excel-online-mcp-server-by-cdata
Provides a local, read-only MCP server that wraps CData’s JDBC Driver for Excel Online, exposing Excel Online content as relational tables/columns and allowing tool-based SQL SELECT queries via an MCP (stdio) interface for AI clients like Claude Desktop.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
Security controls are largely delegated to the local CData JDBC driver configuration (.prp with JdbcUrl and possibly OAuth tokens). The MCP server is local stdio (reducing network exposure), but the README provides no details on token storage, logging redaction, transport security within the MCP layer, or any MCP-level authorization/role scoping. Arbitrary SQL via run_query increases risk of data overreach if the agent has broad access to tools and tables.
⚡ Reliability
Best When
You want a local MCP integration to query Excel Online data for an on-device desktop client, and you are willing to install/configure the CData JDBC driver plus a local MCP server jar.
Avoid When
You need fine-grained security controls, audited access logs, or robust network exposure (since it’s local stdio and credentials/config are handled via a local .prp file).
Use Cases
- • Let an AI assistant answer questions about live Excel Online data using natural language (no manual SQL).
- • Explore available Excel Online tables and columns via MCP tools.
- • Run read-only SQL SELECT queries against Excel Online tables through an MCP client.
Not For
- • Use as a standalone remote service (stdio limits it to local clients on the same machine).
- • Applications requiring write/update/delete capabilities (the project is explicitly read-only).
- • Teams needing a managed hosted MCP endpoint with built-in scaling/observability.
Interface
Authentication
Authentication is delegated to the CData JDBC driver; the README notes OAuth may be required and is performed in a browser. No additional MCP-level auth is described.
Pricing
No pricing for this repo itself is provided; it requires CData JDBC driver licensing to function.
Agent Metadata
Known Gotchas
- ⚠ Server is stdio-based and can only be used with clients running on the same machine as the server.
- ⚠ It is described as a read-only MCP server; attempts to perform write/update/delete may fail or be unsupported.
- ⚠ The README example SQL includes direct SELECT; agents should avoid injecting unsafe SQL patterns and should be mindful that tool accepts an arbitrary SQL string (query results may depend on driver table/column naming and quoting).
- ⚠ OAuth flows (if used) happen during CData JDBC connection configuration; the MCP server itself does not appear to manage auth renewal explicitly in this README.
Alternatives
Full Evaluation Report
Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for excel-online-mcp-server-by-cdata.
AI-powered analysis · PDF + markdown · Delivered within 30 minutes
Package Brief
Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.
Delivered within 10 minutes
Score Monitoring
Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.
Continuous monitoring
Scores are editorial opinions as of 2026-04-04.