77 document tools
Create, read, append, edit and convert docx/xlsx/pptx — tables, images, charts, headers and footers, TOC, comments, backgrounds and more.
← Store · // product
OnlyOffice MCP.
A pure-Python Model Context Protocol server that lets an AI create, read, edit and convert Word, Excel and PowerPoint documents — with a defence-in-depth layer against document-borne attacks and prompt injection.
from $299support & customisation
ℹ Active alphaThis tool is in active alpha (v0.3.0a8): tool names, schemas and storage layout may change between releases. Smoke-tested, not yet battle-tested. Provided as-is, without warranty.
// what it is
Give an AI real Office documents — safely
OnlyOffice MCP Server gives an AI assistant 77 async tools for working with genuine Office documents — .docx, .xlsx and .pptx — in the same OOXML format Microsoft Office and ONLYOFFICE use, so everything it produces opens natively across every major suite.
It is more than a writer: every mutating call is journaled to a per-document history you can query, diff and revert; an AI “virtual cursor” tracks the current paragraph, cell or slide across calls; and it renders pages to PNG so a model can visually verify its own work.
Because documents are a classic malware and prompt-injection vector, the server ships defence-in-depth: zip-bomb and XML-entity protection, path-traversal and sensitive-path blocking, macro/VBA detection, a format-conversion whitelist, deletion rate-limiting with an audit trail, and prompt-injection scanning that flags adversarial text the moment a document is read.
// capabilities
What it does
Seventy-seven tools across three formats, wrapped in a security layer built for untrusted files.
Version history & revert
Every change is journaled per document; query the history, see exactly what was removed, and revert to any snapshot.
Prompt-injection scanning
Reads scan document text for ten adversarial patterns and return content warnings instead of blindly trusting the file.
Document-borne-attack defence
Zip-bomb detection, XXE/billion-laughs blocking, ReDoS rejection, macro/VBA detection and a strict conversion whitelist.
Safe deletion
Soft-delete trash with restore, mass-deletion detection, rate limiting, sensitive-path blocking and an immutable audit log.
Native charts & preview
Bar, line, pie, scatter and area charts across all three formats, plus page-to-PNG rendering for AI visual verification.
// under the hood
Specifications
- Language
- Pure Python (≥ 3.10)
- Package
- onlyoffice-mcp 0.3.0a8 (alpha)
- License
- MIT
- Interface
- Model Context Protocol — 77 async tools
- Dependencies
- python-docx, openpyxl, python-pptx, lxml, matplotlib, pillow
- Optional
- ONLYOFFICE Document Builder / LibreOffice for higher-fidelity conversion
// what you pay for
Support, not a paywall
The source is open (MIT). The fee covers wiring it into your assistant and hardening it for your workflow.
- Setup & integration — connected to your MCP-capable assistant and configured for your document workflows.
- Custom tools — new document operations, templates or export paths built for your needs.
- Fixes & hardening, prioritised for you — issues you hit move to the front of the queue, alpha rough edges included.
- A direct line to the engineer who wrote it — no support tier relaying questions to a team you never meet.
// the fine print
Terms & liability
Provided as-is. To the maximum extent permitted by law, Cyber Sec and Stephan Botes accept no liability for any direct, indirect, incidental or consequential damage, data loss or service disruption arising from the use of this software. It is provided as-is and without warranty of any kind.
What the fee buys. The price shown is a starting point and covers the engineer’s time — setup, integration, fixes, improvements and customisation. Where the source is public, you are paying for the work and the time, not for access.
Questions about scope, licensing, or authorization? Get in touch first.