xlwings-mcp-server-fastmcp
Provides an MCP server (stdio transport) that uses xlwings to automate Microsoft Excel through session-based operations (open workbook sessions, read/write cell data, apply formulas, manage worksheets/ranges/tables, and create charts), with configurable session TTL and limits.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
No explicit auth described; MCP runs over stdio and is presumably intended for trusted local use. The server accepts file paths and can modify workbooks; this increases risk if exposed to untrusted clients. TLS is not applicable to stdio transport. Secret handling is not documented; typical best practice would be to avoid logging environment variables and workbook contents, but the README only mentions a debug log flag without detailing redaction.
⚡ Reliability
Best When
You run a trusted MCP client locally/in a controlled environment on Windows with Excel installed, and you want an agent to manipulate workbooks via a persistent session API.
Avoid When
You expose the MCP server to untrusted networks/users or you cannot restrict what file paths, formulas, and workbook mutations the client can request.
Use Cases
- • AI agents that need to programmatically read and transform Excel spreadsheets
- • Generating reports by writing data, applying formulas, and formatting output
- • Automating workbook structure changes (worksheets, tables, ranges)
- • Creating charts from a specified data range
- • Batch processing with session reuse to reduce Excel startup overhead
Not For
- • Running on non-Windows environments (required for xlwings COM/pywin32)
- • Public multi-tenant deployment without additional network/auth controls
- • Use cases requiring strong access control over which files/cells can be modified per user
- • High-security environments where sending arbitrary file paths and formulas to an automation service is unacceptable
Interface
Authentication
README does not describe any authentication/authorization mechanism for MCP connections or tool invocations. Tool access appears uncontrolled aside from environment and OS-level/network controls.
Pricing
Agent Metadata
Known Gotchas
- ⚠ Session expiry (TTL) can cause 'Session Not Found' errors if operations take too long.
- ⚠ Excel automation is Windows/COM dependent; tool calls will fail without Excel and COM available.
- ⚠ Operations are stateful and likely order-dependent (e.g., writing requires an open workbook session).
- ⚠ Excel formula application may behave differently depending on calculation settings (EXCEL_MCP_CALC_MODE).
Alternatives
Full Evaluation Report
Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for xlwings-mcp-server-fastmcp.
AI-powered analysis · PDF + markdown · Delivered within 30 minutes
Package Brief
Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.
Delivered within 10 minutes
Score Monitoring
Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.
Continuous monitoring
Scores are editorial opinions as of 2026-04-04.