---
warning: DO NOT CHANGE THIS MANUALLY, THIS IS GENERATED BY https://github.com/duckdb/community-extensions repository, check README there
title: sharepoint
excerpt: |
DuckDB Community Extensions
SharePoint and OneDrive in SQL -- files (sharepoint://), Excel workbooks, SharePoint lists, search and change feeds
extension:
name: sharepoint
version: 2026.11.03
description: SharePoint and OneDrive in SQL -- files (sharepoint://), Excel workbooks, SharePoint lists, search and change feeds
language: C++
build: cmake
license: MIT
# wasm: HTTPS calls to Microsoft Graph plus a loopback redirect server for
# interactive OAuth -- neither works in a browser sandbox, and a
# wasm side-module defers symbol resolution to load time, so it would build
# green and then fail to LOAD.
# mingw: vcpkg's OpenSSL port is fragile there; sibling extensions skip it.
excluded_platforms: "windows_amd64_mingw;wasm_mvp;wasm_eh;wasm_threads"
maintainers:
- jrosskopf
- sipemu
repo:
github: DataZooDE/duckdb-sharepoint
ref: 9704b2b63de18beb1666872409d298e0edcc0229
# ref builds against DuckDB 2.0 and variegata against v1.5.6
# (community-extensions scripts/build.py); a missing key falls back to ref.
# One commit serves both lines (duckdb-compat), so at release both are the
# same tagged SHA. No andium key: DuckDB 1.4.x is not supported.
variegata: 9704b2b63de18beb1666872409d298e0edcc0229
docs:
hello_world: |
-- App-only auth: an Entra ID app registration with the Sites.ReadWrite.All
-- APPLICATION permission and admin consent. Bind it to a document library
-- by DRIVE_ID (a Graph drive id) or SITE_ID.
CREATE SECRET sp (
TYPE sharepoint,
PROVIDER client_credentials,
TENANT_ID '00000000-0000-0000-0000-000000000000',
CLIENT_ID '11111111-1111-1111-1111-111111111111',
CLIENT_SECRET '...',
DRIVE_ID 'b!AbCdEf...'
);
-- Read a file by path -- one Graph call, no per-segment walk.
SELECT count(*) FROM 'sharepoint://Finance/2026/actuals.parquet';
-- Address by driveItem id instead -- stable across a rename.
SELECT * FROM read_csv('sharepoint://id:01ABCDEF23456789');
-- Glob a folder.
SELECT * FROM read_parquet('sharepoint://exports/parts/*.parquet');
-- Write a file. Sequential only; streamed in bounded memory.
COPY (SELECT * FROM t) TO 'sharepoint://reports/out.parquet' (FORMAT parquet);
extended_description: |
Registers a `sharepoint://` filesystem backed by Microsoft Graph, so any
DuckDB path expression can address a file in a SharePoint document library
or OneDrive with no download step. Because DuckDB dispatches file access
through its virtual filesystem, `read_parquet`, `read_csv`, `COPY`, `glob`
and DuckLake all inherit the scheme.
Unlike Google Drive, Graph addresses items by path, so there is no
path-resolution cache and no duplicate-name ambiguity. Reads are ranged
and served from a block cache. Writes stream through a Graph upload session
in bounded memory and the file appears when it is closed (Graph cannot
write at a byte offset, so positional writes raise rather than corrupt).
Beyond files: `read_excel_table` / `read_excel_range` read live Excel
workbooks and `COPY ... (FORMAT excel_table | excel_range)` writes them
back; `read_sharepoint_list` reads SharePoint lists as typed tables (WHERE
pushed down to Graph on indexed columns) and `COPY ... (FORMAT
sharepoint_list)` creates or updates items; `read_sharepoint_files` lists a
library with its metadata; `search_sharepoint` runs Microsoft Search;
`sharepoint_changes` returns the files changed since a token;
`?version=` reads an earlier version of a file.
Besides app-only client credentials or a certificate, a user can sign in
with `device_code` or `authorization_code`. Also registers the
scheme-generic `write_blob`, `remove_file`, `move_file` and `file_size` SQL
functions, which work for any filesystem DuckDB can reach.
This is **SharePoint / OneDrive via Microsoft Graph**, not Azure Blob
Storage — a different product with a different API. For `az://`/`abfss://`
containers use the `azure` extension.
extension_star_count: 3
extension_star_count_pretty: 3
extension_download_count: 680
extension_download_count_pretty: 680
image: '/images/community_extensions/social_preview/preview_community_extension_sharepoint.png'
layout: community_extension_doc
---
### Compatibility Matrix
This table covers all DuckDB releases that have not reached [end-of-life](https://duckdb.org/release_calendar), including LTS releases, and shows the 2 most recent patch releases of each. Older patch releases are not listed, but the extension may be available for them as well.
