mcp-server-excel
Automate real Microsoft Excel with AI via MCP Server or CLI — Power Query, DAX, VBA, PivotTables, and charts.
No outside reports on file
This tool has direct access to Excel and your Windows system, so it can modify or leak any data you can access—only use it with trusted AI prompts and files you've verified are safe.
Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsNo API token requiredLOW
- Package sourcenpm (@sbroenne/mcp-server-excel-win32-x64)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
npx -y @sbroenne/mcp-server-excel-win32-x64Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: B (from public signals such as stars and downloads, not a code review). Graded 2026-10-21.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About MCP Server Excel
This MCP connector lets AI systems control Microsoft Excel on Windows, running real spreadsheet operations like formulas, pivot tables, charts, and VBA macros. It claims to support 412 different operations and can be used through an MCP server or command-line interface.
Who it’s for
Developers and teams who want to automate Excel tasks with AI assistance, particularly those using Windows systems and Claude or other AI tools that support MCP connectors.
Alternatives
- Microsoft Excel REST API (cloud-based, limited scope, better sandboxing)
- OpenPyXL or pandas (Python libraries for safe, read-only spreadsheet analysis)
- Google Sheets API (cloud-native, easier permission controls)
- Zapier or Power Automate (managed automation with built-in security checks)
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README for installation instructions. The package appears to be distributed as Windows-specific npm modules; check https://github.com/sbroenne/mcp-server-excel (opens external site) for setup details specific to your Claude Desktop or MCP environment.
Why this grade
Signal-based grade (4/7 points): well starred on GitHub, listed in several sources, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 834
- Listing last refreshed
- 2026-10-30
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Direct Excel control: The tool can execute VBA macros and formulas, which could modify, delete, or leak data from any spreadsheet the user has access to
- Formula injection: Spreadsheet formulas designed by attackers (hidden in data files) could trick the AI into running harmful operations
- Macro execution: VBA macros embedded in Excel files can run system commands, so the AI could be tricked into opening a malicious spreadsheet
- File system access: The connector can read and write files via Excel's native file operations, potentially exposing sensitive data
- No sandboxing: Unlike web-based tools, this directly accesses your Windows system's Excel installation with your user permissions
How to lower the risk
Least-privilege permissions
- Run the connector under a Windows user account with minimal file access
- Restrict which folders and drives the Excel instance can reach
Network isolation
- Keep the AI system separate from sensitive corporate networks if possible
- Disable external data connections in Excel (Power Query, web imports)
Monitoring
- Log which files and operations the connector performs
- Review Excel's recent-files history regularly for unexpected spreadsheets
Red flags to watch for
- Prompts asking you to open unknown or suspicious Excel files
- Requests to enable macros or edit VBA code without clear reason
- Unusual file access or formulas being created automatically
Questions
How do I install MCP Server Excel?
Run npx -y @sbroenne/mcp-server-excel-win32-x64 in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page. Full setup docs and environment variables are in github.com/sbroenne/mcp-server-excel.
Are there security reports about MCP Server Excel?
No reports found for this package in our research (last checked 2026-10-30). MCP Server Excel currently holds Grade B (Some risk signals) based on public adoption and transparency signals. Key risk areas to watch include direct excel control, formula injection, macro execution.
Is MCP Server Excel actively maintained?
MCP Server Excel has 834 GitHub stars. Our directory data was last refreshed on 2026-10-30. Check recent commit activity, release tags, and open issues at github.com/sbroenne/mcp-server-excel before pinning it in production.
What are alternatives to MCP Server Excel?
Notable alternatives to MCP Server Excel include Microsoft Excel REST API, OpenPyXL or pandas, Google Sheets API, Zapier or Power Automate. You can also compare MCP Server Excel side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use MCP Server Excel? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/sbroenne-mcp-server-excel)HTML embed:
<a href="https://agentarmorhq.com/skills/sbroenne-mcp-server-excel"><img src="https://agentarmorhq.com/api/badge/sbroenne-mcp-server-excel" alt="AgentArmorHQ Risk Grade for MCP Server Excel" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "sbroenne-mcp-server-excel"Share with your security lead
Need sign-off to use mcp-server-excel? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: mcp-server-excel
- **Listing URL:** https://agentarmorhq.com/skills/sbroenne-mcp-server-excel
- **Type:** App connector
- **Risk Grade:** Grade B (Some risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 834 GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** npm (@sbroenne/mcp-server-excel-win32-x64)
#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts @sbroenne/mcp-server-excel-win32-x64`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- sbroenne
- Source code
- github.com/sbroenne/mcp-server-excel
- Install command
- npm install @sbroenne/mcp-server-excel-win32-x64
- Est. context load
- ~1.4k tokens / turn (~8 tool schemas, 0.68% of 200k context)
- Popularity
- 834 GitHub stars
- Last updated
- 2026-10-30
- Last graded
- 2026-10-21
Community
Discussions for MCP Server Excel
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude