Back to Home
xjustloveux icon

aspose-mcp-server

Verified Safe

by xjustloveux

Overview

Provides powerful office document processing capabilities (Word, Excel, PowerPoint, PDF) to Model Context Protocol (MCP) clients, enabling AI agents to interact with documents.

Installation

Run Command
docker run -d -p 3000:3000 -e ASPOSE_TRANSPORT=sse -e ASPOSE_PORT=3000 -e ASPOSE_HOST=0.0.0.0 -e ASPOSE_TOOLS=all ghcr.io/xjustloveux/aspose-mcp-server:latest

Environment Variables

  • ASPOSE_TRANSPORT
  • ASPOSE_PORT
  • ASPOSE_HOST
  • ASPOSE_TOOLS
  • ASPOSE_LICENSE_PATH
  • ASPOSE_SESSION_ENABLED
  • ASPOSE_SESSION_MAX
  • ASPOSE_SESSION_TIMEOUT
  • ASPOSE_SESSION_MAX_FILE_SIZE_MB
  • ASPOSE_SESSION_TEMP_DIR
  • ASPOSE_SESSION_TEMP_RETENTION_HOURS
  • ASPOSE_SESSION_ON_DISCONNECT
  • ASPOSE_SESSION_ISOLATION
  • ASPOSE_AUTH_APIKEY_ENABLED
  • ASPOSE_AUTH_APIKEY_MODE
  • ASPOSE_AUTH_APIKEY_KEYS
  • ASPOSE_AUTH_APIKEY_HEADER
  • ASPOSE_AUTH_APIKEY_GROUP_HEADER
  • ASPOSE_AUTH_APIKEY_INTROSPECTION_URL
  • ASPOSE_AUTH_APIKEY_INTROSPECTION_AUTH
  • ASPOSE_AUTH_APIKEY_TIMEOUT
  • ASPOSE_AUTH_APIKEY_CACHE_ENABLED
  • ASPOSE_AUTH_APIKEY_CACHE_TTL
  • ASPOSE_AUTH_APIKEY_CACHE_MAX_SIZE
  • ASPOSE_AUTH_JWT_ENABLED
  • ASPOSE_AUTH_JWT_MODE
  • ASPOSE_AUTH_JWT_SECRET
  • ASPOSE_AUTH_JWT_PUBLIC_KEY_PATH
  • ASPOSE_AUTH_JWT_ISSUER
  • ASPOSE_AUTH_JWT_AUDIENCE
  • ASPOSE_AUTH_JWT_GROUP_CLAIM
  • ASPOSE_AUTH_JWT_USER_CLAIM
  • ASPOSE_AUTH_JWT_GROUP_HEADER
  • ASPOSE_AUTH_JWT_USER_HEADER
  • ASPOSE_AUTH_JWT_CLIENT_ID
  • ASPOSE_AUTH_JWT_CLIENT_SECRET
  • ASPOSE_AUTH_JWT_TIMEOUT
  • ASPOSE_AUTH_JWT_CACHE_ENABLED
  • ASPOSE_AUTH_JWT_CACHE_TTL
  • ASPOSE_AUTH_JWT_CACHE_MAX_SIZE
  • ASPOSE_LOG_ENABLED
  • ASPOSE_LOG_TARGETS
  • ASPOSE_WEBHOOK_URL
  • ASPOSE_WEBHOOK_AUTH_HEADER
  • ASPOSE_WEBHOOK_TIMEOUT
  • ASPOSE_METRICS_ENABLED
  • ASPOSE_METRICS_PATH

Security Notes

The project demonstrates strong security practices including comprehensive path validation (preventing traversal attacks, limiting length, validating characters), array and string input validation, and robust error message sanitization to prevent information leakage in production. It supports optional API Key and JWT authentication with various modes and caching, and allows for session isolation. No obvious hardcoded secrets or malicious patterns were found. Code quality exceptions are well-documented and justified.

Similar Servers

Stats

Interest Score45
Security Score9
Cost ClassMedium
Avg Tokens500
Stars13
Forks1
Last Update2026-01-17

Tags

.NET 8.0AsposeMCP ServerOffice DocumentsCross-PlatformAPI Key AuthJWT AuthSession Management