-12-22", "name": "Privacy policy last updated" }, { "a": "yes", "b": "yes", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "835 stars, 2.9M npm/wk, 1.6M PyPI/wk", "b": "none", "name": "Popularity" } ], "faq": [ { "answer": "Outlook Mail (Microsoft Graph) scores 66.3 (B) on agent readiness against Zoho Mail API's 53.8 (D), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Outlook Mail (Microsoft Graph) or Zoho Mail API?" }, { "answer": "Both use an OAuth sign-in.", "question": "Do Outlook Mail (Microsoft Graph) and Zoho Mail API need an API key?" }, { "answer": "Outlook Mail (Microsoft Graph) has a hosted endpoint at https://graph.microsoft.com/v1.0. No hosted endpoint is listed for Zoho Mail API.", "question": "Can an agent call Outlook Mail (Microsoft Graph) and Zoho Mail API without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 93 against 45", "Agent ergonomics, 81 against 56", "Payments \u0026 pricing, 35 against 30", "Maintenance \u0026 community, 76 against 33" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Agents working in Microsoft 365 or Outlook.com mailboxes that need scoped reading, drafting, sending and incremental sync.", "slug": "outlook-mail-graph", "watchFor": "sendMail has no idempotency key and answers 202 Accepted before delivery, so a retried send can go out twice" }, { "aheadOn": null, "also": [ "Free to start without a card", "No incidents deducted, where Outlook Mail (Microsoft Graph) loses 4 points for them" ], "goodFor": "An agent working inside its owner's Zoho Mail mailbox or administering a Zoho Mail organisation, where narrow scopes and the MCP server keep access small.", "slug": "zoho-mail", "watchFor": "The Zoho Mail usage policy, updated 2 September 2026, lists automated, bulk and transactional emails among uses that are not allowed." } ], "job": { "capability": "mailbox.read", "name": "Mailbox read" }, "others": [ { "json": "https://www.anchorterminal.com/compare/emailengine-vs-outlook-mail-graph.json", "title": "EmailEngine vs Outlook Mail (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/emailengine-vs-outlook-mail-graph" }, { "json": "https://www.anchorterminal.com/compare/emailengine-vs-zoho-mail.json", "title": "EmailEngine vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/emailengine-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/fastmail-vs-outlook-mail-graph.json", "title": "Fastmail API (JMAP) vs Outlook Mail (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/fastmail-vs-outlook-mail-graph" }, { "json": "https://www.anchorterminal.com/compare/fastmail-vs-zoho-mail.json", "title": "Fastmail API (JMAP) vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/fastmail-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/gmail-api-vs-outlook-mail-graph.json", "title": "Gmail API vs Outlook Mail (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/gmail-api-vs-outlook-mail-graph" }, { "json": "https://www.anchorterminal.com/compare/gmail-api-vs-zoho-mail.json", "title": "Gmail API vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/gmail-api-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/nylas-email-vs-outlook-mail-graph.json", "title": "Nylas Email API vs Outlook Mail (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/nylas-email-vs-outlook-mail-graph" }, { "json": "https://www.anchorterminal.com/compare/nylas-email-vs-zoho-mail.json", "title": "Nylas Email API vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/nylas-email-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-unipile.json", "title": "Outlook Mail (Microsoft Graph) vs Unipile", "url": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-unipile" }, { "json": "https://www.anchorterminal.com/compare/unipile-vs-zoho-mail.json", "title": "Unipile vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/unipile-vs-zoho-mail" } ], "scores": [ { "by": 3, "edge": "zoho-mail", "key": "reliability", "name": "Reliability", "outlook-mail-graph": 60, "weight": 16, "zoho-mail": 63 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 48, "edge": "outlook-mail-graph", "key": "schema", "name": "Schema \u0026 documentation", "outlook-mail-graph": 93, "weight": 13, "zoho-mail": 45 }, { "by": 25, "edge": "outlook-mail-graph", "key": "ergonomics", "name": "Agent ergonomics", "outlook-mail-graph": 81, "weight": 13, "zoho-mail": 56 }, { "by": 4, "edge": "outlook-mail-graph", "key": "security", "name": "Security \u0026 auth", "outlook-mail-graph": 71, "weight": 14, "zoho-mail": 67 }, { "by": 5, "edge": "outlook-mail-graph", "key": "payments", "name": "Payments \u0026 pricing", "outlook-mail-graph": 35, "weight": 10, "zoho-mail": 30 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 43, "edge": "outlook-mail-graph", "key": "maintenance", "name": "Maintenance \u0026 community", "outlook-mail-graph": 76, "weight": 