ModelsAtlas
Explore
Atlas / MCP servers / gongrzhe / Office PowerPoint

Office PowerPointSAFE

mcp/gongrzhe/office-powerpoint
MCP server by gongrzhe · Audited 2026-09-23
⚑ Report / re-scanSource ↗

A MCP (Model Context Protocol) server for PowerPoint manipulation using python-pptx. This server provides tools for creating, editing, and manipulating PowerPoint presentations through the MCP protocol.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
3 3r · 0w · 0d
Transport
sse · stdio · streamable-http
License
MIT
Stars
1,854
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://smithery.ai/server/@GongRzhe/Office-PowerPoint-MCP-Server)

A comprehensive MCP (Model Context Protocol) server for PowerPoint manipulation using python-pptx. Version 2.0 provides 32 powerful tools organized into 11 specialized modules, offering complete PowerPoint creation, management, and professional design capabilities. The server features a modular architecture with enhanced parameter handling, intelligent operation selection, and comprehensive error handling.

Not so ugly anymore with new slide_layout_templates

Example

Prompt

Output

Demo's GIF -> (./public/demo.mp4)

Features

Core PowerPoint Operations

  • Round-trip support for any Open XML presentation (.pptx file) including all elements
  • Template support with automatic theme and layout preservation
  • Multi-presentation management with global state tracking
  • Core document properties management (title, subject, author, keywords, comments)

Content Creation & Management

  • Slide management with flexible layout selection
  • Text manipulation with placeholder population and bullet point creation
  • Advanced text formatting with font, color, alignment, and style controls
  • Text validation with automatic fit checking and optimization suggestions

Visual Elements

  • Image handling with file and base64
Read from source at commit 7e664ab6845eOBSERVED · 2026-09-23
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add office-powerpoint-mcp-server -- uvx office-powerpoint-mcp-server
claude-desktop
{
  "mcpServers": {
    "office-powerpoint-mcp-server": {
      "command": "uvx",
      "args": [
        "office-powerpoint-mcp-server"
      ]
    }
  }
}
03

Exposed tools (3)

3 read · 0 write · 0 destructive.

ToolRiskDescription
get_server_inforeadGet information about the MCP server.
list_presentationsreadList all loaded presentations.
switch_presentationreadSwitch to a different loaded presentation.
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (5)

MEDIUMInventory / provenance · inv.binary · CWE-1104
mcp_all_tools_templates_effects_demo.pptx
mcp_all_tools_templates_effects_demo.pptx
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
tools/content_tools.py:553
image_data = base64.b64decode(image_source)
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
requirements.txt
mcp, python-pptx, Pillow, fonttools
Why it matters. 4 requirement(s) not pinned with ==
Fix. pin exact versions
INFOInventory / provenance · inv.oversize · CWE-1104
public/demo.gif
public/demo.gif
Why it matters. 36129383 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
public/demo.mp4
public/demo.mp4
Why it matters. 33297900 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-09-23 · audit v0.4.1 · source sha 7e664ab6845efull audit observations/trust-audit/mcp-server/gongrzhe__office-powerpoint.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-09-237e664ab6845eSAFEB89source changed, verdict held
06

Questions

What is the Office PowerPoint MCP server?

A MCP (Model Context Protocol) server for PowerPoint manipulation using python-pptx. This server provides tools for creating, editing, and manipulating PowerPoint presentations through the MCP protocol.

What tools does Office PowerPoint expose?

3 in total: 3 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Office PowerPoint safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Office PowerPoint need?

No credential environment variables were found in its source, so it appears to need none.

How does Office PowerPoint run?

It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as office-powerpoint-mcp-server.

How current is this page?

The grade is for one exact copy of the source (7e664ab6845e), read on 2026-09-23. The repository is watched and re-audited when it changes.

Advertisement