Cyberduck Mountain Duck CLI

Version 55 (modified by dkocher, on Jan 8, 2021 at 8:51:58 PM) (diff)


Download Mountain Duck as an alternative to OneDrive Client.

Cyberduck Help / Howto / Microsoft OneDrive

Support for Microsoft OneDrive. Connect to

  • OneDrive
  • SharePoint Online


Microsoft Graph, OneDrive, and SharePoint support using a standard OAuth2 authorization flow.

  1. OneDrive uses OAuth 2 for authentication with When opening a connection, a web browser window is opened to grant access to OneDrive for Cyberduck.

  1. Copy the authorization code into the login prompt in Cyberduck to complete authentication. Subsequent connections will not require authorization, unless the refresh token itself is expired due to inactivity.

Multiple Accounts

You can connect to multiple accounts at the same time. Create a new bookmark for every account and run through the OAuth flow. Make sure to log out in your browser prior setting up a new bookmark to make sure the new bookmark is linked to a newly authenticated account.

OAuth Reset

If you have accidentally logged in with the wrong OneDrive Account or want to change the login of the OneDrive bookmark you can reset the OAuth token by deleting the entries related to https://Microsoft OneDrive (user) out of the Windows Credential Manager or on macOS out of Keychain.


All authentication codes expire after 90 days. If you get the error message Forbidden. The caller doesn't have permission to perform the action. [...]due to this known issue remove all entries that are related to Microsoft OneDrive and from Keychain or Windows credential manager. After that, you'll be prompted to reauthenticate.


This connection profile is bundled by default and connects to the endpoint Login with your personal or business account to when prompted to grant access to Cyberduck.

SharePoint Online

Refer to Microsoft Sharepoint SharePoint Online.

Which protocol to choose?

Allows access to Remarks Bundled by default
Microsoft OneDrive Your Drive, and shared files Works with your personal and business OneDrive Yes
Microsoft SharePoint All sites document libraries and accessible group document libraries

prior Cyberduck 7.8 / Mountain Duck 4.4: The default sites document libraries and accessible group document libraries
The connection profile is named Microsoft SharePoint Online in versions prior Cyberduck 7.8 / Mountain Duck 4.4 Yes
Microsoft SharePoint Site A single SharePoint Site which isn't listed within the Microsoft SharePoint profile Can't mount specific directories Yes
Microsoft SharePoint Document Library The default sites document libraries Does not allow access to groups

Only needed for versions prior Cyberduck 6.9 / Mountain Duck 2.7

Office 365 Deutschland

  1. Download the Microsoft Office 365 Deutschland OneDrive profile
  2. Use the Microsoft Office 365 Deutschland OneDrive profile and login with your * account to to connect to your OneDrive

Note: The separate Microsoft Cloud Deutschland won't be available anymore after 26. Oct 2021. For more information regarding the migration refer to this announcement article.

Cyberduck CLI

You can list the root contents of your Dropbox with Cyberduck CLI using

duck --list onedrive:/

Refer to the Cyberduck CLI documentation for more operations. For subsequent invocations make sure to include the --username parameter and set it to the email address registered with Google to allow the lookup of previously saved OAuth tokens.

You can search recursively for files fast without browsing folders first.

Create a shared link to make files available publicly. Choose File → Share….

Administrator Consent Required

Depending on the setup of your AAD you may need to perform several steps in order for you to be able to access your OneDrive. Please get in contact with your domain administrator for following steps.

Manually adding Cyberduck

Copy the link that corresponds to your used version, and send it to your domain administrator, this will add Cyberduck to the domain and all users are allowed to access Cyberduck in the future.

Automatically allow users to add Apps to the domain

If applicable and trusted you may set Users can consent to apps accessing company data on their behalf to Yes at the AAD Portal. This will allow users in the future to add apps without Admin-consent.

Admin consent requests (Preview)

There is a preview method of review application consent through the AAD Portal. Please enable Users can request admin consent to apps they are unable to consent to to Yes in the Enterprise applications - User settings. The domain administrator may now review all consents centrally at Admin consent requests (Preview)


There are some limitations that you should keep in mind while working with.

  • We've added support for Microsoft 365 China in Cyberduck 7.8 / Mountain Duck 4.4 but aren't able to verify if it works properly.
  • No interoperability with Microsoft 365 for US Government (other services may apply as well)

Attachments (3)

Download all attachments as: .zip