OfficeDocumentEngine-ODE
Verified Safeby rayss868
Overview
Automating interaction with and manipulation of common office documents (Excel, PDF, DOCX) through an MCP server for AI agents.
Installation
node build/index.jsSecurity Notes
The server performs file system operations (read, write, delete, create) based on `fileAbsolutePath` arguments. While input validation with Zod helps ensure argument structure, it does not inherently prevent an untrusted or compromised AI agent from specifying malicious file paths (e.g., using '..' for directory traversal) leading to arbitrary file system access. This risk is inherent to tools designed for file manipulation and is typically managed by the AI agent's sandbox or trust model. No 'eval' or direct RCE vectors were found in the provided code, and communication is restricted to stdio, limiting network attack surface.
Similar Servers
kreuzberg
Extracts text, tables, images, and metadata from a wide range of document formats (PDF, Office, images, HTML, etc.), with support for multiple OCR backends and an extensible plugin system. Can be run as a Micro-Agent Communication Protocol (MCP) server.
kreuzberg
Extracts text, tables, images, and metadata from 56 file formats including PDF, Office documents, and images. Supports multiple OCR backends, extensible plugins, and is designed for data preprocessing in AI/ML workflows.
excel-mcp-server
This server allows AI agents to manipulate Excel files (create, read, update, format, chart, pivot, validate) without requiring Microsoft Excel to be installed.
pdf-reader-mcp
Provides a robust server for AI agents to extract text, images, and metadata from PDF documents, preserving content order for better comprehension.