Atlas / MCP servers / samos123 / Pptx

PptxBLOCK

mcp/samos123/pptx-2

Create Slides with a simple MCP server using Python PPTX library

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
11 1r · 8w · 2d
Transport
sse
License
Apache-2.0
Stars
35
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A FastMCP-powered server for programmatically creating, editing, and rendering PowerPoint (PPTX) presentations. Supports slide creation, text and shape insertion, image embedding, and slide rendering to PNG (with LibreOffice).

Features

  • Create/Clear Presentations: Start new or reset existing PPTX files.
  • Add Slides: Insert slides with customizable layouts.
  • Text & Content: Add titles, content, and custom textboxes to slides.
  • Shapes: Insert a wide variety of PowerPoint shapes (including flowchart elements).
  • Images: Embed images into slides.
  • Slide Description: Get a textual summary of slide contents for verification.
  • Slide Rendering: Render slides as PNG images (requires LibreOffice).
  • Download PPTX: Download the generated presentation file.

Requirements

  • Python 3.12+
  • python-pptx
  • Pillow
  • FastMCP
  • LibreOffice (for slide image rendering; must be installed separately and available in your system PATH)
  • python-dotenv (for development environment configuration)

Installation

  1. Install Python dependencies:
pip install .

(Installs from `pyproject.toml` for dependencies)

  1. Optional: Install python-dotenv for development environment variables:
pip install python-dotenv
  1. Install LibreOffice (for image rendering):
  2. Linux: sudo pacman -S libreoffice-fresh or sudo apt install libreoffice
  3. macOS: brew install --cask libreoffice
  4. Windows: Download from libreoffice.org

Usage

Start the server:

python server.py

For development with environment variables:

You can set the server's host and port using environment variables:

  • HOST (default: 127.0.0.1)
  • PORT (default: 8000)

For example, to run on all

Read from source at commit e2394eb8d554OBSERVED · 2026-10-08
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add pptx-mcp-server -- uvx pptx-mcp-server
claude-desktop
{
  "mcpServers": {
    "pptx-mcp-server": {
      "command": "uvx",
      "args": [
        "pptx-mcp-server"
      ]
    }
  }
}
03

Exposed tools (11)

1 read · 8 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
add_connectorwrite
add_picturewrite
add_shapewrite
add_slidewrite
add_textboxwrite
add_title_and_contentwrite
batch_updatewrite
create_or_clear_presentationdestructive
delete_shapedestructive
get_presentation_file_b64read
modify_shapewrite
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryFAIL
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
found

Findings (7)

HIGHHard-coded secrets · inv.env_committed · CWE-798, CWE-321
.env
.env
Why it matters. a real .env in the package
Fix. ship .env.example with placeholders only
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
agent_examples/adk/agent/agent.py:27
mcp_server_url = "http://127.0.0.1:8000/sse"
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
create_or_clear_presentation, delete_shape
Why it matters. 2 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
sse
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWInventory / provenance · inv.hidden_file · CWE-1104
.env
.env
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
server.py:1078
image_bytes = base64.b64decode(image_base64)
INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427
README.md:68
Load the environment variables when starting the server:
Why it matters. asks the agent to read credentials

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha e2394eb8d554full audit observations/trust-audit/mcp-server/samos123__pptx-2.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08e2394eb8d554BLOCKD69first audit
06

Questions

What is the Pptx MCP server?

Create Slides with a simple MCP server using Python PPTX library

What tools does Pptx expose?

11 in total: 1 read-only, 8 that write, and 2 that can delete or overwrite (create_or_clear_presentation, delete_shape). Every one is listed on this page with its risk.

Is Pptx safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 2 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Pptx need?

No credential environment variables were found in its source, so it appears to need none.

How does Pptx run?

It speaks sse, so it runs as a service you connect to over the network. It is published on PyPI as pptx-mcp-server.

How current is this page?

The grade is for one exact copy of the source (e2394eb8d554), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement