Atlas / MCP servers / archimedescrypto / Excel Reader

Excel ReaderSAFE

mcp/archimedescrypto/excel-reader

A Model Context Protocol (MCP) server for reading Excel files with automatic chunking and pagination support. Built with SheetJS and TypeScript.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
14 14r · 0w · 0d
Transport
stdio
License
MIT
Stars
29
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://mseep.ai/app/archimedescrypto-excel-reader-mcp)

[](https://smithery.ai/server/@ArchimedesCrypto/excel-reader-mcp-chunked) A Model Context Protocol (MCP) server for reading Excel files with automatic chunking and pagination support. Built with SheetJS and TypeScript, this tool helps you handle large Excel files efficiently by automatically breaking them into manageable chunks.

Features

  • 📊 Read Excel files (.xlsx, .xls) with automatic size limits
  • 🔄 Automatic chunking for large datasets
  • 📑 Sheet selection and row pagination
  • 📅 Proper date handling
  • ⚡ Optimized for large files
  • 🛡️ Error handling and validation

Installation

Installing via Smithery

To install Excel Reader for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @ArchimedesCrypto/excel-reader-mcp-chunked --client claude

As an MCP Server

  1. Install globally:
npm install -g @archimdescrypto/excel-reader
  1. Add to your MCP settings file (usually at ~/.config/claude/settings.json or equivalent):
{
"mcpServers": {
"excel-reader": {
"command": "excel-reader",
"env": {}
}
}
}

For Development

  1. Clone the repository:
git clone https://github.com/ArchimdesCrypto/mcp-excel-reader.git
cd mcp-excel-reader
  1. Install dependencies:
npm install
  1. Build the project:
npm run build

Usage

Usage

The Excel Reader provides a single tool read_excel with the following parameters:

interface ReadE
Read from source at commit c92f09808bb4OBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add excel-reader-mcp -- npx -y @archimdescrypto/[email protected]
claude-desktop
{
  "mcpServers": {
    "excel-reader-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@archimdescrypto/[email protected]"
      ]
    }
  }
}
03

Exposed tools (14)

14 read · 0 write · 0 destructive.

ToolRiskDescription
export_to_csvreadExport a sheet to CSV format
export_to_jsonreadExport a sheet to JSON format
filter_rowsreadFilter rows based on column criteria
get_cellreadGet the value of a specific cell
get_column_statsreadGet statistics for numeric columns
get_formulasreadGet formulas from cells in a range or entire sheet
get_merged_cellsreadGet all merged cell ranges in a sheet
get_rangereadGet values from a specific cell range
get_sheet_inforeadGet detailed metadata about a sheet
get_unique_valuesreadGet distinct values in a column
list_sheetsreadList all sheet names in an Excel workbook
read_excelreadRead an Excel file and return its contents as structured data with automatic chunking
search_textreadFind cells containing specific text
sort_datareadSort data by one or more columns
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (5 observation(s))
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (6)

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/tools/analysis/filter-rows.ts:4
import { FilterRowsArgs, FilterRowsResponse, FilterCondition } from '../../types/index.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/tools/analysis/filter-rows.ts:5
import { loadWorkbook } from '../../utils/workbook-cache.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/tools/analysis/filter-rows.ts:8
import { applyChunking } from '../../utils/chunking.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/tools/analysis/get-column-stats.ts:4
import { GetColumnStatsArgs, GetColumnStatsResponse, ColumnStats } from '../../types/index.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/tools/analysis/get-column-stats.ts:5
import { loadWorkbook } from '../../utils/workbook-cache.js';
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
xlsx, @types/node, typescript
Why it matters. 3 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha c92f09808bb4full audit observations/trust-audit/mcp-server/archimedescrypto__excel-reader.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08c92f09808bb4SAFEB89first audit
06

Questions

What is the Excel Reader MCP server?

A Model Context Protocol (MCP) server for reading Excel files with automatic chunking and pagination support. Built with SheetJS and TypeScript.

What tools does Excel Reader expose?

14 in total: 14 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Excel Reader safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Excel Reader need?

No credential environment variables were found in its source, so it appears to need none.

How does Excel Reader run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as @archimdescrypto/excel-reader-mcp at 1.0.0.

How current is this page?

The grade is for one exact copy of the source (c92f09808bb4), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement