Zovo Spreadsheet Merge
REMOTE · SHEET-JOIN.ZOVO.ONE
Merge two spreadsheets on an ID column, the VLOOKUP job, and see how each row matched.
Available components
Last scanned (6 hours ago)
Scores higher than 64% of remote servers
Reachable. Last reached 23 Oct 2026.
Category Data and Analytics
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability69
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1533 tokens (~511/item across 3 items; 2 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management3
- Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 2 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 23 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 22 Oct 26 72
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 23 Oct 2026 · Probed https://sheet-join.zovo.one/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=zovo.one | CN=WE1,O=Google Trust Services,C=US | 3 Oct 2026 | 1 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 7ff868535c964cc2135597c044774e8b |
| SANs: zovo.one, sheet-join.zovo.one, *.sheet-join.zovo.one | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of sheet-join.zovo.one. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| one. | present | 64939 | 8 | Verified |
| zovo.one. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=15552000; includeSubDomains; preload |
| x-content-type-options | nosniff |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://sheet-join.zovo.one/mcp | Verified | 200 | |
| http (plaintext) | http://sheet-join.zovo.one/mcp | HTTPS enforced | 301 | https://sheet-join.zovo.one/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
combine_spreadsheets Combine spreadsheets ~573
Use this when the user wants to stack or append many spreadsheets into one: "combine multiple csv files into one", "merge 12 monthly excel files", "combine excel files with different column names", "append these exports into one sheet", "combine all sheets into one". Takes 1 to 24 CSV, TSV or .xlsx files (or pasted tables). Aligns columns by identical name, then same name with different case or spacing, then a synonym table (Amt = Amount, Txn Date = Date, Memo = Description), then fuzzy spelling matches that are listed for confirmation; a specific column is not folded into a more general one (Spouse First Name stays separate from First Name). Adds a Source file column, decides day/month order once per file, reads EU number formats, removes total rows and repeated headers (listed), and reports each column decision. Returns an Excel workbook (Combined, Column mapping, Files, Excluded rows, Summary) and a CSV. Does not join files side by side on an ID (use join_spreadsheets) and does not do mail merge.
| Name | Type | Req | Description |
|---|---|---|---|
| all_sheets | boolean | – | Stack every sheet of each workbook instead of only the first sheet with data. Default: true when a single workbook is given, otherwise false. |
| column_map | object | – | Your column decisions: source header -> output column, e.g. {"Amt":"Amount","Txn Date":"Date"}. Overrides automatic matching. |
| date_order | string | – | Day/month order for numeric dates: auto (default) decides once per file from the data and says when it had to assume US month/day; MDY or DMY forces it for all files. Example: DMY. |
| files | array | – | The spreadsheets to stack, 1 to 24 CSV, TSV or .xlsx files in order, e.g. jan.csv, feb.csv, mar.csv. One workbook alone stacks all of its sheets. |
| header_row | integer | – | Only if the headings were detected wrongly: the header row number used for EVERY file (counting non-blank rows in a CSV, sheet rows in Excel), e.g. 4. |
| remove_duplicate_rows | boolean | – | Default false: rows identical in every column are counted and reported but kept. true drops the repeats (e.g. overlapping monthly exports). |
| tables | array | – | Only when no files are attached: pasted tables to stack, e.g. [{"name":"Jan","csv":"Date,Amt\n1/5/2025,12.50"}]. |
| unify_case | boolean | – | Default true: in short category-style columns, spellings that differ only by case (Revenue vs revenue) become the spelling seen first (first file wins); each change is listed. false keeps values as t… |
| Name | Type | Req | Description |
|---|---|---|---|
| columns | array | yes | – |
| downloads | object | yes | – |
| duplicates | object | yes | – |
| excluded | object | yes | – |
| files | array | yes | – |
| mapping_changes | array | yes | – |
| mapping_changes_total | number | yes | – |
| needs_confirmation | array | yes | – |
| not_merged | array | yes | – |
| note | string | yes | – |
| preview | object | yes | – |
| rows | number | yes | – |
| tables | number | yes | – |
| value_fixes | array | yes | – |
| warnings | array | yes | – |
No examples provided.
join_spreadsheets Join two spreadsheets ~861
Use this when the user wants to merge, match or VLOOKUP two spreadsheets on a shared ID column: "vlookup two spreadsheets", "merge two excel files by customer ID", "match orders to customers", "why are some rows not matching", "find which IDs are missing from the other file". Attach both files (CSV, TSV or .xlsx; or one workbook with two sheets) or paste both tables. Left join by default (all left rows kept); inner and full joins are available. Auto-detects the key column and explains why (override with left_key/right_key, or give a composite key). Key clean-ups are applied in order and each is counted: spaces, case, look-alike characters, Excel number formats (12345.0, 1.2345E+05), separators, leading zeros (C00123 = C123), letter prefix used by one file only; turn any off with skip_normalizations. Reports unmatched rows on both sides with a likely reason and closest key, duplicate keys with fan-out counts, and returns an Excel workbook (Merged, Unmatched left, Unmatched right, Duplicates, Summary) plus a merged CSV. Does not do mail merge (letters, labels, emails), does not compare two versions of one file cell by cell, and does not edit the original files.
