- Anthropic’s Claude for Microsoft 365 add-in puts Claude directly inside Excel, PowerPoint, and Word. An organization admin deploys one manifest and employees just open Claude, with usage billed to the organization’s AI Reserve account.
- GPT for Work is a separate third-party add-in for Word and Excel. It accepts an AI Reserve API key and an OpenAI-compatible endpoint.
- Office Scripts and Power Automate are do-it-yourself automation options that call the OpenAI-compatible API.
- Microsoft Copilot is Microsoft’s own product. Its model connection cannot be redirected to AI Reserve.
- The Microsoft 365 connector lets Claude access Outlook, SharePoint, OneDrive, and Teams. It does not install Claude inside Office.
Anthropic’s Claude for Microsoft 365 add-in
Anthropic’s official Claude for Microsoft 365 add-in runs inside Excel, PowerPoint, and Word. AI Reserve organization admins can generate a ready-to-deploy manifest from the Office deployment page. Each download automatically creates a dedicated organization API key and embeds it in the XML. Employees just open Claude; they do not need to paste a key or complete a Microsoft Entra sign-in or consent flow for the gateway connection. Usage is shared at the organization level, not attributed to individual employee identities, and follows the organization’s normal AI Reserve billing and policies. Earlier download keys stay active until an administrator explicitly revokes them in the selected organization’s API Keys page, linked from the deployment page. Downloading again does not rotate or revoke an existing deployment’s key.Deploy the default organization-credential manifest
You need an AI Reserve enterprise administrator for the organization (or a super administrator who selects it), Microsoft 365 administrator access to deploy the add-in, and Office licenses for the assigned users. The AI Reserve environment must haveGATEWAY_BASE_URL configured. Microsoft tenant verification and
OFFICE_ENTRA_* configuration are not prerequisites for this download.
1
Choose your AI Reserve organization
Open the Office deployment page. Enterprise administrators
are scoped to their organization; super administrators select the organization whose account will cover usage.
2
Download the manifest
Select Download Office manifest. AI Reserve creates a dedicated organization key automatically and returns the
configured XML. Keep version
1.0.0.2 for a first deployment. When replacing an installed add-in, use a version
higher than its installed version: Microsoft 365 caches add-ins by ID and version.3
Deploy from Microsoft 365 Admin Center
Open Settings → Integrated apps → Upload custom apps, choose Office Add-in, upload the XML, and assign a
pilot group or the whole organization. Microsoft says propagation can take up to 24 hours.
4
Open Claude and verify usage
After deployment, open Home → Add-ins in Excel, PowerPoint, or Word and launch Claude. The add-in connects
automatically. Test a workbook edit, a document edit, and a presentation edit, then confirm the selected
organization’s usage and charges before broad deployment.
The XML contains an organization credential: treat it like an API key and share it only with trusted deployment
administrators and assigned users. To replace a credential, deploy a new download with a higher version, verify it
works, then revoke the old key in API Keys. Revoking a key stops deployments that still use it.
MailApp schema and therefore needs a separate Anthropic manifest;
the AI Reserve deployment page intentionally does not generate or deploy the
Outlook add-in.
What the default manifest configures
The page starts from Anthropic’s current canonical manifest and uses its documented static gateway configuration:gateway_url=https://api.aireserve.com(or the configured gateway for your environment)gateway_api_format=anthropicgateway_token=<dedicated-organization-key>in the task-pane URL’s#fragment, not its query stringgateway_auth_header=authorizationauto_connect=1- an Office client marker for usage attribution
/v1/messages format. Fragment placement does not make the XML secret-free: anyone
with the XML can read its credential. The default download does not enable
Entra SSO, employee identity attribution, bootstrap, or automatic MCP registration.
Anthropic’s static gateway mode requires no Entra consent.
This admin manifest configures the add-in but is not a network policy. Organizations that require a hard route through
AI Reserve should also enforce approved egress and identity at their network boundary.
Optional legacy Entra identity setup
The deployment page retains Optional Microsoft identity setup for existing Entra-based integrations. It is independent of the default organization-credential download: connecting a tenant, granting consent, or configuring the settings below does not switch the downloaded XML to employee sign-in. The current default download does not generate an Entra-authenticated manifest. In the separate legacy flow, an Entra-configured manifest requests an employee’s Microsoft access token as the gateway credential and usesbootstrap_url=https://api.aireserve.com/office/bootstrap. Its bootstrap response
can register AI Reserve’s remote MCP server, which each employee authorizes
separately through OAuth; inference credentials never gain MCP management
permissions. These identity and MCP behaviors do not apply to the default static
credential mode.
