mcp-excel-server
by anagashima82
Overview
Provides Dify with local Excel file manipulation capabilities using openpyxl.
Installation
python server.pyEnvironment Variables
- FASTMCP_PORT
- FASTMCP_HOST
Security Notes
CRITICAL: The server is vulnerable to arbitrary file system access. The `filepath` arguments to tools like `read_excel` or `write_cell` are not strictly confined to the `OUTPUT_DIR` if an absolute path is provided by the Dify agent. This allows a potentially malicious Dify prompt to read from or write to any location on the host machine where the server process has permissions (e.g., `/etc/passwd`). Additionally, the server binds to `0.0.0.0:8080` by default, exposing it to the local network, which exacerbates the file system access vulnerability by making it network-accessible.
Similar Servers
spreadsheet-mcp
Analyze and edit spreadsheet files programmatically, designed for token-efficient interaction by LLM agents, focusing on structured data access, modification, formula analysis, and optional VBA inspection.
mcp-gsheets
A Model Context Protocol (MCP) server for Google Sheets API integration, enabling reading, writing, and managing Google Sheets documents directly from MCP clients like Claude Code, Claude Desktop, or Cursor.
mcpbi
Provides a Model Context Protocol (MCP) server for local Power BI Tabular Models, enabling LLM clients to interact for debugging, analysis, and DAX query composition.
atlantis-mcp-server
An MCP (Model Context Protocol) server for hosting and managing dynamic Python functions and third-party MCP tools, enabling AI agents to discover and utilize shared capabilities across a network.