ExcelSAFE
MCP server for AI agents to analyze Excel spreadsheets through atomic operations. Like SQL for Excel. Fast, accurate, and efficient. No context overflow.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Fast and efficient spreadsheet analysis through atomic operations, built specifically for AI agents
🇬🇧 English • 🇷🇺 Русский • 🇨🇳 中文 • 🇪🇸 Español • 🇯🇵 日本語 • 🇧🇷 Português
Made with ❤️ for mom by @Jwadow
[](https://www.gnu.org/licenses/agpl-3.0) [](https://www.python.org/downloads/) [](https://modelcontextprotocol.io) [](#-support-the-project)
Analyze Excel spreadsheets with your AI agent through atomic operations — no data dumping into AI context
Works with OpenCode, Claude Code, Codex app, Cursor, Cline, Roo Code, Kilo Code and other MCP-compatible AI agents
Why This Exists • My Mom's Review • What Your Agent Can Do • Installation • 💖 Donate
🔒 Data Security & Privacy
Local-First Architecture This server runs entirely on your local machine. Your Excel files are processed locally and never leave your computer.
Is it safe?
- Local Models (Ollama, LM Studio): Your data never leaves your machine. 100% private.
- Cloud Models (OpenRouter, ChatGPT): Only the precise results of operations (counts, sums, formulas) and metadata (column names) are sent to the model. The bulk raw data remains on your disk.
🤨 Why This Exists
The Problem: Most Excel tools for AI dump raw spreadsheet data into the agent's context. This floods the context window, slows everything down, and the AI can still miscalculate or get confused in
81b013c8a283OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-excel -- uvx mcp-excel
{
"mcpServers": {
"mcp-excel": {
"command": "uvx",
"args": [
"mcp-excel"
]
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
calculate_expression | read | Calculate expression between columns (e.g., |
find_column | read | Find a column across all sheets or in the first sheet. Returns list of sheets where the column was found with metadata. Use for: multi-sheet navigation, column discovery, data structure understanding, cross-sheet analysis, locating data. EXAMPLES: Find which sheets contain |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (4)
[6, "Строка\nс переносом", "Newline test"],
[7, "Табуляция\tздесь", "Tab test"],
assert "Имя\tВозраст\tГород" in tsv, "Cyrillic headers should work"
assert "Алексей\t25\tМосква" in tsv, "Cyrillic data should work"
Gates applied: no_behavioural_pass.
81b013c8a283full audit observations/trust-audit/mcp-server/jwadow__excel-12.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 81b013c8a283 | SAFE | B | 89 | first audit |
Questions
What is the Excel MCP server?
MCP server for AI agents to analyze Excel spreadsheets through atomic operations. Like SQL for Excel. Fast, accurate, and efficient. No context overflow.
What tools does Excel expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Excel safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Excel need?
No credential environment variables were found in its source, so it appears to need none.
How does Excel run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as mcp-excel.
How current is this page?
The grade is for one exact copy of the source (81b013c8a283), read on 2026-10-08. The repository is watched and re-audited when it changes.