Skip to main content
There are several distinct Microsoft integrations. Choose the one that matches where you want Claude to run:
  • Anthropic’s Claude for Microsoft 365 add-in puts Claude directly inside Excel, PowerPoint, and Word. An organization admin deploys one manifest and employees just open Claude, with usage billed to the organization’s AI Reserve account.
  • GPT for Work is a separate third-party add-in for Word and Excel. It accepts an AI Reserve API key and an OpenAI-compatible endpoint.
  • Office Scripts and Power Automate are do-it-yourself automation options that call the OpenAI-compatible API.
  • Microsoft Copilot is Microsoft’s own product. Its model connection cannot be redirected to AI Reserve.
  • The Microsoft 365 connector lets Claude access Outlook, SharePoint, OneDrive, and Teams. It does not install Claude inside Office.

Anthropic’s Claude for Microsoft 365 add-in

Anthropic’s official Claude for Microsoft 365 add-in runs inside Excel, PowerPoint, and Word. AI Reserve organization admins can generate a ready-to-deploy manifest from the Office deployment page. Each download automatically creates a dedicated organization API key and embeds it in the XML. Employees just open Claude; they do not need to paste a key or complete a Microsoft Entra sign-in or consent flow for the gateway connection. Usage is shared at the organization level, not attributed to individual employee identities, and follows the organization’s normal AI Reserve billing and policies. Earlier download keys stay active until an administrator explicitly revokes them in the selected organization’s API Keys page, linked from the deployment page. Downloading again does not rotate or revoke an existing deployment’s key.

Deploy the default organization-credential manifest

You need an AI Reserve enterprise administrator for the organization (or a super administrator who selects it), Microsoft 365 administrator access to deploy the add-in, and Office licenses for the assigned users. The AI Reserve environment must have GATEWAY_BASE_URL configured. Microsoft tenant verification and OFFICE_ENTRA_* configuration are not prerequisites for this download.
1

Choose your AI Reserve organization

Open the Office deployment page. Enterprise administrators are scoped to their organization; super administrators select the organization whose account will cover usage.
2

Download the manifest

Select Download Office manifest. AI Reserve creates a dedicated organization key automatically and returns the configured XML. Keep version 1.0.0.2 for a first deployment. When replacing an installed add-in, use a version higher than its installed version: Microsoft 365 caches add-ins by ID and version.
3

Deploy from Microsoft 365 Admin Center

Open Settings → Integrated apps → Upload custom apps, choose Office Add-in, upload the XML, and assign a pilot group or the whole organization. Microsoft says propagation can take up to 24 hours.
4

Open Claude and verify usage

After deployment, open Home → Add-ins in Excel, PowerPoint, or Word and launch Claude. The add-in connects automatically. Test a workbook edit, a document edit, and a presentation edit, then confirm the selected organization’s usage and charges before broad deployment.
The XML contains an organization credential: treat it like an API key and share it only with trusted deployment administrators and assigned users. To replace a credential, deploy a new download with a higher version, verify it works, then revoke the old key in API Keys. Revoking a key stops deployments that still use it.
One manifest covers Excel, PowerPoint, and Word. Outlook uses a different Microsoft MailApp schema and therefore needs a separate Anthropic manifest; the AI Reserve deployment page intentionally does not generate or deploy the Outlook add-in.

What the default manifest configures

The page starts from Anthropic’s current canonical manifest and uses its documented static gateway configuration:
  • gateway_url=https://api.aireserve.com (or the configured gateway for your environment)
  • gateway_api_format=anthropic
  • gateway_token=<dedicated-organization-key> in the task-pane URL’s # fragment, not its query string
  • gateway_auth_header=authorization
  • auto_connect=1
  • an Office client marker for usage attribution
The gateway URL uses the host root because the add-in speaks Anthropic’s native /v1/messages format. Fragment placement does not make the XML secret-free: anyone with the XML can read its credential. The default download does not enable Entra SSO, employee identity attribution, bootstrap, or automatic MCP registration. Anthropic’s static gateway mode requires no Entra consent.
This admin manifest configures the add-in but is not a network policy. Organizations that require a hard route through AI Reserve should also enforce approved egress and identity at their network boundary.

Optional legacy Entra identity setup

The deployment page retains Optional Microsoft identity setup for existing Entra-based integrations. It is independent of the default organization-credential download: connecting a tenant, granting consent, or configuring the settings below does not switch the downloaded XML to employee sign-in. The current default download does not generate an Entra-authenticated manifest. In the separate legacy flow, an Entra-configured manifest requests an employee’s Microsoft access token as the gateway credential and uses bootstrap_url=https://api.aireserve.com/office/bootstrap. Its bootstrap response can register AI Reserve’s remote MCP server, which each employee authorizes separately through OAuth; inference credentials never gain MCP management permissions. These identity and MCP behaviors do not apply to the default static credential mode. The following technical setup and acceptance checks are only for operators maintaining that separate Entra flow.

