SharePoint API: what you can do and how to use it with AI agents
SharePoint can be reached through Microsoft Graph and through its own REST API, covering sites, document libraries, lists and permissions. IT and business teams at Microsoft 365 companies use it. Access is through an app registered in Microsoft Entra ID, with administrator consent.
What the SharePoint API offers
Sites
Discover and read the organization's sites and subsites.
Libraries and files
Upload, download, versions and document metadata.
Lists
Read and write list items, often used as small databases.
Permissions
Sharing and access control for sites, folders and files.
Search
Search content across the tenant.
Change notifications
Subscriptions that tell you when files or lists change.
How to access the SharePoint API
- With your company’s credentialsOAuth 2.0 with an app registered in Microsoft Entra ID, using delegated or application permissions with administrator consent. The app can be restricted to specific sites.
- Prefer permissions limited to specific sites over access to the whole tenant.
- Graph throttles requests: handle the wait responses.
- Sensitive documents should stay out of reach of agents that do not need them.
Official documentation: learn.microsoft.com/sharepoint/dev
What an iTeam agent does with the SharePoint API
Purchase request in a list
Requests logged in a SharePoint list are read by the agent, which checks the budget and forwards them to the approver in Teams.
Document in the current version
The agent answers procedure questions using only published documents from the quality library, citing the version.
Standard project folder
When a project opens, the agent creates the folder structure and applies the team's permissions.
Access review
The agent lists files on confidential sites that have open sharing links and sends them to IT.
From the credential to the agent at work, with approval
Register the app in Entra ID
IT creates the app, picks minimum permissions and, where possible, limits access to the sites needed.
Register it in the iTeam vault
Credentials stay in the vault and each agent gets the sites and actions it may use.
Test with approval
Reading runs directly. Permission changes and deletions go through human approval.
Ready-made AI teams that use SharePoint
Questions about the SharePoint API
Is the SharePoint API free?
Generally yes: access through Graph and REST is part of Microsoft 365, with no per-call charge in most cases.
Do I need to code to use the SharePoint API with iTeam?
Not necessarily. The deployment team sets up the app and the flows, and iTeam uses the connector or the API documentation.
Graph or SharePoint REST?
Microsoft recommends Graph for most cases. The SharePoint REST API covers some specific functions.
