Reported by @marsh jacinth
Register an Azure AD app with:
Delegated: User.Read
Application: Sites.Selected
Grant the app Sites.Selected access to a single SharePoint site (no Sites.Read.All).
Confirm the app-only token works via Graph API (e.g., list drive items in Postman).
In Agent Builder, configure MCP SharePoint using the app credentials (client ID + secret/cert), not a delegated token.
Build a flow that lists/searches files using the MCP SharePoint connector.
Run the flow.
MCP SharePoint should list, browse, and search the specific site granted through Sites.Selected.
MCP SharePoint fails to list or browse files.
Search and indexing do not work.
Flow breaks when using the app-only token, despite it working correctly in Graph/Postman.
AgentBuilder with MCP SharePoint