Platform setup: Entra application metadata

AI Reserve operators configure one multitenant application in a company-owned Microsoft Entra workforce tenant. Do not host the production registration in an expiring developer sandbox. No Microsoft client secret, employee password, or provider key is needed for this user-token verification flow. In Entra ID → App registrations → New registration, choose accounts in any organizational directory. For the simplest setup, use one registration for the Office client and its resource API:
  • Copy Application (client) ID from Overview, not Object ID or Directory (tenant) ID.
  • Under Expose an API, set the Application ID URI to api://<application-id> and add the admin-consent-enabled delegated scope access_as_user.
  • Configure the resource API to issue v2 access tokens (api.requestedAccessTokenVersion: 2 in the Microsoft Graph-format application manifest).
  • Under API permissions, add that exposed scope as a delegated permission.
  • Under Authentication → Single-page application, register brk-multihub://pivot.claude.ai and https://pivot.claude.ai/msal-redirect.html.
  • Register the admin-consent return URL ${APP_URL}/connect/microsoft-office under Web, matching the web service’s deployed APP_URL exactly. Production deploys use https://portal.aireserve.com/connect/microsoft-office. UAT requires its own exact portal return URL.
  • To enable Connect with Microsoft (the one-click admin sign-in that derives and verifies the tenant), register ${APP_URL}/api/office/signin/callback for each environment under Mobile and desktop applications, and turn on Allow public client flows under Authentication → Advanced settings. The flow is a secretless server-side authorization-code + PKCE exchange, so a Web redirect (which expects a client secret) or an SPA redirect (cross-origin only) will be rejected by Microsoft. Then set OFFICE_ENTRA_SIGNIN_ENABLED=true in that environment’s deploy-config/<environment>.env. The sign-in targets the /organizations endpoint, so only workforce (Entra) tenants — not personal Microsoft accounts — can complete it. Leave the flag unset to keep manual entry.
Set these public configuration values, not Secret Manager credentials, in apps/web/deploy-config/<environment>.env; both the web and gateway deploy scripts read this file:
Microsoft v2 access tokens use the resource API’s bare GUID as aud, while consent and the Office manifest request api://<audience-guid>/access_as_user. Never put api:// in OFFICE_ENTRA_AUDIENCE. With separate client and API registrations, CLIENT_ID identifies the calling app (azp), and AUDIENCE identifies the API (aud); the generated scope uses the API’s GUID. This setup requires the resource API’s default api://<audience-guid> Application ID URI; custom resource URIs are not supported by these settings. Before activation, verify migration 0082 is applied, deploy both services through the normal environment deployment process, and confirm the manifest’s gateway and bootstrap URLs target that same environment. Keep all three settings empty until registration is ready. Pre-create pilot users in the correct AI Reserve organization with matching Microsoft sign-in emails; validate real sign-in, Office edits, usage attribution, token renewal, and policy enforcement before production rollout. See Microsoft’s token claims reference and Anthropic’s third-party Office deployment guide.

Legacy Entra pilot acceptance

An Entra application showing Activated, or a successful default manifest download, does not validate the separate Entra integration. For an independently configured Entra-authenticated manifest, first confirm:
  • The configured web and gateway revisions are serving traffic in the same environment.
  • The pilot tenant is ownership-verified and the employee has an active AI Reserve account in that organization, with a matching Microsoft sign-in email and usable balance.
  • Microsoft 365 licenses or a trial provide the Office hosts; an Azure/Entra account alone does not license Excel, Word, or PowerPoint.
  • Real Microsoft sign-in yields bootstrap 200 and a non-empty allowed model list.
  • A synthetic workbook edit succeeds; repeat with a document and presentation before advertising all three hosts. Verify the resulting employee, organization, and cost attribution.
  • Token renewal works and blocked models/integrations or exhausted spending allowances fail as intended.
  • AI Reserve MCP, if enabled for the pilot, authorizes separately through OAuth.
The admin-consent return message is informational, not proof of consent or tenant ownership: its query parameters can be edited by a browser user. Confirm consent in Microsoft Entra and validate it by signing in to the installed add-in. Publisher verification is a separate Microsoft process recommended before wider customer rollout; customer consent/security policies may require it.

Manage legacy tenant connections

Under Optional Microsoft identity setup on the Office deployment page, use Connect with Microsoft when configured to derive and verify the directory from an administrator’s sign-in. Alternatively, enter the Directory (tenant) ID manually. An authenticated enterprise administrator’s connection is activated immediately, and AI Reserve emails the organization’s enterprise administrators so an unexpected connection can be reviewed and disconnected. For the legacy identity flow, select Grant consent after connecting the tenant and have its Microsoft administrator approve AI Reserve’s application. Validate that flow with its separately configured Entra manifest and the checks above—not with the default organization-credential download.

