Office Document GeneratorBLOCK
MCP server providing tools to create Ms Office documents like presentations, emails, spreadsheets and word docs (pptx, docx, eml, xlsx)
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://mcptoplist.com/server/glama%2FForLegalAI%2Fmcp-ms-office-documents)
Let your AI assistant create professional Office documents — PowerPoint, Word, Excel, emails & XML — with a single prompt.
[](https://hub.docker.com/r/georgx22/mcp-office-docs) [](https://modelcontextprotocol.io/) [](LICENSE)
💡 What is this?
This is an MCP (Model Context Protocol) server that runs in Docker and gives AI assistants (like Claude, Cursor, or any MCP-compatible client) the ability to generate real Office files on demand.
Just ask your AI to "create a sales presentation" or "draft a welcome email" — and it will produce a ready-to-use file for you.
No coding required. Install, connect, and start creating.
✨ Features at a Glance
766612581c5fOBSERVED · 2026-10-09Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
list_presentation_templates | read | Report the registered PowerPoint templates. |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (22)
"aws sso login (local), instance profile, or ~/.aws/credentials."
# link-local incl. the 169.254.169.254 cloud-metadata address, CGNAT and
letter_template.docx
default_docx_template.docx
default_pptx_template_16_9.pptx
default_pptx_template_4_3.pptx
validate_asset_filename("../../etc/brand.pptx", KIND_PPTX)"../../secret.docx",
"sub/../../secret.docx",
{"name": "escape", "pptx_path": "../../etc/passwd"},"http://169.254.169.254/latest/meta-data/", # cloud metadata
"http://127.0.0.1/image.png", # loopback
"http://10.0.0.1/image.png", # RFC 1918
"http://192.168.1.1/image.png", # RFC 1918
"http://172.16.0.1/image.png", # RFC 1918
"http://169.254.169.254/latest/meta-data/", # cloud metadata
raw = base64.b64decode(payload, validate=True)
return base64.b64decode(message.get_payload()).decode("utf-8")body = base64.b64decode(message.get_payload()).decode("utf-8")PNG_DATA_URI = "data:image/png;base64," + base64.b64encode(base64.b64decode(
PNG_DATA_URI = "data:image/png;base64," + base64.b64encode(base64.b64decode(
Pillow, boto3, botocore, beautifulsoup4, openpyxl, python-dateutil, pydantic, PyYAML
Gates applied: no_behavioural_pass.
766612581c5ffull audit observations/trust-audit/mcp-server/dvejsada__office-document-generator.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | 766612581c5f | BLOCK | D | 69 | first audit |
Questions
What is the Office Document Generator MCP server?
MCP server providing tools to create Ms Office documents like presentations, emails, spreadsheets and word docs (pptx, docx, eml, xlsx)
What tools does Office Document Generator expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Office Document Generator safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Office Document Generator need?
It reads ADMIN_PASSWORD, API_KEY, AWS_ACCESS_KEY, AWS_SECRET_ACCESS_KEY, AZURE_STORAGE_ACCOUNT_KEY, GCS_CREDENTIALS_PATH, LIBRECHAT_SERVICE_TOKEN, MINIO_ACCESS_KEY and MINIO_SECRET_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Office Document Generator run?
It speaks streamable-http, so it runs as a service you connect to over the network.
How current is this page?
The grade is for one exact copy of the source (766612581c5f), read on 2026-10-09. The repository is watched and re-audited when it changes.