For Microsoft 365 and Intune admins

Manage Microsoft 365 and Intune by asking in plain English.

ConsoleSmith connects Claude Desktop to your Microsoft 365 tenant. Look up users, devices, groups and licenses, and handle routine changes like group membership and license assignment. It runs on your own PC.

Get early access See how it works

Free plan available. Windows today; macOS support is planned.

Connects to Microsoft Intune Microsoft Entra ID Microsoft Graph Claude Desktop Model Context Protocol
How it works

Set up once, then just ask.

Setup takes about 30 to 45 minutes the first time. After that, ConsoleSmith starts with Claude Desktop and you ask questions the way you would ask a colleague.

01

Register an app in your tenant

Create an app registration in Microsoft Entra ID with the Microsoft Graph permissions you choose, and grant admin consent. You choose which permissions the app registration gets.

02

Run the installer

With Python 3.11 or newer installed, the Windows installer sets up ConsoleSmith on your PC and adds it to Claude Desktop, keeping any other connectors you already use.

03

Ask in plain English

Claude picks the right ConsoleSmith tool for your question and shows you the result. By default, Claude Desktop asks for your approval before each tool runs.

Tools

15 tools for everyday admin work.

Eleven tools read from your tenant. Four make changes; called without confirmation, they return a preview and change nothing.

Read all plans

  • test_connectionCheck the connection and confirm which tenant you are in
  • find_usersFind users by display name
  • get_user_detailsJob title, department, account status and contact details
  • get_user_licensesLicenses assigned to a user
  • get_user_groupsGroups and directory roles a user belongs to, including nested groups
  • list_user_devicesIntune devices enrolled by a user
  • get_device_complianceCompliance state, OS, encryption and last sync for a device
  • list_noncompliant_devicesNon-compliant devices, most recently synced first (up to 100)
  • search_groupsFind groups by name
  • get_group_membersDirect members of a group
  • list_tenant_licensesLicense inventory, consumed and available

Change Pro

  • add_group_memberAdd a user to a group
  • remove_group_memberRemove a user from a group
  • assign_licenseAssign a Microsoft 365 license to a user
  • retire_deviceRetire an Intune-managed device, removing company data. Never a full wipe.

Called without confirmation, a change tool returns a preview listing the IDs it would act on, and changes nothing. Check those IDs before you approve.

Security and privacy

Your tenant data stays between you, Microsoft and Claude.

ConsoleSmith runs on your PC, signs in with your own app registration, and talks to Microsoft Graph directly.

What reaches us: your license key

When a license key is set, ConsoleSmith checks it with our service about once an hour, and more often if our service cannot be reached. The check carries the key and, like any web request, your internet address. It carries no tenant ID, questions or results. We look the key up with our payment provider, and our service does not log it. Without a key, nothing is sent to us.

What Claude sees

Your questions and the tool results become part of your Claude conversation, like anything else you share with Claude, under your own Anthropic account.

Preview before change

Change tools return a preview unless they are called with confirmation, and by default Claude Desktop asks you before each tool runs. For the four change tools, we recommend approving each call on its own rather than allowing them permanently.

A log on your machine

Each tool run and each preview is written to a local audit log with the tool, the inputs and the outcome. It stays on your PC.

Pricing

Start free. Upgrade when you need to make changes.

Both plans cover one Microsoft 365 tenant and allow up to 60 Microsoft Graph requests a minute. One question can use several requests.

Free

$0 / month

Explore your tenant with the read tools. No credit card.

  • 11 read tools
  • 100 Microsoft Graph requests a day (resets at midnight UTC)
  • 1 tenant
  • Local audit log
  • Change tools
Start free

Pro

$39 / month

For admins who want to make routine changes from Claude.

  • All 15 tools, including the 4 change tools
  • No daily request limit
  • 1 tenant
  • Local audit log
  • Email support
Get Pro
Questions

Good to know.

Does it work on a Mac?

Not yet. Setup is documented and tested on Windows. macOS support is planned and will be announced when it has been tested.

Can I manage more than one tenant?

Each plan covers one tenant today.

Which permissions does it need?

Microsoft Graph application permissions that you choose and consent to in your own tenant. They apply across the whole tenant. The read tools need six read permissions. The change tools add three write permissions, and one of them replaces a read permission, so the Pro tier needs eight in total. The setup guide lists each one and what it is used for.

What happens if Claude gets a change wrong?

Called without confirmation, a change tool returns a preview and changes nothing. Claude can also call a change tool with confirmation straight away, whether or not it showed a preview first. ConsoleSmith does not check that a preview was shown or read, so the human check is the approval prompt Claude Desktop shows before each tool runs. That prompt is on by default, and we recommend approving each change on its own. Every run and every preview is written to an audit log on your PC. A wrong group change can be reversed with the opposite tool. A wrong license assignment is removed in the Microsoft 365 admin center. A retire cannot be undone: the device has to be enrolled in Intune again from the device itself.

Can it wipe a device?

ConsoleSmith has no wipe tool. retire_device retires a device, which removes company data and unenrolls it from Intune. The Microsoft Graph permission that retire_device needs also allows other device actions, including wipe, outside ConsoleSmith, so treat the app's client secret like an admin credential.

Early access

Try ConsoleSmith in your tenant.

We are onboarding admins one at a time. Send us a note and we will get you set up.

Request early access by email

This opens your email app. If it does not, write to hello@consolesmith.com. This page has no signup form. Your email app sends your request to us. See our Privacy Policy for how we handle your message and website visitor information.