OLETools Secure MCP Server

Secure MCP server for analyzing Excel files with oletools

Local serverstdioPython

What is the OLETools Secure MCP Server?

Secure MCP server for analyzing Excel files with oletools

What you get

This project provides a secure microservice using FastMCP to analyze Microsoft Office documents (Excel, Word, PowerPoint) and related file types (like XLL add-ins) for potential malicious content using static analysis techniques. It leverages external tools like oletools, XLMMacroDeobfuscator, and pefile.

  • Analyzes VBA Macros (olevba)
  • Detects XLM Macros (XLMMacroDeobfuscator, olevba)
  • Checks for DDE Links (msodde)
  • Extracts embedded OLE Objects (oleobj)
  • Analyzes XLL file exports for suspicious functions (pefile)
  • Extracts IOCs (URLs, IPs, Hashes, Emails) using iocextract

Configuration and credentials

  • Python 3.6+ - OLETools: Install via pip install oletools - XLMMacroDeobfuscator: Install via pip install XLMMacroDeobfuscator - python-magic: Install via pip install python-magic-bin (Windows) - iocextract (optional): Install via pip install iocextract for advanced IOC extraction - Claude Desktop application

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the OLETools Secure MCP Server

{
  "mcpServers": {
    "oletools": {
      "command": "uvx",
      "args": ["oletools"]
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

  • Python 3.6+ - OLETools: Install via pip install oletools - XLMMacroDeobfuscator: Install via pip install XLMMacroDeobfuscator - python-magic: Install via pip install python-magic-bin (Windows) - iocextract (optional): Install via pip install iocextract for advanced IOC extraction - Claude Desktop application

Frequently asked questions

Python 3.6+, plus `oletools`, `XLMMacroDeobfuscator`, `python-magic` (or `python-magic-bin` on Windows), and optionally `iocextract`.