Back to Browse

Spreadsheet MCP Server

Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for spreadsheet files (.xlsx, .csv, .ods) - cell-level ops + DuckDB SQL engine.

About

MCP server for spreadsheet files (.xlsx, .csv, .ods) - cell-level ops + DuckDB SQL engine.

Security Report

7.2
Moderate7.2Low Risk

This is a well-designed spreadsheet MCP server with thoughtful security architecture. The codebase demonstrates strong practices for path validation (MCP_SPREADSHEET_ROOT), secure file operations (atomic writes), and careful input handling. No authentication is required (appropriate for a local tool), and permissions align well with the stated purpose. Minor findings relate to code quality (broad exception handling, regex validation) rather than security vulnerabilities. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

4 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Optional. Absolute path to a directory; all tool path arguments are restricted to this tree. Unset = no restriction.Optional

Environment variable: MCP_SPREADSHEET_ROOT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-marekrost-mcp-server-spreadsheet": {
      "env": {
        "MCP_SPREADSHEET_ROOT": "your-mcp-spreadsheet-root-here"
      },
      "args": [
        "mcp-server-spreadsheet"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

mcp-server-spreadsheet

mcp-name: io.github.marekrost/mcp-server-spreadsheet

Data-first MCP server for reading and writing spreadsheet files (.xlsx, .csv, .ods).

Key features

  • Multi-format — works with Excel (.xlsx), CSV (.csv), and OpenDocument (.ods) files through a unified tool interface.
  • Dual mode — cell-level workbook operations and a DuckDB-powered SQL query engine, interleaved freely on the same file.
  • Workbook essentials — worksheets, rows, columns, cells, search.
  • Data-only — preserves existing formatting but only reads and writes values.
  • Stateless — every call specifies file and sheet explicitly; no handles or sessions.
  • Atomic saves — writes go to a temp file, then os.replace() into the target path.
  • Type coercion on write — numeric strings become numbers, everything else is text.
  • SQL across sheets — JOINs, GROUP BY, aggregates, subqueries via in-memory DuckDB; mutations write back to the file.
  • CSV as single-sheet workbook — CSV files are treated as a workbook with one sheet named default.

Requirements

  • Python 3.10+

Installation

From PyPI (recommended)

No local checkout needed — just configure your MCP client (see below).

From source (for development)

git clone https://github.com/marekrost/mcp-server-spreadsheet.git
cd mcp-server-spreadsheet
uv sync

Usage

Claude Desktop

Add to your claude_desktop_config.json:

Using PyPI (recommended):

{
  "mcpServers": {
    "mcp-server-spreadsheet": {
      "command": "uvx",
      "args": ["mcp-server-spreadsheet"]
    }
  }
}

Using local source:

{
  "mcpServers": {
    "mcp-server-spreadsheet": {
      "command": "uv",
      "args": ["run", "--directory", "/path/to/mcp-server-spreadsheet", "main.py"]
    }
  }
}

Claude Code

Add to your .mcp.json:

Using PyPI (recommended):

{
  "mcpServers": {
    "mcp-server-spreadsheet": {
      "command": "uvx",
      "args": ["mcp-server-spreadsheet"]
    }
  }
}

Using local source:

{
  "mcpServers": {
    "mcp-server-spreadsheet": {
      "command": "uv",
      "args": ["run", "--directory", "/path/to/mcp-server-spreadsheet", "main.py"]
    }
  }
}

Standalone (stdio transport)

# PyPI
uvx mcp-server-spreadsheet

# Local source
uv run main.py

Restricting file access to a directory (optional)

Set MCP_SPREADSHEET_ROOT to confine all path arguments to a single directory tree. Paths outside it are rejected with a clear error returned to the agent.

{
  "mcpServers": {
    "mcp-server-spreadsheet": {
      "command": "uvx",
      "args": ["mcp-server-spreadsheet"],
      "env": { "MCP_SPREADSHEET_ROOT": "/home/me/spreadsheets" }
    }
  }
}

Unset (the default), any path the server process can access is allowed.

