dsh-outlook

Most corporate Windows machines have IT lock down Azure app registration and tenant admin rights, which kills every Graph API approach at step one. dsh-outlook takes a different route: it drives your already-logged-in classic desktop Outlook client over Windows COM, requiring no Azure app registration, no mailbox password, and no admin privileges. Install it and it works immediately with zero credential configuration.

The plugin exposes 18 AI tools covering mail search, full-text reading, drafting, sending, replying, forwarding, calendar queries and creation, meeting invitation responses, directory lookup, free/busy checks, room availability search, and secure attachment saving. A sidebar badge tracks new mail in real time, and clicking it opens the message in Outlook marked as read. Every outbound action passes through three independent security gates: a two-round human confirmation protocol, SHA-256 content-hash binding between what you review and what actually sends, and a one-time bridge-layer token that the PowerShell shim enforces. If any single gate is bypassed, the email simply does not go out, and drafts are never auto-sent.

This plugin is built for Windows users running classic Outlook in environments where IT denies Graph API access; office workers who want to ask their AI to read the morning mail aloud, draft a reply on a single prompt, or schedule a meeting; and security-conscious users who need to search free/busy slots, find a room, or process email in bulk without ever handing credentials to a third party.