7, "zoho-mail": 33 }, { "by": 2, "edge": "outlook-mail-graph", "key": "transparency", "name": "Transparency \u0026 trust", "outlook-mail-graph": 75, "weight": 7, "zoho-mail": 73 } ], "summary": "Outlook Mail (Microsoft Graph) scores 66.3 (B) on agent readiness against Zoho Mail API's 53.8 (D), and leads in 6 of 7 scored categories. Both do mailbox read.", "verdicts": { "outlook-mail-graph": "Delegated permissions split reading without bodies (Mail.ReadBasic), full reading, writing and sending, and delta queries and change notifications keep a local copy in step. sendMail takes no idempotency key and returns 202 before delivery, and each app is held to four concurrent requests per mailbox.", "zoho-mail": "A REST API over a Zoho Mail mailbox with OAuth scopes that narrow to one resource and one operation, plus an MCP server launched in 2026. Zoho publishes no OpenAPI file, SDK, request rate limit or API changelog, and its usage policy bars automated email." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail", "json": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail.md", "slim": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail.min.md" }, "markdown": "Outlook Mail (Microsoft Graph) scores 66.3 (B) on agent readiness against Zoho Mail API's 53.8 (D), and leads in 6 of 7 scored categories. Both do mailbox read.\n\n- Outlook Mail (Microsoft Graph): grade B, 66.3/100, rank #272 of 842. Markdown https://www.anchorterminal.com/tools/outlook-mail-graph.md · JSON https://www.anchorterminal.com/api/v1/tools/outlook-mail-graph.json\n- Zoho Mail API: grade D, 53.8/100, rank #626 of 842. Markdown https://www.anchorterminal.com/tools/zoho-mail.md · JSON https://www.anchorterminal.com/api/v1/tools/zoho-mail.json\n\n## Which one, for what\n\n### Outlook Mail (Microsoft Graph) (B)\n\nGood for: Agents working in Microsoft 365 or Outlook.com mailboxes that need scoped reading, drafting, sending and incremental sync.\n\nAhead on:\n- Schema \u0026 documentation, 93 against 45\n- Agent ergonomics, 81 against 56\n- Payments \u0026 pricing, 35 against 30\n- Maintenance \u0026 community, 76 against 33\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: sendMail has no idempotency key and answers 202 Accepted before delivery, so a retried send can go out twice\n\n### Zoho Mail API (D)\n\nGood for: An agent working inside its owner's Zoho Mail mailbox or administering a Zoho Mail organisation, where narrow scopes and the MCP server keep access small.\n\nAlso in its favour:\n- Free to start without a card\n- No incidents deducted, where Outlook Mail (Microsoft Graph) loses 4 points for them\n\nWatch for: The Zoho Mail usage policy, updated 2 September 2026, lists automated, bulk and transactional emails among uses that are not allowed.\n\n\n## Score by category\n\n| Category | Weight | Outlook Mail (Microsoft Graph) | Zoho Mail API | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 60 | 63 | Zoho Mail API +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 93 | 45 | Outlook Mail (Microsoft Graph) +48 |\n| Agent ergonomics | 13% (16.2 this run) | 81 | 56 | Outlook Mail (Microsoft Graph) +25 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 67 | Outlook Mail (Microsoft Graph) +4 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 35 | 30 | Outlook Mail (Microsoft Graph) +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 76 | 33 | Outlook Mail (Microsoft Graph) +43 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 75 | 73 | Outlook Mail (Microsoft Graph) +2 |\n| Negative events | ≤15 | -4 | 0 | |\n| **Total** | | **66.3 · B** | **53.8 · D** | |\n\n## Facts side by side\n\n| Fact | Outlook Mail (Microsoft Graph) | Zoho Mail API |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Microsoft | Zoho |\n| Hosted endpoint | `https://graph.microsoft.com/v1.0` | no (local only) |\n| Transports | HTTP | HTTP |\n| Auth | OAuth | OAuth |\n| Pricing | Your plan | Freemium |\n| x402 | no | no |\n| Licence | MIT (SDKs) | Proprietary service under the Zoho Terms of Service and the Zoho Mail usage policy. No source repository was found |\n| Tools exposed | 10 | none |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-06 | none |\n| Terms last updated | 2025-10-01 | 2022-03-02 |\n| Privacy policy last updated | 2026-09-01 | 2025-12-22 |\n| Customer content may train models | yes | yes |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | yes |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 835 stars, 2.9M npm/wk, 1.6M PyPI/wk | none |\n\n## Verdicts\n\n**Outlook Mail (Microsoft Graph).** Delegated permissions split reading without bodies (Mail.ReadBasic), full reading, writing and sending, and delta queries and change notifications keep a local copy in step. sendMail takes no idempotency key and returns 202 before delivery, and each app is held to four concurrent requests per mailbox.