What does the Demiton SharePoint connector do?

The Demiton SharePoint connector reads documents and lists from Microsoft SharePoint via the Microsoft Graph API, and writes site collections, document libraries, and library permissions during project scaffolding workflows. Document retrieval is ACL-filtered per user - each user sees only the documents their Entra group memberships permit them to access. No user sees documents outside their authorised group.

What SharePoint data can I query through Claude?

With the SharePoint connector and the Demiton MCP server, you can query documents and lists from your connected SharePoint sites through Claude. Documents are indexed in Azure AI Search with per-user ACL enforcement, so your AI queries only surface what you are authorised to see. Typical use cases: project variations registers, safety incident logs, induction records, and contract documents.

What permissions does Demiton need for SharePoint?

Demiton requires a service principal with Sites.FullControl.All via Microsoft Graph. This broad permission is used only for administrative operations (site and library provisioning during project setup). Individual user data access is always mediated through Entra group membership - the service principal never reads data on behalf of users beyond what their groups permit.

SharePoint connector for construction documents

Stable Connected tier

Microsoft SharePoint connector for document retrieval, list access, and site administration via the Microsoft Graph API. All document retrieval is ACL-filtered per user identity - users see only documents their Entra group memberships grant access to.

Authentication: OAuth 2.0 via Entra ID service principal
System type: SHAREPOINT
Protocol: Microsoft Graph API v1
API reference: Microsoft Graph - SharePoint

See your SharePoint documents in Claude — book a 30-minute call.

Supported resources

Supported resources
Resource	FETCH	PUSH	LOOKUP
`sites`	✓ Yes	— No	— No
`drives`	✓ Yes	— No	— No
`documents`	✓ Yes	✓ Yes	✓ Yes
`lists`	✓ Yes	— No	✓ Yes
`site_by_path`	✓ Yes	— No	— No
`site_collection`	— No	✓ Yes	— No
`document_library`	— No	✓ Yes	— No
`library_permission`	— No	✓ Yes	— No
`file_to_library`	— No	✓ Yes	— No

LOOKUP on documents downloads a specific file. PUSH to library_permission binds an Entra security group to a library at a specified role (Read or Contribute).

Registers this connector fills

SharePoint keeps 4 registers current in Civil Memory. Each name is the record you ask for, not the system it came from - ask for it in Studio or from your own AI client.

Register	What it holds	Fields from SharePoint
Compliance documents `compliance_documents`	Safety and compliance documents attached to projects or workers.	Fills all of 14
Tender incoming `tender_incoming`	Client-issued documents for a tender you are estimating: brief, scope, pricing schedule.	Fills all of 22
Tender submission `tender_submission`	Tenders you have already submitted: scope, pricing and outcome.	Fills all of 10
Tendered budget `tendered_budget`	Tendered budget lines across all cost categories, from the winning estimate.	Fills all of 12

The full field list, requiredness and an example record for any register are on its published contract. Where more than one system fills a register, the register is the same shape either way.

Integration model

The adapter uses a service principal with application-level Graph API permissions. Document queries flow through Azure AI Search indexes that enforce per-user ACL filtering - the Graph API is the source; retrieval goes through the search layer.

Site provisioning operations (creating site collections, document libraries, and binding permissions) are used in project scaffolding workflows when a new project or opportunity is created.

Connection setup

Required values:

Tenant ID
Client ID - Entra app registration
Client Secret

Security

Access type: Read and provisioning write

Demiton reads documents and lists from SharePoint. Document retrieval is ACL-filtered per user - each user sees only documents the Entra groups they belong to are permitted to access. The service principal’s broad permissions are used only for administrative operations (site and library provisioning); individual user data access is always mediated through group membership.

Provisioning writes (creating folder structures, setting library permissions) occur only through governed project scaffolding workflows.

Permissions required: Service principal with Sites.FullControl.All via Microsoft Graph.

What Demiton does not touch: Demiton does not modify document content, does not change user permissions directly, and does not access documents outside the group memberships of the requesting user.

Next steps

Connecting a System - step-by-step wizard for setting up the connector
Dropbox - alternative document store connector
MCP Server - query SharePoint documents through Claude once connected
Connect your operation - talk to us about scoping a Connected deployment

Frequently asked questions

What does the Demiton SharePoint connector do?: The Demiton SharePoint connector reads documents and lists from Microsoft SharePoint via the Microsoft Graph API, and writes site collections, document libraries, and library permissions during project scaffolding workflows. Document retrieval is ACL-filtered per user - each user sees only the documents their Entra group memberships permit them to access. No user sees documents outside their authorised group.
What SharePoint data can I query through Claude?: With the SharePoint connector and the Demiton MCP server, you can query documents and lists from your connected SharePoint sites through Claude. Documents are indexed in Azure AI Search with per-user ACL enforcement, so your AI queries only surface what you are authorised to see. Typical use cases: project variations registers, safety incident logs, induction records, and contract documents.
What permissions does Demiton need for SharePoint?: Demiton requires a service principal with Sites.FullControl.All via Microsoft Graph. This broad permission is used only for administrative operations (site and library provisioning during project setup). Individual user data access is always mediated through Entra group membership - the service principal never reads data on behalf of users beyond what their groups permit.

Talk to the team

Tell us what you run - your ERP, field, payroll and document systems - and we will show you the registers Demiton would keep current from them, on your data, in a 30-minute call.

Book a 30-minute call Start free