libreoffice-mcpBLOCK
LibreOffice headless automation via FastMCP — Writer/Calc/Impress convert, ODT merge, PDF combine, folder watch. For Cursor / Claude Desktop.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
General-purpose LibreOffice automation for agents and humans — headless Writer, Calc, and Impress conversion, ODT template merge, PDF combine, folder watch, live Writer typewriter, and optional extension MCP.
Version 0.3.0 · INSTALL.md · docs/LIVESTUDIOPLAN.md · docs/FEATURES.md · docs/LIVEWRITER.md · docs/EXTENSIONCALC_BRIDGE.md · docs/COMPARISON-OTHER-LO-MCP.md
How it runs
Headless by default — most tools spawn headless soffice automatically. Open Writer + run the bridge macro only when you want to watch live typing. LibreOffice must be installed — INSTALL.md.Hands-in / Hands-out
Fleet pipelines (downstream)
bae8a6fa7b6bOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add libreoffice-mcp-webapp --env LIBREOFFICE_MCP_SAMPLING_API_KEY=${LIBREOFFICE_MCP_SAMPLING_API_KEY} --env LIBREOFFICE_MCP_SAMPLING_USE_OPENAI_KEY=${LIBREOFFICE_MCP_SAMPLING_USE_OPENAI_KEY} --env OPENAI_API_KEY=${OPENAI_API_KEY} -- npx -y [email protected]{
"mcpServers": {
"libreoffice-mcp-webapp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"LIBREOFFICE_MCP_SAMPLING_API_KEY": "${LIBREOFFICE_MCP_SAMPLING_API_KEY}",
"LIBREOFFICE_MCP_SAMPLING_USE_OPENAI_KEY": "${LIBREOFFICE_MCP_SAMPLING_USE_OPENAI_KEY}",
"OPENAI_API_KEY": "${OPENAI_API_KEY}"
}
}
}
}Exposed tools (3)
3 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
libreoffice_help | read | Help index for LibreOffice MCP operations and coworker PDF flows. |
show_libreoffice_status_card | read | Show soffice and extension bridge health as a Prefab card. |
show_templates_card | read | Show bundled fleet ODT templates as a Prefab gallery card. |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (3 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (1 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (23)
os.environ.copy() ... urllib.request
icon.icns
scripts/backup-repo.ps1
mod = importlib.import_module(entry_module_or_file)
LIBREOFFICE_MCP_EXTENSION_BRIDGE_URL=http://127.0.0.1:8765/mcp
LIBREOFFICE_MCP_OLLAMA_BASE_URL=http://127.0.0.1:11434
LIBREOFFICE_MCP_LMSTUDIO_BASE_URL=http://127.0.0.1:1234
LIBREOFFICE_MCP_SAMPLING_BASE_URL=http://127.0.0.1:11434/v1
# FleetStartMode.ps1 - vendored per-repo copy (no mcp-central-docs required at runtime)
# Fleet unified launcher - do not edit logic here.
# Fleet unified launcher - do not edit logic here.
.assess-fix-timestamp
.ghaudit-timestamp
.mcpbignore
.pre-commit-config.yaml
.qualitycheck-timestamp
digest = hashlib.md5(img.tobytes(), usedforsecurity=False).hexdigest()
import { api } from '../../lib/api'import { useStore } from '../../store'import { type Toast, useStore } from '../../store'# GET http://127.0.0.1:10981/health → soffice_available: true
@tauri-apps/cli
@tauri-apps/api, framer-motion, lucide-react, react-router-dom, zustand, @biomejs/biome, @playwright/test, @types/react
Gates applied: no_behavioural_pass.
bae8a6fa7b6bfull audit observations/trust-audit/mcp-server/sandraschi__libreoffice-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | bae8a6fa7b6b | BLOCK | D | 69 | first audit |
Questions
What is the libreoffice-mcp MCP server?
LibreOffice headless automation via FastMCP — Writer/Calc/Impress convert, ODT merge, PDF combine, folder watch. For Cursor / Claude Desktop.
What tools does libreoffice-mcp expose?
3 in total: 3 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is libreoffice-mcp safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does libreoffice-mcp need?
It reads LIBREOFFICE_MCP_SAMPLING_API_KEY, LIBREOFFICE_MCP_SAMPLING_USE_OPENAI_KEY and OPENAI_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does libreoffice-mcp run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as libreoffice-mcp-webapp at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (bae8a6fa7b6b), read on 2026-10-11. The repository is watched and re-audited when it changes.