xlsx-tools-mcp
PYPI · XLSX-TOOLS-MCP · SCANNED SEP 20
MCP server for accurate, structure-preserving read/write access to Excel (.xlsx) files
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security99
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
- 4 of 39 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 27 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability76
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2528 tokens (~126/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "delete_sheet" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the xlsx-tools-mcp server?
xlsx-tools-mcp runs locally as a PyPI package, launched with uvx xlsx-tools-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · xlsx-tools-mcp
claude mcp add ruriazz-xlsx-tools-mcp -- uvx xlsx-tools-mcp
{
"mcpServers": {
"ruriazz-xlsx-tools-mcp": {
"command": "uvx",
"args": [
"xlsx-tools-mcp"
]
}
}
} {
"servers": {
"ruriazz-xlsx-tools-mcp": {
"command": "uvx",
"args": [
"xlsx-tools-mcp"
]
}
}
} codex mcp add ruriazz-xlsx-tools-mcp -- uvx xlsx-tools-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ruriazz-xlsx-tools-mcp": {
"type": "local",
"command": [
"uvx",
"xlsx-tools-mcp"
],
"enabled": true
}
}
} openclaw mcp add ruriazz-xlsx-tools-mcp --command uvx --arg xlsx-tools-mcp
mcp_servers:
ruriazz-xlsx-tools-mcp:
command: "uvx"
args: ["xlsx-tools-mcp"] {
"McpServers": {
"ruriazz-xlsx-tools-mcp": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"xlsx-tools-mcp"
]
}
}
} assistant mcp add ruriazz-xlsx-tools-mcp -t stdio -c uvx -a xlsx-tools-mcp
{
"mcpServers": {
"ruriazz-xlsx-tools-mcp": {
"command": "uvx",
"args": [
"xlsx-tools-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 17 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 11 Sept 26 −15
- Malware scan: pass → unverified ▼ security
- 10 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.
- 8 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.
- 6 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/xlsx-tools-mcp@0.1.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Dependencies 39 packages
| Packages resolved | 39 |
|---|---|
| Stale | 3 |
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
aggregate_sheet ~170
Group and aggregate sheet data with pandas (e.g. sum sales by region). Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. group_by: Column names to group by (taken from the header row). agg: Mapping of column name to aggregation function, e.g. {"amount": "sum"}. cell_range: Optional A1-style range to read before aggregating. has_header: Whether the first row of the range holds column names.
| Name | Type | Req | Description |
|---|---|---|---|
| agg | object | yes | – |
| cell_range | – | – | – |
| group_by | array | yes | – |
| has_header | boolean | – | – |
| path | – | – | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
append_rows ~178
Append rows after the last used row of a sheet, then recalculate the workbook. Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally complex workbooks you don't want round-tripped). Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. rows: List of rows, each a list of cell values in column order. create_sheet_if_missing: Create the sheet first if it doesn't exist yet. recalculate: Run the LibreOffice recompute pass after saving.
| Name | Type | Req | Description |
|---|---|---|---|
| create_sheet_if_missing | boolean | – | – |
| path | – | – | – |
| recalculate | boolean | – | – |
| rows | array | yes | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
create_sheet ~93
Add a new empty sheet to an existing workbook. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Name for the new sheet. index: Zero-based position to insert at; omit to append at the end.
| Name | Type | Req | Description |
|---|---|---|---|
| index | – | – | – |
| path | – | – | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
create_workbook ~88
Create a new .xlsx workbook. Args: path: Path for the new file. New files aren't preloaded, so this must be a real path. sheets: Sheet names to create (defaults to a single "Sheet1"). overwrite: Replace an existing file at path when True.
| Name | Type | Req | Description |
|---|---|---|---|
| overwrite | boolean | – | – |
| path | string | yes | – |
| sheets | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
delete_columns ~161
Delete columns, shifting the columns to their right leftward. Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally complex workbooks you don't want round-tripped). Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. start_column: 1-based column index to start deleting from. count: Number of columns to delete. recalculate: Run the LibreOffice recompute pass after saving.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| path | – | – | – |
| recalculate | boolean | – | – |
| sheet | string | yes | – |
| start_column | integer | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
delete_rows ~159
Delete rows, shifting the rows below them upward. Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally complex workbooks you don't want round-tripped). Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. start_row: 1-based row index to start deleting from. count: Number of rows to delete. recalculate: Run the LibreOffice recompute pass after saving.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| path | – | – | – |
| recalculate | boolean | – | – |
| sheet | string | yes | – |
| start_row | integer | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
delete_sheet ~77
Delete a sheet from a workbook. Fails if it is the only sheet left. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name to delete.
| Name | Type | Req | Description |
|---|---|---|---|
| path | – | – | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
get_cell ~101
Get full detail for a single cell: value, formula, number format, font, fill, merge, comment. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. cell: Cell reference, e.g. "C5".
| Name | Type | Req | Description |
|---|---|---|---|
| cell | string | yes | – |
| path | – | – | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
get_workbook_info ~63
Get workbook-level metadata: sheets, exact dimensions, active sheet, defined names. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured.