The following technical setup and acceptance checks are only for operators
maintaining that separate Entra flow.
Platform setup: Entra application metadata
AI Reserve operators configure one multitenant application in a company-owned Microsoft Entra workforce tenant. Do not host the production registration in an expiring developer sandbox. No Microsoft client secret, employee password, or provider key is needed for this user-token verification flow. In Entra ID → App registrations → New registration, choose accounts in any organizational directory. For the simplest setup, use one registration for the Office client and its resource API:- Copy Application (client) ID from Overview, not Object ID or Directory (tenant) ID.
- Under Expose an API, set the Application ID URI to
api://<application-id>and add the admin-consent-enabled delegated scopeaccess_as_user. - Configure the resource API to issue v2 access tokens (
api.requestedAccessTokenVersion: 2in the Microsoft Graph-format application manifest). - Under API permissions, add that exposed scope as a delegated permission.
- Under Authentication → Single-page application, register
brk-multihub://pivot.claude.aiandhttps://pivot.claude.ai/msal-redirect.html. - Register the admin-consent return URL
${APP_URL}/connect/microsoft-officeunder Web, matching the web service’s deployedAPP_URLexactly. Production deploys usehttps://portal.aireserve.com/connect/microsoft-office. UAT requires its own exact portal return URL. - To enable Connect with Microsoft (the one-click admin sign-in that derives
and verifies the tenant), register
${APP_URL}/api/office/signin/callbackfor each environment under Mobile and desktop applications, and turn on Allow public client flows under Authentication → Advanced settings. The flow is a secretless server-side authorization-code + PKCE exchange, so a Web redirect (which expects a client secret) or an SPA redirect (cross-origin only) will be rejected by Microsoft. Then setOFFICE_ENTRA_SIGNIN_ENABLED=truein that environment’sdeploy-config/<environment>.env. The sign-in targets the/organizationsendpoint, so only workforce (Entra) tenants — not personal Microsoft accounts — can complete it. Leave the flag unset to keep manual entry.
apps/web/deploy-config/<environment>.env; both the web and gateway deploy scripts
read this file:
aud, while
consent and the Office manifest request api://<audience-guid>/access_as_user.
Never put api:// in OFFICE_ENTRA_AUDIENCE. With separate client and API
registrations, CLIENT_ID identifies the calling app (azp), and AUDIENCE
identifies the API (aud); the generated scope uses the API’s GUID. This setup
requires the resource API’s default api://<audience-guid> Application ID URI;
custom resource URIs are not supported by these settings.
Before activation, verify migration 0082 is applied, deploy both services through
the normal environment deployment process, and confirm the manifest’s gateway and
bootstrap URLs target that same environment. Keep all three settings empty until
registration is ready. Pre-create pilot users in the correct AI Reserve organization
with matching Microsoft sign-in emails; validate real sign-in, Office edits,
usage attribution, token renewal, and policy enforcement before production rollout.
See Microsoft’s token claims reference
and Anthropic’s third-party Office deployment guide.
Legacy Entra pilot acceptance
An Entra application showing Activated, or a successful default manifest download, does not validate the separate Entra integration. For an independently configured Entra-authenticated manifest, first confirm:- The configured web and gateway revisions are serving traffic in the same environment.
- The pilot tenant is ownership-verified and the employee has an active AI Reserve account in that organization, with a matching Microsoft sign-in email and usable balance.
- Microsoft 365 licenses or a trial provide the Office hosts; an Azure/Entra account alone does not license Excel, Word, or PowerPoint.
- Real Microsoft sign-in yields bootstrap 200 and a non-empty allowed model list.
- A synthetic workbook edit succeeds; repeat with a document and presentation before advertising all three hosts. Verify the resulting employee, organization, and cost attribution.
- Token renewal works and blocked models/integrations or exhausted spending allowances fail as intended.
- AI Reserve MCP, if enabled for the pilot, authorizes separately through OAuth.
