Excel MCP Server is an MCP server that a Model Context Protocol server for Excel file manipulation. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 55/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"excel": {
"args": [
"excel-mcp-server",
"stdio"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/excel-mcp-server)
Read me
What Excel Mcp Server does
A Model Context Protocol (MCP) server that lets you manipulate Excel files without needing Microsoft Excel installed. Create, read, and modify Excel workbooks with your AI agent.
Test This Server
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
55/100across 5 weighted dimensions
0255075100
23
15
10
−45
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 fixed
CVE-2026-40576critical · fixedCVSS 9.4
excel-mcp-server has a Path Traversal issue
## Summary A path traversal vulnerability exists in [`excel-mcp-server`](https://github.com/haris-musa/excel-mcp-server) versions up to and including `0.1.7`. When running in SSE or Streamable-HTTP transport mode (the documented way to use this server remotely), an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on the host filesystem by supplying crafted `filepath` arguments to any of the 25 exposed MCP tool handlers. The server is intended to confine f
GHSA-j98m-w3xp-9f56low · fixedCVSS 3.1
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-server
## Summary A path traversal vulnerability exists in [`excel-mcp-server`](https://github.com/haris-musa/excel-mcp-server) versions up to and including `0.1.7`. When running in SSE or Streamable-HTTP transport mode (the documented way to use this server remotely), an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on the host filesystem by supplying crafted `filepath` arguments to any of the 25 exposed MCP tool handlers. The server is intended to confine fi
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Excel Mcp Server safe to use?
- Excel Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install Excel Mcp Server?
- Excel Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with Excel Mcp Server?
- Excel Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is Excel Mcp Server actively maintained?
- Excel Mcp Server is less actively maintained — last commit was 137 days ago. It has 4,144 GitHub stars.
Related
Similar servers
Others in data / productivity
Dbhub96Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.
3.4k 2
Supabase MCP Server96Manage Supabase projects — databases, auth, storage, and edge functions
2.9k 4
Firecrawl Mcp Server95🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.
7.3k 4
Mcp Server Typescript95DataForSEO API modelcontextprotocol server
242 9
MCP Security Weekly
Get CVE alerts and security updates for Excel Mcp Server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.