# xlsx-tools-mcp (pypi · xlsx-tools-mcp)

MCP server for accurate, structure-preserving read/write access to Excel (.xlsx) files

- Trust score: 80/100 (high trust)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- pypi · `xlsx-tools-mcp`: 80/100 (this document), [markdown](https://verifymcp.io/servers/ruriazz-xlsx-tools-mcp/xlsx-tools-mcp.md), [page](https://verifymcp.io/servers/ruriazz-xlsx-tools-mcp/xlsx-tools-mcp)

## Channel facts

- Registry: `pypi`
- Package: `xlsx-tools-mcp`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 99/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it.
  - 4 of 39 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 48/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 27 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 76/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2528 tokens (~126/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 93/100
  - Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 71/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "delete_sheet" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.
  - An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the xlsx-tools-mcp server?

xlsx-tools-mcp runs locally as a PyPI package, launched with uvx xlsx-tools-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add ruriazz-xlsx-tools-mcp -- uvx xlsx-tools-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "ruriazz-xlsx-tools-mcp": {
      "command": "uvx",
      "args": [
        "xlsx-tools-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ruriazz-xlsx-tools-mcp": {
      "command": "uvx",
      "args": [
        "xlsx-tools-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add ruriazz-xlsx-tools-mcp -- uvx xlsx-tools-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ruriazz-xlsx-tools-mcp": {
      "type": "local",
      "command": [
        "uvx",
        "xlsx-tools-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ruriazz-xlsx-tools-mcp --command uvx --arg xlsx-tools-mcp
```

### Hermes

```yaml
mcp_servers:
  ruriazz-xlsx-tools-mcp:
    command: "uvx"
    args: ["xlsx-tools-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "ruriazz-xlsx-tools-mcp": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "xlsx-tools-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add ruriazz-xlsx-tools-mcp -t stdio -c uvx -a xlsx-tools-mcp
```

### Other

```json
{
  "mcpServers": {
    "ruriazz-xlsx-tools-mcp": {
      "command": "uvx",
      "args": [
        "xlsx-tools-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-19 (score 80, +16)

- [security improvement] Malware scan: unverified → pass

### 2026-09-17 (score 64, −14)

- [security regression] Malware scan: pass → unverified

### 2026-09-15 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-12 (score 77, +16)

- [security improvement] Malware scan: unverified → pass

### 2026-09-11 (score 61, −15)

- [security regression] Malware scan: pass → unverified

### 2026-09-10 (score 76, +1)

No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-08 (score 75, +1)

No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-06 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (20)

### `list_configured_files` (~66 tokens)

List files preloaded at server startup (via the XLSX_MCP_FILES env var).

Call this first if unsure which files are available — every other tool's `path`
argument accepts these names directly (or can be omitted if only one is configured),
no filesystem search needed.

### `list_sheets` (~60 tokens)

List every sheet in a workbook with its approximate row/column counts.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.

Input parameters:

- `path`

Output parameters:

- `result` (array)

### `get_workbook_info` (~63 tokens)

Get workbook-level metadata: sheets, exact dimensions, active sheet, defined names.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.

Input parameters:

- `path`

### `read_sheet` (~138 tokens)

Read cell values from a sheet as a 2D array, addressed absolutely from A1.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    cell_range: Optional A1-style range (e.g. "B2:F20"). Omit to read the full used area.
    max_rows: Optional cap on the number of rows returned, to bound response size for large sheets.

Input parameters:

- `cell_range`
- `max_rows`
- `path`
- `sheet` (string, required)

### `get_cell` (~101 tokens)

Get full detail for a single cell: value, formula, number format, font, fill, merge, comment.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    cell: Cell reference, e.g. "C5".

Input parameters:

- `cell` (string, required)
- `path`
- `sheet` (string, required)

### `search_workbook` (~140 tokens)

Search cell values across one or all sheets for a substring match.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    query: Substring to search for.
    sheet: Restrict the search to one sheet; omit to search every sheet.
    match_case: Case-sensitive match when True.
    limit: Optional cap on the number of matches returned, to bound response size for large sheets.

Input parameters:

- `limit`
- `match_case` (boolean)
- `path`
- `query` (string, required)
- `sheet`

Output parameters:

- `result` (array)

### `aggregate_sheet` (~170 tokens)

Group and aggregate sheet data with pandas (e.g. sum sales by region).

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    group_by: Column names to group by (taken from the header row).
    agg: Mapping of column name to aggregation function, e.g. {"amount": "sum"}.
    cell_range: Optional A1-style range to read before aggregating.
    has_header: Whether the first row of the range holds column names.

Input parameters:

- `agg` (object, required)
- `cell_range`
- `group_by` (array, required)
- `has_header` (boolean)
- `path`
- `sheet` (string, required)

### `create_workbook` (~88 tokens)

Create a new .xlsx workbook.

Args:
    path: Path for the new file. New files aren't preloaded, so this must be a real path.
    sheets: Sheet names to create (defaults to a single "Sheet1").
    overwrite: Replace an existing file at path when True.

Input parameters:

- `overwrite` (boolean)
- `path` (string, required)
- `sheets`

### `write_cells` (~214 tokens)

Write values and/or formulas into specific cells, then recalculate the workbook.

Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally
complex workbooks you don't want round-tripped).

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    cells: List of {"cell": "A1", "value": ...} or {"cell": "B1", "formula": "=A1*2"}.
    create_sheet_if_missing: Create the sheet first if it doesn't exist yet.
    recalculate: Run the LibreOffice recompute pass after saving.

Returns:
    Write result including `errors_found` — any Excel error values produced by recalculation.

Input parameters:

- `cells` (array, required)
- `create_sheet_if_missing` (boolean)
- `path`
- `recalculate` (boolean)
- `sheet` (string, required)

### `append_rows` (~178 tokens)

Append rows after the last used row of a sheet, then recalculate the workbook.

Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally
complex workbooks you don't want round-tripped).

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    rows: List of rows, each a list of cell values in column order.
    create_sheet_if_missing: Create the sheet first if it doesn't exist yet.
    recalculate: Run the LibreOffice recompute pass after saving.

Input parameters:

- `create_sheet_if_missing` (boolean)
- `path`
- `recalculate` (boolean)
- `rows` (array, required)
- `sheet` (string, required)

### `create_sheet` (~93 tokens)

Add a new empty sheet to an existing workbook.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Name for the new sheet.
    index: Zero-based position to insert at; omit to append at the end.

Input parameters:

- `index`
- `path`
- `sheet` (string, required)

### `delete_sheet` (~77 tokens)

Delete a sheet from a workbook. Fails if it is the only sheet left.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name to delete.

Input parameters:

- `path`
- `sheet` (string, required)

### `insert_rows` (~157 tokens)

Insert blank rows, shifting existing rows down.

Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally
complex workbooks you don't want round-tripped).

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    start_row: 1-based row index to insert before.
    count: Number of rows to insert.
    recalculate: Run the LibreOffice recompute pass after saving.

Input parameters:

- `count` (integer)
- `path`
- `recalculate` (boolean)
- `sheet` (string, required)
- `start_row` (integer, required)

### `delete_rows` (~159 tokens)

Delete rows, shifting the rows below them upward.

Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally
complex workbooks you don't want round-tripped).

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    start_row: 1-based row index to start deleting from.
    count: Number of rows to delete.
    recalculate: Run the LibreOffice recompute pass after saving.

Input parameters:

- `count` (integer)
- `path`
- `recalculate` (boolean)
- `sheet` (string, required)
- `start_row` (integer, required)

### `insert_columns` (~157 tokens)

Insert blank columns, shifting existing columns right.

Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally
complex workbooks you don't want round-tripped).

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    start_column: 1-based column index to insert before.
    count: Number of columns to insert.
    recalculate: Run the LibreOffice recompute pass after saving.

Input parameters:

- `count` (integer)
- `path`
- `recalculate` (boolean)
- `sheet` (string, required)
- `start_column` (integer, required)

### `delete_columns` (~161 tokens)

Delete columns, shifting the columns to their right leftward.