| Platform | 1.4.4 | 1.4.5 | 1.5.5 | 1.5.6 | 2.0.0 |
| :--- | :---: | :---: | :---: | :---: | :---: |
| Linux AMD64 | ❌ | ❌ | ❌ | ✅ | ✅ |
| Linux ARM64 | ❌ | ❌ | ❌ | ✅ | ✅ |
| macOS AMD64 | ❌ | ❌ | ❌ | ❌ | ✅ |
| macOS ARM64 | ❌ | ❌ | ❌ | ✅ | ✅ |
| Windows AMD64 | ❌ | ❌ | ❌ | ✅ | ✅ |
| Windows ARM64 | ❌ | ❌ | ❌ | ❌ | ❌ |
| WebAssembly | ❌ | ❌ | ❌ | ❌ | ❌ |
### Installing and Loading
```sql
INSTALL {{ page.extension.name }} FROM community;
LOAD {{ page.extension.name }};
```
{% if page.docs.hello_world %}
### Example
```sql
{{ page.docs.hello_world }}```
{% endif %}
{% if page.docs.extended_description %}
### About {{ page.extension.name }}
{{ page.docs.extended_description }}
{% endif %}
### Added Functions
| function_name | function_type | description | comment | examples |
|------------------------|---------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------|-------------------------------------------------------------------------------------------------------------------------------------------------------|
| file_size | scalar | Byte length of the file at `path`, or NULL if it does not exist. Reads only metadata -- unlike read_blob, which downloads the body. | NULL | [SELECT file_size('data/part.parquet')] |
| move_file | scalar | Rename/move `source` to `target`, returning true on success and raising on failure. Both paths must live on the SAME filesystem -- this is a rename, not a copy. Its main use is publishing a fully-written temporary file under its final name. | NULL | [SELECT move_file('staging/part.tmp', 'data/part.parquet')] |
| read_excel_range | table | Read a range of an .xlsx in SharePoint / OneDrive, live through the Graph workbook API: 'Sheet!A1:F200', or a sheet name for its used range. The first row is the header unless header := false. all_varchar := true reads every column as text. | NULL | [SELECT * FROM read_excel_range('Finance/plan.xlsx', 'Input!A1:F200'), SELECT * FROM read_excel_range('Finance/plan.xlsx', 'Input', header := false)] |
| read_excel_table | table | Read a named Excel table from an .xlsx in SharePoint / OneDrive, live through the Graph workbook API: the header row gives the column names, the values and number formats the types (dates included). The path is a sharepoint:// path (the scheme may be left out) or id:. all_varchar := true reads every column as text. | NULL | [SELECT * FROM read_excel_table('Finance/plan.xlsx', 'Sales')] |
| read_sharepoint_files | table | A document library's files and their metadata, one row per file matching a sharepoint:// path or glob: path, name, size, created/modified and by whom, content type, id, web URL, then the library's own columns, typed as read_sharepoint_list types a list's. | NULL | [SELECT name, size, modified_by FROM read_sharepoint_files('sharepoint://Finance/**/*.xlsx')] |
| read_sharepoint_list | table | Read a SharePoint list as a table through Microsoft Graph: one row per item, one typed column per list column (named by its display name), plus id, created and modified. The list is named by its name or as id:; it is on the secret's site unless site := names another ('Sales', 'teams/Ops', or a Graph site id). Lookup and person columns give their item id as _id. | NULL | [SELECT * FROM read_sharepoint_list('Orders'), SELECT * FROM read_sharepoint_list('Orders', site := 'Sales')] |
| remove_file | scalar | Delete the file at `path`, returning true if it existed and was removed and false if it did not exist. Dispatches on the path's scheme through DuckDB's virtual filesystem, so it works for local paths and for every remote scheme an extension registers (gdrive://, sharepoint://, s3://, ...). Remote stores may keep a deleted file in a trash or recycle bin (see the extension's *_permanent_delete setting). Folders are refused. Errors other than not-found are raised, not returned as false. | NULL | [SELECT remove_file('reports/old.parquet')] |
| search_sharepoint | table | Microsoft Search across the tenant's files, list items and sites (types := ['driveItem', 'listItem', 'site']), as rows: type, name, a sharepoint:// path for a file in the secret's drive, id, web URL, drive, site and list ids, size, times, who modified it, the hit summary and its rank. App-only search finds the tenant's region itself, or takes region := 'EUR'. | NULL | [SELECT name, path, modified FROM search_sharepoint('quarterly forecast'), SELECT name, web_url FROM search_sharepoint('Sales', types := ['site'])] |
| sharepoint_changes | table | What changed under a sharepoint:// folder since a token (Graph's delta query): one row per file or folder added or changed (_change 'upsert') or deleted ('delete'), then one 'checkpoint' row whose token column is the token for next time. Without a token: everything (a full listing); token := 'latest': nothing, just a token from now on. | NULL | [SELECT * FROM sharepoint_changes('sharepoint://Finance/'), SELECT * FROM sharepoint_changes('sharepoint://Finance/', token := 'aTE09...')] |
| sharepoint_reset_stats | table | Zero the counters reported by sharepoint_stats(). Process-wide: it disturbs a concurrent measurement in another connection. | NULL | [CALL sharepoint_reset_stats()] |
| sharepoint_stats | table | Microsoft Graph call counters, one row per metric: token_request, stat, read_range, list_page, upload_put, upload_session, upload_chunk, upload_commit, upload_abort, delete, move, create_folder (calls by kind), retries, throttled, bytes_read, bytes_written, meta_cache_hits (opens served from the sharepoint_immutable_prefixes metadata cache), auth_refresh (401s answered by a fresh token), workbook (Excel workbook API calls), list (SharePoint site/list/item pages) and upload_buffer_peak (a HIGH-WATER MARK: the most bytes one file being written held in memory). Process-wide; reset with sharepoint_reset_stats() to measure what one query costs. | NULL | [SELECT * FROM sharepoint_stats()] |
| sharepoint_version | scalar | Returns the version of the loaded sharepoint extension. | NULL | [SELECT sharepoint_version()] |
| sharepoint_versions | table | A SharePoint file's version history, newest first: the version label, a path that reads that version (sharepoint://...?version=