Persistent HTTP 500/502/503 from Microsoft Graph To Do endpoints for a personal MSA

song Xx 0 Reputation points
2026-11-13T07:30:24.47+00:00

Account: yy**@outlook.com (personal MSA, tenant 9188040d-6c67-4c5b-b112-36a304b66dad)

Client: Microsoft Graph Command Line Tools, client_id 14d82eec-204b-4c2f-b7e8-296a70dab67e

Flow: MSAL device code / auth code; scopes Tasks.ReadWrite User.Read

Symptom

GET /v1.0/me and /v1.0/me/todo/lists consistently return HTTP 500/502/503 with:

{"error":{"code":"UnknownError","message":""}}

Response header x-ms-ags-diagnostic: DataCenter Korea Central.

Token validity

The token is valid: unauthorized endpoints (e.g. /me/drive/root) return 401 immediately, and silent refresh succeeds.

Client behavior

The To Do web and mobile clients can open and display the account's lists and tasks.

The Windows client (2.178.8571.0) opens but remains in "Syncing..." indefinitely.

Already ruled out

  • Full re-authentication, re-consent, silent refresh, adding User.Read
  • Multiple DNS resolvers, multiple Graph frontend IPs, TLS 1.2/1.3, HTTP/1.1, curl and Node
  • The requests reach Microsoft's edge; responses carry Microsoft request IDs and x-ms-ags-diagnostic
  • 24 automated probes between 2026-11-13 02:42 and 04:45 UTC all returned 502/503/500

Request IDs

  • 9833f37f-0804-45f0-87f2-9864f36f5110
  • c143bbac-9054-4945-ad72-aa54e714c740
  • e96ee0f0-63a8-4ae8-8832-5c40ae6fc9e2
  • 54d72bb2-b7d6-4048-bc82-9a9378f803bb
  • b8b6394d-ea32-46c5-bccd-4498e482b049

Related reports

Ask

Please check and repair the To Do / Exchange backend provisioning for this account. The issue appears account-specific; the referenced reports indicate other personal and work accounts are unaffected, but I have not been able to test a second account. I can provide the To Do client session/user ID from its Help & Feedback panel if needed.

Microsoft 365 and Office | Microsoft To Do | For home
0 comments No comments

2 answers

Sort by: Newest
  1. Alvise Cervellati 7,070 Reputation points Independent Advisor
    2026-11-13T08:42:33.13+00:00

    Hi @song Xx

    Microsoft 365 is currently experiencing service issues. You can check for updates on the Microsoft service status page.

    Elvis

    Was this answer helpful?

    0 comments No comments

  2. AI answer

    2026-11-13T07:31:38.0966667+00:00

    Escalate this through Microsoft’s personal-account support channel and include the Graph correlation data plus the To Do Session and User ID, because account/backend repair cannot be performed from Microsoft Q&A.

    Open the support case

    1. In Windows, open Get Help while signed in with the affected personal Microsoft account.
    2. Enter: Microsoft To Do personal account — persistent Graph 500/502/503 and Windows sync failure.
    3. If automated troubleshooting does not resolve it, select Contact Support.
    4. Choose the closest available Microsoft To Do, Outlook.com, or Microsoft account product category, select Confirm, and request chat or a callback. Contact options vary by product, time, and subscription.^1^
    5. In To Do for Windows, select profile picture → Settings → Copy Session and User ID. Include that value privately in the support case, not in this public thread. Microsoft specifically requests these identifiers for To Do support reports.^2^

    Ask support to route the case to the team responsible for Microsoft To Do/Outlook task storage and Microsoft Graph, and to investigate the affected account’s service state. “Backend provisioning” is a reasonable investigation request, but the available evidence does not establish provisioning as the root cause.

    Include this diagnostic packet

    Provide:

    • Affected account type: personal Microsoft account (@outlook.com).
    • Graph client ID and authentication flow.
    • Delegated scopes: Tasks.ReadWrite User.Read.
    • Exact failing operations:
      • GET /v1.0/me
      • GET /v1.0/me/todo/lists
    • Status sequence: persistent 500, 502, and 503.
    • Response body: UnknownError with an empty message.
    • Exact timestamps in UTC for representative requests.
    • The corresponding:
      • Graph response request-id
      • response Date
      • client-request-id, if one was sent
      • complete x-ms-ags-diagnostic value
    • To Do Session and User ID.
    • Windows To Do version and the indefinite Syncing… symptom.
    • The fact that To Do web/mobile can read the existing data.
    • The completed authentication, transport, DNS, TLS, client, and network tests, so support does not repeat them.
    • The related Q&A case links already collected.

    For any fresh capture, send a unique client-request-id GUID and save it with the response request-id and Date; Microsoft identifies these fields as necessary for support correlation.^3^

    GET /v1.0/me/todo/lists HTTP/1.1
    Host: graph.microsoft.com
    Authorization: Bearer <redacted>
    client-request-id: <new-guid>
    return-client-request-id: true
    

    Do not post the access token, Session/User ID, full account address, or other account identifiers publicly.

    Technical assessment

    GET /me/todo/lists is documented for delegated personal Microsoft accounts. Tasks.Read is sufficient and Tasks.ReadWrite is also supported, so the stated permission set covers this operation; success should return 200 OK and the list collection.^4^

    The repeated 5xx responses indicate that a server or gateway failed to complete requests that appeared valid. A 502 can be retried when the operation is safe, while a 503 should honor Retry-After when present. Persistent failures should not be probed continuously; use bounded exponential backoff and stop after several attempts.^5^

    No public Microsoft notice supplied here identifies a To Do-specific incident matching the reported time window.^6^ The referenced /me/todo/lists reports also have no accepted or recommended resolution, so they support correlation but do not document a self-service repair. The mix of Graph failures and Windows sync failure warrants service-side investigation, but it does not by itself prove that the account’s Exchange/To Do provisioning is damaged.

    While awaiting support, web/mobile can remain the operational workaround because they can currently display the data. Avoid deleting lists, resetting the account, or recreating data unless Microsoft Support explicitly requests it; those actions could complicate correlation or risk data loss.


    References

    1. Get Help for Microsoft personal account users | Microsoft Support
    2. Give feedback on Microsoft To Do | Microsoft Support
    3. How to debug Microsoft Graph API calls
    4. List lists
    5. 500, 502, 503, and 504 errors from APIs: what they mean and how to handle them
    6. Microsoft service health status
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.