Guide

Outlook AI Agent: Triage and Reply From Chat

Q: My work account will not connect. Why?

Usually Microsoft 365 tenant policy. Administrators can require admin consent before a third-party app accesses a mailbox. Ask your administrator to approve the app, or connect a personal Outlook account.

Q: Why are the action names doubled up?

The names genuinely double the word, as in OUTLOOK_OUTLOOK_SEND_EMAIL. Use composio search outlook to copy the exact name rather than typing it from memory.

Q: Can it handle attachments?

It can list attachments with OUTLOOK_LIST_OUTLOOK_ATTACHMENTS. For heavier file work, pair Outlook with a storage integration such as Google Drive or Dropbox.

Q: Should I use this or Gmail?

Use whichever holds your mail. Both can be connected at once if you keep separate work and personal mailboxes.

If your mail lives in Microsoft rather than Google, this is your integration. Same idea as Gmail — the agent works your mailbox while you talk to it somewhere else — with a couple of Microsoft-specific things worth knowing first.

Outlook is a tool, not a channel

The agent does not sit in your inbox waiting for mail. You talk to it on Telegram, WhatsApp, or the web chat, and it reaches into Outlook when you ask it to. That means no inbox rules to configure, no forwarding address, and nothing happening in your mailbox that you did not request.

If you specifically want people to be able to email a bot and get an answer, that is the IMAP email channel instead — a different setup for a different job.

Connect it in three steps

Open openclawlaunch.com/integrations while signed in.
Find Outlook and click Connect. Microsoft's consent screen opens; approve the account whose mailbox you want the agent working with.
Ask for something in chat. No config file, no restart, no app password.

Work accounts are the one place this can stall. Many Microsoft 365 tenants require an administrator to approve third-party apps before they can read mail. If the consent screen turns you away, that is a tenant policy decision and your admin is the person who can change it.

What the agent actually runs

composio search outlook send email

composio execute OUTLOOK_OUTLOOK_SEND_EMAIL '{"to_email":"[email protected]","subject":"Q3 numbers","body":"Attached below."}'

OUTLOOK_OUTLOOK_LIST_MESSAGES — read the mailbox; every triage question starts here
OUTLOOK_OUTLOOK_SEND_EMAIL — send a new message
OUTLOOK_OUTLOOK_REPLY_EMAIL — reply in thread, which is what you usually want rather than a fresh mail
OUTLOOK_LIST_OUTLOOK_ATTACHMENTS — see what came attached to a message

The doubled OUTLOOK_OUTLOOK_ prefix is real. It is a Composio naming artifact, not a mistake in this guide, and it is the reason the correct workflow is always to search for an action name before executing it.

Reply, do not compose

A small thing that makes agent-written mail far less annoying to receive: prefer OUTLOOK_OUTLOOK_REPLY_EMAIL over sending a new message. Replying keeps the thread intact, carries the subject and the quoted history, and lands in the conversation the recipient already has open. A new message about an existing thread reads as an agent that did not understand the context — even when the content is right.

Things worth asking for

“What came into my work mail overnight that actually needs me?”
“Reply to the vendor thread confirming Thursday works.”
“Find the message with the signed contract attached and tell me the date on it.”
“Summarize the last week of mail from this client into five bullets.”
“Draft a reply declining, polite but final.”

Limits and revoking access

100 executed actions a day on free trial and Lite, 1,000 on Pro; searching for an action does not count. Adding your own Composio API key on the integrations page removes the cap. Revoke from the integrations page, or from Microsoft's own app-permissions screen — either one cuts the agent off immediately.

Frequently asked questions

My work account will not connect. Why?

Almost certainly tenant policy rather than anything on our side. Microsoft 365 administrators can require admin consent before any third-party app touches a mailbox, in which case the consent screen refuses you rather than your IT department. The path forward is to ask your admin to approve the app, or to connect a personal Outlook account instead. A tenant that blocks third-party mail access is doing its job; do not try to route around it.

Why are the action names doubled up?

They genuinely read as OUTLOOK_OUTLOOK_SEND_EMAIL — the toolkit prefix and the action name both carry the word. It looks like a typo and is not, so an agent that trims one of them will get an unknown-action error. This is exactly why the workflow is to run composio search outlook first and copy the name it prints rather than typing it from memory.

Can it handle attachments?

It can list them — OUTLOOK_LIST_OUTLOOK_ATTACHMENTS — which is enough for the common case of “did the invoice come through and what is in it”. For heavier file work, pair Outlook with Drive or Dropbox as the storage destination.

Should I use this or Gmail?

Whichever holds your mail — there is no advantage to either on our side, and you can connect both if you run separate work and personal mailboxes. The action vocabulary differs slightly but the agent handles that; you just say “check my work mail”.