Sharepoint Api

SharePoint API is accessed via Microsoft Graph — the same auth and SDK covering Outlook, OneDrive, and Teams also covers SharePoint sites and document libraries. For agents: read and write documents in SharePoint document libraries (via Drive API), manage list data (custom structured data in SharePoint Lists), and search across SharePoint content. Enterprise use cases: document approval workflows (read file, process, write back), list-driven project tracking, and intranet content management. Service Principal with Sites.ReadWrite.All application permission enables server-side automation. Confidence is docs-derived.

Microsoft Graph at graph.microsoft.com/v1.0/sites. Sites: GET /sites?search={query} searches for sites. GET /sites/{siteId} retrieves site metadata. GET /sites/{siteId}/drives lists document libraries (drives). Drive operations: same as OneDrive API (GET /sites/{siteId}/drives/{driveId}/root/children, POST .../content for upload, GET .../items/{id}/content for download). SharePoint Lists: GET /sites/{siteId}/lists retrieves all lists. GET /sites/{siteId}/lists/{listId}/items retrieves list items. POST /sites/{siteId}/lists/{listId}/items creates list item ({fields: {Title: "value", CustomField: "value"}}). PATCH /sites/{siteId}/lists/{listId}/items/{itemId}/fields updates item. Search: POST /search/query ({requests: [{entityTypes: ["driveItem","listItem"], query: {queryString: "keyword"}}]}) searches SharePoint content.

OAuth2: Application permissions for server-side access — Sites.ReadWrite.All (full SharePoint access), Files.ReadWrite.All (document libraries). Service Principal: POST /oauth2/v2.0/token ({client_credentials grant}) → Bearer token. HTTPS enforced. Tenant admin consent required for Sites.ReadWrite.All (higher privilege than Files.ReadWrite.All). Site ID discovery: GET /sites?search={site_name} or GET /sites/{hostname}:/{site_path} to find site IDs. SharePoint App-Only: alternative auth via SharePoint-specific certificate-based app registration for legacy scenarios.

Standard HTTP status codes with JSON error bodies ({error: {code, message}}). 403 for missing permission (Sites.ReadWrite.All vs. Files.ReadWrite.All). Site ID format: comma-separated host,site-id — discover via Graph API. List field names: use internal name (not display name) for filtering — check via GET /lists/{id}/fields. Item versioning: SharePoint maintains version history — DELETE moves to recycle bin. Rate limiting: 10,000 req/10min per app. Microsoft Graph uptime at admin.microsoft.com/servicestatus. SharePoint throttling: additional SharePoint-layer throttling may apply on top of Graph limits.

learn.microsoft.com/graph/api/resources/sharepoint covers Graph API reference for SharePoint resources, search API documentation, and permission guide. Getting started: Azure free account, register app, grant Sites.ReadWrite.All — first site content read in under 15 minutes. microsoft-graph-sdk: pip install msgraph-sdk. Community via Microsoft Q&A (sharepoint-online tag) and Stack Overflow. Documentation is comprehensive within the Microsoft Graph umbrella; SharePoint-specific patterns require understanding the site/drive/list data model.