Manage legacy tenant connections
Under Optional Microsoft identity setup on the Office deployment page, use Connect with Microsoft when configured to derive and verify the directory from an administrator’s sign-in. Alternatively, enter the Directory (tenant) ID manually. An authenticated enterprise administrator’s connection is activated immediately, and AI Reserve emails the organization’s enterprise administrators so an unexpected connection can be reviewed and disconnected. For the legacy identity flow, select Grant consent after connecting the tenant and have its Microsoft administrator approve AI Reserve’s application. Validate that flow with its separately configured Entra manifest and the checks above—not with the default organization-credential download.Word and Excel — GPT for Work add-ins
GPT for Excel and GPT for Word (Talarian’s GPT for Work suite) are the leading Office add-ins that connect to any OpenAI-compatible endpoint. A space owner or admin configures the endpoint once in the GPT for Work dashboard — Custom API endpoints in the sidebar — and every user in the space gets the gateway models. Custom endpoints require their Business or Enterprise plan or pay-as-you-go pricing. There are two endpoint types, on separate tabs:-
Bulk models (Excel and Word) — the Chat Completions path, used by bulk
prompting and the spreadsheet functions. Add an OpenAI-compatible endpoint
(Chat Completions API) with:
- Endpoint URL:
https://api.aireserve.com— host root, no/v1(unlike most tools in these guides: GPT for Work appends the/v1/modelsand/v1/chat/completionsresource paths itself, so a/v1suffix here would double up). - API key: your
aireserve_api_…key. - Display name (optional): e.g.
AI Reserve— prefixed to model names in the model switcher (custom/by default).
/v1/modelsis the discovery call — it excludes client-exclusive models but does include consent-gated ones, so a model your org hasn’t opted into will list here and refuse at call time with the reason). - Endpoint URL:
-
Agent models (Excel only) — the agent sidebar, which drives the
workbook. Add an OpenAI-compatible endpoint (Responses API) with the
same Endpoint URL and key, plus a model ID copied from the gateway catalog.
GPT for Work requires the endpoint to serve
/v1/responsesover public HTTPS and the model to have at least a 32K-token context — the gateway serves the Responses format for every model, and the flagship models all clear the context bar.
Why this just works. GPT for Work runs inside Office’s embedded browser, so it calls the endpoint straight from
the client — which is why it requires public HTTPS and CORS support. The gateway has both (it answers cross-origin
browser requests on
/v1/models, /v1/chat/completions, and /v1/responses), so both endpoint types validate as-is.
No proxy, no relay.Excel — Office Scripts
Office Scripts can call the gateway directly withfetch
(external calls are supported
when the script runs in the Excel application). This script reads the prompt
from A1 and writes the answer to B1:
fetch is not defined at runtime — use the Power Automate path below
instead), and scripts stored on SharePoint can’t make external calls at all.
Tenant admins can also block external calls outright, so if the snippet fails
on a managed machine, ask IT before debugging.
Power Automate
For flows, skip Office Scripts and call the gateway from the flow itself — that’s Microsoft’s own guidance. Add an HTTP action:
Pull the reply out with the expression
body('HTTP')?['choices']?[0]?['message']?['content'] and hand it to any
Office connector — write it to Excel rows, draft Outlook mail, fill a Word
template. HTTP actions are
premium-class connectors in Power Automate,
so the flow owner needs a
Power Automate Premium license.
Store the key in a secured environment variable or Azure Key Vault rather
than inline.
Microsoft 365 connector — separate from the add-in
Claude’s Microsoft 365 connector connects Claude to Outlook, SharePoint, OneDrive, and Teams through Microsoft Graph. It is useful when Claude needs to search or act on organization data, but it does not put a Claude task pane inside Excel, PowerPoint, or Word. The connector has its own Entra service principals, admin consent, and permissions. It does not use the Office XML manifest, the GPT for Work API key, Office Scripts, or Power Automate configuration described above. Deploy the official add-in and the connector independently if your organization needs both experiences.Microsoft Copilot — the boundary
Microsoft 365 Copilot (now named simply Microsoft Copilot) cannot be pointed at a third-party endpoint. Its models are chosen, hosted, and operated by Microsoft — Azure OpenAI Service, plus Anthropic and OpenAI models under Microsoft’s subprocessor arrangements — and the product has no base-URL or API-key setting anywhere, so there is nothing to configure. A gateway can’t serve a request Copilot never sends. Microsoft’s extensibility story — custom engine agents via Copilot Studio or the Microsoft 365 Agents SDK — lets an organization bring its own agent (and behind it, its own models) into the Copilot UI. That’s a build-and-host-a-bot surface, not a paste-a-key setting, and it’s out of scope for this guide.The default official Claude add-in deployment uses a shared organization key and is attributed to Claude for Office in usage analytics, not to individual employee identities. Each manifest download creates its own dedicated key. For the other key-based integrations, mint a dedicated key per surface (one for the GPT for Work space, one per flow) to keep spend and revocation separate.