Excel MCP Server
excel-mcp-server · by haris-musa
Create and edit Excel files with AI: charts, PivotTables, formulas. No Excel needed.
No known CVEs
MIT license
Actively maintained
Last commit 1d ago
Works with most clients
Transport: stdio, sse, http
0 tools
Grade F
MCPpedia last refreshed this data
Excel MCP Server is an MCP server that create and edit Excel files with AI: charts, PivotTables, formulas. No Excel needed. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 64/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"excel": {
"args": [
"excel-mcp-server",
"stdio"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/excel-mcp-server)
Read me
What Excel Mcp Server does
Create and edit Excel files with AI: charts, PivotTables, formulas. No Excel needed.
Test This Server
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
64/100across 5 weighted dimensions
0255075100
23
16
15
10
−36
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 fixed
CVE-2026-40576critical · fixedCVSS 9.4
excel-mcp-server has a Path Traversal issue
## Summary A path traversal vulnerability exists in [`excel-mcp-server`](https://github.com/haris-musa/excel-mcp-server) versions up to and including `0.1.7`. When running in SSE or Streamable-HTTP transport mode (the documented way to use this server remotely), an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on the host filesystem by supplying crafted `filepath` arguments to any of the 25 exposed MCP tool handlers. The server is intended to confine f
GHSA-j98m-w3xp-9f56low · fixedCVSS 3.1
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-server
## Summary A path traversal vulnerability exists in [`excel-mcp-server`](https://github.com/haris-musa/excel-mcp-server) versions up to and including `0.1.7`. When running in SSE or Streamable-HTTP transport mode (the documented way to use this server remotely), an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on the host filesystem by supplying crafted `filepath` arguments to any of the 25 exposed MCP tool handlers. The server is intended to confine fi
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Excel Mcp Server safe to use?
- Excel Mcp Server has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
- How do I install Excel Mcp Server?
- Excel Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with Excel Mcp Server?
- Excel Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is Excel Mcp Server actively maintained?
- Excel Mcp Server is actively maintained - last commit was 1 day ago. It has 4,257 GitHub stars.
Related
Similar servers
Others in data / productivity
Dbhub96Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
3.7k 2
Vibe Assistant95A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。
170 3
Firecrawl Mcp Server95Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
7.7k 4
Apify Mcp Server95Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
12.6k 1
MCP Security Weekly
Get CVE alerts and security updates for Excel Mcp Server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.