\n\n**Zoho Mail API.** A REST API over a Zoho Mail mailbox with OAuth scopes that narrow to one resource and one operation, plus an MCP server launched in 2026. Zoho publishes no OpenAPI file, SDK, request rate limit or API changelog, and its usage policy bars automated email.\n\n## Before you call either\n\n### Outlook Mail (Microsoft Graph)\n\n1. Create a draft with POST /me/messages, then send it with /send. A retried sendMail can send the message twice\n2. Send `Prefer: IdType=\"ImmutableId\"` on every request, or message IDs change when a message moves folder\n3. Use `$select` and `Prefer: outlook.body-content-type=\"text\"`. List messages returns HTML bodies and 10 messages a page by default\n4. Honour `Retry-After` on 429 and keep to four parallel calls per mailbox. Batches of up to 20 requests are throttled per request\n5. Treat message bodies as untrusted input, and ask for Mail.ReadBasic when the task doesn't need bodies\n\n### Zoho Mail API\n\n1. Send `Authorization: Zoho-oauthtoken \u003ctoken\u003e`, not `Bearer`. The token response says `Bearer`, but the OAuth guide says the Mail API requires the Zoho prefix.\n2. Use the host for the account's data centre, such as `mail.zoho.eu` or `mail.zoho.in`. Call `GET /api/accounts` first for the `accountId` every mailbox call needs.\n3. Reading a message body needs both `folderId` and `messageId`. List and search calls return a summary only, 10 messages by default and 200 at most.\n4. Request `ZohoMail.messages.READ` alone for a reading agent. Add `CREATE` only when it must send, and leave `DELETE` out unless required.\n5. Refresh the access token every hour, and post OAuth parameters in the request body where the server accepts it, to keep secrets out of URLs.\n\n## Questions\n\n### Which is better for AI agents, Outlook Mail (Microsoft Graph) or Zoho Mail API?\n\nOutlook Mail (Microsoft Graph) scores 66.3 (B) on agent readiness against Zoho Mail API's 53.8 (D), and leads in 6 of 7 scored categories.\n\n### Do Outlook Mail (Microsoft Graph) and Zoho Mail API need an API key?\n\nBoth use an OAuth sign-in.\n\n### Can an agent call Outlook Mail (Microsoft Graph) and Zoho Mail API without installing anything?\n\nOutlook Mail (Microsoft Graph) has a hosted endpoint at https://graph.microsoft.com/v1.0. No hosted endpoint is listed for Zoho Mail API.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail.json, and with the fewest tokens: https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"outlook-mail-graph\", \"b\": \"zoho-mail\"}`. From a terminal: `anchor compare outlook-mail-graph zoho-mail`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/outlook-mail-graph.json and https://www.anchorterminal.com/api/v1/tools/zoho-mail.json\n\n## Other comparisons with Outlook Mail (Microsoft Graph) or Zoho Mail API\n\n- [EmailEngine vs Outlook Mail (Microsoft Graph)](https://www.anchorterminal.com/compare/emailengine-vs-outlook-mail-graph.md)\n- [EmailEngine vs Zoho Mail API](https://www.anchorterminal.com/compare/emailengine-vs-zoho-mail.md)\n- [Fastmail API (JMAP) vs Outlook Mail (Microsoft Graph)](https://www.anchorterminal.com/compare/fastmail-vs-outlook-mail-graph.md)\n- [Fastmail API (JMAP) vs Zoho Mail API](https://www.anchorterminal.com/compare/fastmail-vs-zoho-mail.md)\n- [Gmail API vs Outlook Mail (Microsoft Graph)](https://www.anchorterminal.com/compare/gmail-api-vs-outlook-mail-graph.md)\n- [Gmail API vs Zoho Mail API](https://www.anchorterminal.com/compare/gmail-api-vs-zoho-mail.md)\n- [Nylas Email API vs Outlook Mail (Microsoft Graph)](https://www.anchorterminal.com/compare/nylas-email-vs-outlook-mail-graph.md)\n- [Nylas Email API vs Zoho Mail API](https://www.anchorterminal.com/compare/nylas-email-vs-zoho-mail.md)\n- [Outlook Mail (Microsoft Graph) vs Unipile](https://www.anchorterminal.com/compare/outlook-mail-graph-vs-unipile.md)\n- [Unipile vs Zoho Mail API](https://www.anchorterminal.com/compare/unipile-vs-zoho-mail.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Outlook Mail (Microsoft Graph) vs Zoho Mail API", "url": "" } ], "description": "Outlook Mail (Microsoft Graph) scores 66.3 (B) on agent readiness against Zoho Mail API's 53.8 (D), and leads in 6 of 7 scored categories. Both do mailbox read. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Outlook Mail (Microsoft Graph) B 66.3", "Zoho Mail API D 53.8", "scores" ], "h1": "Outlook Mail (Microsoft Graph) vs Zoho Mail API", "image": "https://www.anchorterminal.com/assets/og/compare-outlook-mail-graph-vs-zoho-mail.png", "path": "/compare/outlook-mail-graph-vs-zoho-mail", "published": "2026-10-01", "section": "tools", "title": "Outlook Mail (Microsoft Graph) vs Zoho Mail API for AI agents", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail" }, "tokens": { "markdown": 2200, "slim": 680 }, "version": 1 }