| Name | Type | Req | Description |
|---|---|---|---|
| path | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
insert_columns ~157
Insert blank columns, shifting existing columns right. Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally complex workbooks you don't want round-tripped). Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. start_column: 1-based column index to insert before. count: Number of columns to insert. recalculate: Run the LibreOffice recompute pass after saving.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| path | – | – | – |
| recalculate | boolean | – | – |
| sheet | string | yes | – |
| start_column | integer | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
insert_rows ~157
Insert blank rows, shifting existing rows down. Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally complex workbooks you don't want round-tripped). Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. start_row: 1-based row index to insert before. count: Number of rows to insert. recalculate: Run the LibreOffice recompute pass after saving.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| path | – | – | – |
| recalculate | boolean | – | – |
| sheet | string | yes | – |
| start_row | integer | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
list_configured_files ~66
List files preloaded at server startup (via the XLSX_MCP_FILES env var). Call this first if unsure which files are available — every other tool's `path` argument accepts these names directly (or can be omitted if only one is configured), no filesystem search needed.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
list_sheets ~60
List every sheet in a workbook with its approximate row/column counts. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured.
| Name | Type | Req | Description |
|---|---|---|---|
| path | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | array | yes | – |
No examples provided.
merge_cells ~93
Merge a rectangular range of cells into one. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. cell_range: A1-style range, e.g. "A1:C1".
| Name | Type | Req | Description |
|---|---|---|---|
| cell_range | string | yes | – |
| path | – | – | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
read_sheet ~138
Read cell values from a sheet as a 2D array, addressed absolutely from A1. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. cell_range: Optional A1-style range (e.g. "B2:F20"). Omit to read the full used area. max_rows: Optional cap on the number of rows returned, to bound response size for large sheets.
| Name | Type | Req | Description |
|---|---|---|---|
| cell_range | – | – | – |
| max_rows | – | – | – |
| path | – | – | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
recalculate_workbook ~63
Force a LibreOffice headless recalculation pass and report any formula errors found. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured.
| Name | Type | Req | Description |
|---|---|---|---|
| path | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
search_workbook ~140
Search cell values across one or all sheets for a substring match. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. query: Substring to search for. sheet: Restrict the search to one sheet; omit to search every sheet. match_case: Case-sensitive match when True. limit: Optional cap on the number of matches returned, to bound response size for large sheets.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | – | – | – |
| match_case | boolean | – | – |
| path | – | – | – |
| query | string | yes | – |
| sheet | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | array | yes | – |
No examples provided.
set_cell_style ~167
Apply formatting to a range of cells. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. cell_range: A1-style range, e.g. "A1:D1". style: Keys among: bold, italic, font_size, font_color (hex RGB, e.g. "FF0000"), bg_color (hex RGB), horizontal, vertical (alignment), border ("thin", "medium", "thick", ...), number_format (e.g. "#,##0.00").
| Name | Type | Req | Description |
|---|---|---|---|
| cell_range | string | yes | – |
| path | – | – | – |
| sheet | string | yes | – |
| style | object | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
unmerge_cells ~89
Undo a merge on a range of cells. Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. cell_range: A1-style range that was previously merged.
| Name | Type | Req | Description |
|---|---|---|---|
| cell_range | string | yes | – |
| path | – | – | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
write_cells ~214
Write values and/or formulas into specific cells, then recalculate the workbook. Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally complex workbooks you don't want round-tripped). Args: path: Path to the .xlsx file, or the name of a preloaded file. Omit if only one file is configured. sheet: Sheet name. cells: List of {"cell": "A1", "value": ...} or {"cell": "B1", "formula": "=A1*2"}. create_sheet_if_missing: Create the sheet first if it doesn't exist yet. recalculate: Run the LibreOffice recompute pass after saving. Returns: Write result including `errors_found` — any Excel error values produced by recalculation.
| Name | Type | Req | Description |
|---|---|---|---|
| cells | array | yes | – |
| create_sheet_if_missing | boolean | – | – |
| path | – | – | – |
| recalculate | boolean | – | – |
| sheet | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
What is the xlsx-tools-mcp server?
xlsx-tools-mcp is listed in the public MCP registry as io.github.ruriazz/xlsx-tools-mcp. MCP server for accurate, structure-preserving read/write access to Excel (.xlsx) files. This page covers its PyPI package (xlsx-tools-mcp).
Is the xlsx-tools-mcp server safe to use?
xlsx-tools-mcp scores 80 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the xlsx-tools-mcp server expose?
xlsx-tools-mcp exposes 20 tools: list_configured_files, list_sheets, get_workbook_info, read_sheet, get_cell, and 15 more. Their descriptions and schemas cost roughly 2,434 tokens of context every time the server is loaded.
Is the xlsx-tools-mcp server still maintained?
xlsx-tools-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the xlsx-tools-mcp server under?
xlsx-tools-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.