Set `recalculate=False` to skip the LibreOffice recompute (e.g. for structurally
complex workbooks you don't want round-tripped).

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    start_column: 1-based column index to start deleting from.
    count: Number of columns to delete.
    recalculate: Run the LibreOffice recompute pass after saving.

Input parameters:

- `count` (integer)
- `path`
- `recalculate` (boolean)
- `sheet` (string, required)
- `start_column` (integer, required)

### `merge_cells` (~93 tokens)

Merge a rectangular range of cells into one.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    cell_range: A1-style range, e.g. "A1:C1".

Input parameters:

- `cell_range` (string, required)
- `path`
- `sheet` (string, required)

### `unmerge_cells` (~89 tokens)

Undo a merge on a range of cells.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    cell_range: A1-style range that was previously merged.

Input parameters:

- `cell_range` (string, required)
- `path`
- `sheet` (string, required)

### `set_cell_style` (~167 tokens)

Apply formatting to a range of cells.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.
    sheet: Sheet name.
    cell_range: A1-style range, e.g. "A1:D1".
    style: Keys among: bold, italic, font_size, font_color (hex RGB, e.g. "FF0000"),
        bg_color (hex RGB), horizontal, vertical (alignment), border ("thin", "medium",
        "thick", ...), number_format (e.g. "#,##0.00").

Input parameters:

- `cell_range` (string, required)
- `path`
- `sheet` (string, required)
- `style` (object, required)

### `recalculate_workbook` (~63 tokens)

Force a LibreOffice headless recalculation pass and report any formula errors found.

Args:
    path: Path to the .xlsx file, or the name of a preloaded file. Omit if only
        one file is configured.

Input parameters:

- `path`

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/ruriazz-xlsx-tools-mcp/xlsx-tools-mcp#diagnostics

## Score history

- 2026-09-20: 80
- 2026-09-19: 80
- 2026-09-18: 64
- 2026-09-17: 64
- 2026-09-16: 78
- 2026-09-15: 78
- 2026-09-14: 77
- 2026-09-13: 77
- 2026-09-12: 77
- 2026-09-11: 61
- 2026-09-10: 76
- 2026-09-09: 75
- 2026-09-08: 75
- 2026-09-07: 74
- 2026-09-06: 74
- 2026-09-05: 73
- 2026-09-04: 73
- 2026-09-03: 72
- 2026-09-02: 72
- 2026-09-01: 71
- 2026-08-31: 71
- 2026-08-30: 70
- 2026-08-29: 67
- 2026-08-28: 67
- 2026-08-27: 67
- 2026-08-26: 67
- 2026-08-25: 67
- 2026-08-24: 67
- 2026-08-23: 67

## Common questions

### What is the xlsx-tools-mcp server?

xlsx-tools-mcp is listed in the public MCP registry as io.github.ruriazz/xlsx-tools-mcp. MCP server for accurate, structure-preserving read/write access to Excel (.xlsx) files. This page covers its PyPI package (xlsx-tools-mcp).

### Is the xlsx-tools-mcp server safe to use?

xlsx-tools-mcp scores 80 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the xlsx-tools-mcp server expose?

xlsx-tools-mcp exposes 20 tools: list_configured_files, list_sheets, get_workbook_info, read_sheet, get_cell, and 15 more. Their descriptions and schemas cost roughly 2,434 tokens of context every time the server is loaded.

### Is the xlsx-tools-mcp server still maintained?

xlsx-tools-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the xlsx-tools-mcp server under?

xlsx-tools-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- PyPI project: https://pypi.org/project/xlsx-tools-mcp/
- Socket report: https://socket.dev/pypi/package/xlsx-tools-mcp
- Repository: https://github.com/ruriazz/xlsx-tools-mcp
- Changelog RSS feed: https://verifymcp.io/servers/ruriazz-xlsx-tools-mcp/xlsx-tools-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/ruriazz-xlsx-tools-mcp/xlsx-tools-mcp.json
- HTML version of this page: https://verifymcp.io/servers/ruriazz-xlsx-tools-mcp/xlsx-tools-mcp