Format notes

FormatSheetsFormulasTypes
.xlsxMultiplePreserved as stringsNative (int, float, date, bool)
.odsMultipleNot preservedNative (int, float, date, bool)
.csvSingle (default)N/AInferred on load (int, float, text)

Sheet management tools (add_sheet, delete_sheet, copy_sheet) raise an error for CSV files.

Tools

Workbook Operations

ToolDescription
list_workbooksList all spreadsheet files in a directory (non-recursive)
create_workbook_fileCreate a new empty spreadsheet file (format by extension)
copy_workbookCopy an existing file to a new path

Sheet Operations

ToolDescription
list_sheetsList all sheet names in a workbook
add_sheetAdd a new sheet (optional name and position)
rename_sheetRename an existing sheet
delete_sheetDelete a sheet by name
copy_sheetDuplicate a sheet within a workbook (optional new name and position)

Reading Data

ToolDescription
read_sheetRead entire sheet as rows (optional row/column bounds)
read_cellRead a single cell value, e.g. B3
read_rangeRead a rectangular range, e.g. A1:D10
get_sheet_dimensionsGet row and column count of the used range

Writing Data

ToolDescription
write_cellWrite a value to a single cell
write_rangeWrite a 2D array starting at a given cell
append_rowsAppend rows after the last used row
insert_rowsInsert blank or pre-filled rows at a position (shifts rows down)
delete_rowsDelete rows by index (shifts rows up)
clear_rangeClear values in a range without removing rows/columns
copy_rangeCopy a block of cells to another location (optionally to a different sheet)

Column Operations

ToolDescription
insert_columnsInsert blank columns at a position
delete_columnsDelete columns by index

Search

ToolDescription
search_sheetSearch for a value or regex pattern, returns matching cell references

Table Mode (SQL)

ToolDescription
describe_tableInspect column names, inferred types, row count, and sample values
sql_queryExecute a read-only SQL SELECT (supports JOINs across sheets, GROUP BY, aggregates, subqueries)
sql_executeExecute INSERT INTO, UPDATE, or DELETE FROM — writes changes back to the file

SQL examples:

-- Filter and sort
SELECT name, revenue FROM Sales WHERE status = 'Active' ORDER BY revenue DESC LIMIT 20

-- Cross-sheet JOIN
SELECT o.order_id, c.name FROM Orders o JOIN Customers c ON o.customer_id = c.id

-- Aggregate
SELECT department, COUNT(*) AS n, AVG(salary) AS avg FROM Employees GROUP BY department

-- Mutate
UPDATE Sales SET status = 'Closed' WHERE quarter = 'Q1' AND revenue < 1000
DELETE FROM Logs WHERE date < '2024-01-01'

Sheet names with spaces must be quoted: SELECT * FROM "Q1 Sales".

Sheets whose table doesn't start at row 1

All three SQL tools accept header_row and data_start_row. Each can be an int (applied to every sheet) or a {sheet_name: row} mapping (sheets not listed fall back to the default). Use header_row when column titles live below row 1, and data_start_row when extra rows (e.g. a units row) sit between the header and the data.

# Header on row 3, data follows immediately
sql_query(file, 'SELECT * FROM "People"', header_row=3)

# Mixed workbook: People headers at row 3, Orders header at row 1 with a
# units row at row 2.
sql_query(
    file,
    'SELECT * FROM "Orders" o JOIN "People" p ON o.name = p.name',
    header_row={"People": 3, "Orders": 1},
    data_start_row={"Orders": 3},
)

sql_execute preserves rows above header_row when writing changes back.

Running tests

uv sync --group dev
uv run pytest

Every tool is exercised against .xlsx, .csv, and .ods fixtures generated into a temp directory.

Common Parameters

Every sheet-level tool accepts:

ParameterRequiredDescription
fileyesPath to the spreadsheet file (.xlsx, .csv, or .ods)
sheetnoSheet name. Defaults to the first sheet in the workbook

All row/column indices are 1-based. Cell references use A1 notation (A1, $B$2).

Reviews

No reviews yet

Be the first to review this server!