
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
excel-agent-mcp
Advanced tools
An MCP server that lets AI agents read real, messy Excel files: multiple sheets, title rows, merged cells.
Let your AI agent read real, messy Excel files. An MCP server that handles the things LLMs choke on: multiple sheets, title rows sitting above the actual table, and merged cells.
If you paste a spreadsheet into a prompt, the model has to guess where the data starts and what the merged cells mean, and it often gets it wrong. This reads the file properly with deterministic code, so the values are exact and the model never invents cell contents.
A real spreadsheet almost never starts cleanly at cell A1:
A1: Quarterly Sales Report 2024 <- title, not data
A2: Generated by finance <- note, not data
A3: (blank)
A4: Region | Product | Units <- the actual header
A5: North | Widget | 120
...
Ask an LLM to read that and it'll often treat the title as a column. read_table auto-detects that
the header is on row 4 and returns clean records. Merged cells (a value spanning several rows) get
forward-filled, so rows don't lose their category.
| Tool | What it does |
|---|---|
list_sheets(path) | Every sheet in the workbook, with its size |
preview_sheet(path, sheet, rows) | Top rows as a grid, so the agent can see the layout |
read_table(path, sheet) | The actual data table as records. Reports the decisions that could be wrong: header_source (explicit / auto-detected), header_confidence, and forward_filled_columns (values inferred from merged cells, not read) |
sheet_to_csv(path, sheet) | The table as clean CSV text |
The fastest way to use this is with an MCP client like Claude Desktop. Three steps:
1. Install it
pip install "excel-agent-mcp[mcp]"
2. Add it to your client's config
Claude Desktop's config lives here:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonAdd the server:
{
"mcpServers": {
"excel": { "command": "excel-agent-mcp" }
}
}
3. Restart Claude Desktop. You'll see a tools icon appear, meaning the server is connected.
That's it. Now ask about any .xlsx file on your machine:
You: What's in /Users/me/reports/sales.xlsx?
Agent (calls list_sheets, then read_table):
The workbook has one sheet, "Q1". The table starts on row 4 (the rows above
are a title). 3 rows: North/Widget/2400, South/Widget/3000, South/Gadget/2400.
Total revenue 7800.
The agent reads the real file instead of guessing, so the numbers are exact.
Restricting file access: to stop the agent reading anything outside one folder, set
EXCEL_MCP_ALLOWED_DIR. See SECURITY.md.
The same server works in any MCP client, only the config differs. Use excel-agent-mcp as the command.
Cursor — ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Same shape as Claude
Desktop, and it hot-reloads (no restart):
{ "mcpServers": { "excel": { "command": "excel-agent-mcp" } } }
VS Code / GitHub Copilot — .vscode/mcp.json. Note the different key (servers, not mcpServers)
and the required type. Tools only run in Copilot Agent mode:
{ "servers": { "excel": { "type": "stdio", "command": "excel-agent-mcp" } } }
Windsurf — ~/.codeium/windsurf/mcp_config.json (create it if missing). Same shape as Claude
Desktop:
{ "mcpServers": { "excel": { "command": "excel-agent-mcp" } } }
Cline — add it from the extension's MCP settings panel in VS Code (command: excel-agent-mcp).
read_table doesn't just return the data, it tells you how confident it is, so you can trust a clean
parse and double-check a guess:
{
"columns": ["Region", "Product", "Revenue"],
"rows": [ ... ],
"header_row": 3,
"header_source": "auto-detected",
"header_confidence": 0.42,
"forward_filled_columns": ["Region"]
}
header_source — "explicit" if you told it which row is the header, "auto-detected" if it
guessed.header_confidence — 0..1 for an auto-detected header. A low value means it was a close call;
if the result looks off, pass an explicit header_row.looks_clean + table_warnings — a verdict on the table as a whole (flags low header confidence, unnamed columns, mostly-empty tables), separate from the per-column signals below.forward_filled_columns — columns whose values came from a merged cell. Those values are
inferred (copied down to fill the block), not read cell-by-cell, so treat them accordingly.The idea: surface the decisions that could be wrong, instead of handing back tidy-looking output that hides a guess.
from excel_mcp import reader
reader.list_sheets("report.xlsx")
reader.read_table("report.xlsx", "Sales") # {'columns': [...], 'header_source': ..., ...}
reader.sheet_to_csv("report.xlsx", "Sales")
python -m unittest discover -s tests # builds its own messy xlsx, runs anywhere
MIT
FAQs
An MCP server that lets AI agents read real, messy Excel files: multiple sheets, title rows, merged cells.
We found that excel-agent-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.