MCP / Microsoft Graph Consultant

MCP / Microsoft Graph Consultant – Multi-Tenant M365 Integration for ChatGPT & Claude Project Overview We are a cybersecurity consulting organization seeking an experienced MCP, Microsoft Graph, and AI integration consultant to design and implement a secure multi-tenant Microsoft 365 integration for ChatGPT and/or Claude. The goal is to allow authorized users to securely access information from multiple independent customer Microsoft 365 tenants through AI without repeatedly switching Microsoft accounts. Target Architecture ChatGPT / Claude → Secure MCP Gateway → Microsoft Graph → Multiple Customer M365 Tenants The MCP gateway must provide strong tenant isolation, least-privilege access, user/tool authorization, secure credential management, and audit logging. Scope of Work The selected consultant will: Review ChatGPT and Claude MCP capabilities and recommend the appropriate platform/architecture. Design and deploy a custom Model Context Protocol (MCP) gateway. Integrate the gateway with Microsoft Graph and Microsoft Entra ID. Support multiple independent Microsoft 365 customer tenants. Implement a customer/tenant registry with explicit authorization controls. Secure credentials/certificates using Azure Key Vault or equivalent. Implement user-to-customer and user-to-tool RBAC. Implement comprehensive audit logging. Create a repeatable process for onboarding additional M365 tenants. Deploy the solution to Azure or an equivalent secure cloud platform. Provide source code, deployment documentation, and knowledge transfer. Initial MCP Capabilities The initial implementation should primarily be read-only, with tools such as: List authorized customers Microsoft 365 user/license inventory Microsoft Secure Score Security alerts Intune device inventory Noncompliant Intune devices Conditional Access summary MFA registration status SharePoint search Email search Calendar information The architecture should support future controlled write operations such as disabling users, revoking sessions, sending email, resetting MFA, and performing Intune device actions. Security Requirements Security is a critical component of this project. The consultant must implement: Strong customer tenant isolation Least-privilege Microsoft Graph permissions OAuth/OIDC authentication Certificate-based authentication where appropriate Secure token and credential management User/customer/tool-level RBAC Prevention of cross-tenant data leakage Audit logging of MCP/Graph activity Protection against unauthorized or destructive AI actions Authorization must be enforced by the MCP gateway and not rely solely on AI prompts. Required Experience Candidates should have hands-on experience with several of the following: MCP • ChatGPT custom connectors/apps • Claude Enterprise • Microsoft Graph API • Microsoft Entra ID • Microsoft 365 multitenant applications • OAuth/OIDC • MSAL • Intune • Defender • Azure • Key Vault • Python/TypeScript • FastAPI • RBAC • API security Experience developing solutions for MSPs, MSSPs, cybersecurity firms, or vCISO organizations supporting multiple M365 customers is highly desirable. Key Deliverables Architecture and security design ChatGPT vs. Claude implementation recommendation Working multi-tenant MCP gateway Initial read-only M365/Graph tools Tenant and RBAC security controls Azure production deployment Logging and auditing Proof-of-concept with at least two M365 tenants Customer onboarding procedure Source code, technical documentation, and knowledge transfer When Applying Please address the following: Describe MCP servers you have previously developed. Have you connected custom MCP servers to ChatGPT or Claude? Describe your Microsoft Graph and Entra multi-tenant experience. How would you prevent cross-customer data leakage? Would you recommend one multitenant Entra application or separate customer application credentials, and why? How would you secure Graph credentials, tokens, and MCP authentication? Provide examples of similar projects. Please do not submit a generic AI-development proposal. We specifically need expertise in MCP + Microsoft Graph + Entra ID + enterprise multi-tenant security. Engagement: Initial architecture/POC followed by implementation, with potential ongoing development and support. More information will be provided once an appropriate candidate has been identified