Word and Excel — GPT for Work add-ins

GPT for Excel and GPT for Word (Talarian’s GPT for Work suite) are the leading Office add-ins that connect to any OpenAI-compatible endpoint. A space owner or admin configures the endpoint once in the GPT for Work dashboard — Custom API endpoints in the sidebar — and every user in the space gets the gateway models. Custom endpoints require their Business or Enterprise plan or pay-as-you-go pricing. There are two endpoint types, on separate tabs:
  • Bulk models (Excel and Word) — the Chat Completions path, used by bulk prompting and the spreadsheet functions. Add an OpenAI-compatible endpoint (Chat Completions API) with:
    • Endpoint URL: https://api.aireserve.com — host root, no /v1 (unlike most tools in these guides: GPT for Work appends the /v1/models and /v1/chat/completions resource paths itself, so a /v1 suffix here would double up).
    • API key: your aireserve_api_… key.
    • Display name (optional): e.g. AI Reserve — prefixed to model names in the model switcher (custom/ by default).
    Click Check — the add-in validates the connection — then Save. The switcher then lists the gateway’s full catalog under Connected models (/v1/models is the discovery call — it excludes client-exclusive models but does include consent-gated ones, so a model your org hasn’t opted into will list here and refuse at call time with the reason).
  • Agent models (Excel only) — the agent sidebar, which drives the workbook. Add an OpenAI-compatible endpoint (Responses API) with the same Endpoint URL and key, plus a model ID copied from the gateway catalog. GPT for Work requires the endpoint to serve /v1/responses over public HTTPS and the model to have at least a 32K-token context — the gateway serves the Responses format for every model, and the flagship models all clear the context bar.
Why this just works. GPT for Work runs inside Office’s embedded browser, so it calls the endpoint straight from the client — which is why it requires public HTTPS and CORS support. The gateway has both (it answers cross-origin browser requests on /v1/models, /v1/chat/completions, and /v1/responses), so both endpoint types validate as-is. No proxy, no relay.
GPT for Work covers Word and Excel only. There is no PowerPoint add-in in the suite, and we haven’t found a comparably mature PowerPoint add-in with a custom-endpoint field — only small open-source projects. For slides, the practical route today is drafting in Word or chat and pasting across.

Excel — Office Scripts

Office Scripts can call the gateway directly with fetch (external calls are supported when the script runs in the Excel application). This script reads the prompt from A1 and writes the answer to B1:
Office Scripts have no secret store — the key sits in the script text, and anyone who can open or edit the workbook can read it. Mint a dedicated, spend-capped key for workbook scripts and rotate it if the file is shared.
Two boundaries, both Microsoft’s: external calls fail when a script runs through Power Automate (fetch is not defined at runtime — use the Power Automate path below instead), and scripts stored on SharePoint can’t make external calls at all. Tenant admins can also block external calls outright, so if the snippet fails on a managed machine, ask IT before debugging.

Power Automate

For flows, skip Office Scripts and call the gateway from the flow itself — that’s Microsoft’s own guidance. Add an HTTP action: Pull the reply out with the expression body('HTTP')?['choices']?[0]?['message']?['content'] and hand it to any Office connector — write it to Excel rows, draft Outlook mail, fill a Word template. HTTP actions are premium-class connectors in Power Automate, so the flow owner needs a Power Automate Premium license. Store the key in a secured environment variable or Azure Key Vault rather than inline.

Microsoft 365 connector — separate from the add-in

Claude’s Microsoft 365 connector connects Claude to Outlook, SharePoint, OneDrive, and Teams through Microsoft Graph. It is useful when Claude needs to search or act on organization data, but it does not put a Claude task pane inside Excel, PowerPoint, or Word. The connector has its own Entra service principals, admin consent, and permissions. It does not use the Office XML manifest, the GPT for Work API key, Office Scripts, or Power Automate configuration described above. Deploy the official add-in and the connector independently if your organization needs both experiences.

Microsoft Copilot — the boundary

Microsoft 365 Copilot (now named simply Microsoft Copilot) cannot be pointed at a third-party endpoint. Its models are chosen, hosted, and operated by Microsoft — Azure OpenAI Service, plus Anthropic and OpenAI models under Microsoft’s subprocessor arrangements — and the product has no base-URL or API-key setting anywhere, so there is nothing to configure. A gateway can’t serve a request Copilot never sends. Microsoft’s extensibility story — custom engine agents via Copilot Studio or the Microsoft 365 Agents SDK — lets an organization bring its own agent (and behind it, its own models) into the Copilot UI. That’s a build-and-host-a-bot surface, not a paste-a-key setting, and it’s out of scope for this guide.
The default official Claude add-in deployment uses a shared organization key and is attributed to Claude for Office in usage analytics, not to individual employee identities. Each manifest download creates its own dedicated key. For the other key-based integrations, mint a dedicated key per surface (one for the GPT for Work space, one per flow) to keep spend and revocation separate.