| Name | Type | Req | Description |
|---|---|---|---|
| duplicates | string | – | When a key appears more than once in the right file: all (default) keeps every match and warns about the extra rows; first keeps only the first match, like VLOOKUP. Example: first. |
| join_type | string | – | left (default, like VLOOKUP): keep every left row and add matching right columns. inner: only rows found in both. full: everything from both files, matched where possible. Example: left. |
| left_file | object | – | The main file whose rows you keep (CSV, TSV or .xlsx), e.g. orders.csv. A workbook with two sheets can be passed alone: sheet 1 is joined to sheet 2. |
| left_header_row | integer | – | Only if the headings were detected wrongly: the row number of the left file's header (counting non-blank rows in a CSV, sheet rows in Excel), e.g. 4. |
| left_key | – | – | Key column name(s) in the left file; leave out to auto-detect. Use a list for a composite key, e.g. "customer_id" or ["First Name","Last Name"]. |
| left_sheet | string | – | Sheet name in the left workbook, e.g. Orders. Default: the first sheet with data. |
| left_table | string | – | Only when no file is attached: the left (main) table pasted as CSV or tab-separated text with a header row, e.g. "order_id,customer_id,amount\nSO-1,C123,40.00". |
| right_file | object | – | The lookup file whose columns are added (CSV, TSV or .xlsx), e.g. customers.xlsx. |
| right_header_row | integer | – | Only if the headings were detected wrongly: the row number of the right file's header, e.g. 3. |
| right_key | – | – | Key column name(s) in the right file; leave out to auto-detect. Use a list for a composite key, e.g. "Customer ID" or ["First Name","Last Name"]. |
| right_sheet | string | – | Sheet name in the right workbook, e.g. Customers. Default: the first sheet with data (or the second sheet when both tables are in one workbook). |
| right_table | string | – | Only when no file is attached: the right (lookup) table pasted as CSV or tab-separated text with a header row, e.g. "customer_id,name\nC00123,Acme Supply". |
| skip_normalizations | array | – | Key clean-ups to turn OFF when IDs that differ only that way are really different, e.g. ["case"] for case-sensitive IDs or ["zeros"] when 0123 and 123 are different codes. Options: trim, case, unicod… |
| Name | Type | Req | Description |
|---|---|---|---|
| downloads | object | yes | – |
| duplicates | object | yes | – |
| excluded | array | yes | – |
| join_type | string | yes | – |
| key_choice | object | yes | – |
| left | object | yes | – |
| match | object | yes | – |
| normalizations | array | yes | – |
| note | string | yes | – |
| prefix_rule | string|null | yes | – |
| right | object | yes | – |
| turned_off | array | yes | – |
| unmatched_preview | array | yes | – |
| unmatched_reasons | array | yes | – |
| warnings | array | yes | – |
| would_match_if_on | array | yes | – |
No examples provided.
How do I install the Zovo Spreadsheet Merge MCP server?
Zovo Spreadsheet Merge is a hosted endpoint at https://sheet-join.zovo.one/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · sheet-join.zovo.one
claude mcp add --transport http theluckystrike-sheet-join 'https://sheet-join.zovo.one/mcp'
What is the Zovo Spreadsheet Merge MCP server?
Zovo Spreadsheet Merge is an MCP server listed in the public MCP registry as io.github.theluckystrike/sheet-join. Merge two spreadsheets on an ID column, the VLOOKUP job, and see how each row matched. This page covers its hosted endpoint (https://sheet-join.zovo.one/mcp).
Is the Zovo Spreadsheet Merge MCP server safe to use?
Zovo Spreadsheet Merge scores 73 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Zovo Spreadsheet Merge MCP server expose?
Zovo Spreadsheet Merge exposes 2 tools: join_spreadsheets, combine_spreadsheets. Their descriptions and schemas cost roughly 1,434 tokens of context every time the server is loaded.
Does the Zovo Spreadsheet Merge MCP server require authentication?
No. We connected to Zovo Spreadsheet Merge without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Zovo Spreadsheet Merge MCP server still maintained?
Zovo Spreadsheet Merge is still listed as active in the MCP registry. We last reached this channel on 23 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.