MCP.Market

Is Csvbox MCP server safe?

Probably. Read the findings first.

C66/100grade C

Use with care. Some checks failed or could not be verified.

What to know before installing
  • highNetwork call to a paste/tunnel/webhook host

How Csvbox compares

Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
66/100
higher than 18% of 1,299 Productivity servers
Tools that change things
56%
typical: 0%. Fewer write tools means less an agent can break

What its tools let an agent do: 1 read · 5 create · 3 change

Public scan report

scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it

1 high
  • Code scan39 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Findings (1)

  • highNetwork call to a paste/tunnel/webhook hostnet.suspicious-host
    dist/prompts/sheet-system-prompt.js: …pi and import-complete event webhook as https://webhook.site/... with headers samsung-mobile-api-key…
Overall 66/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Csvbox does

  • MCP Server for Excel
    Excel automation for AI - Sheets, Power Query, DAX, VBA, Tables, Ranges and more. Windows only.
    A
  • Gsheets
    MCP server for Google Sheets API — read, write, format, batch operations.
    B
  • Sheets MCP
    Google Sheets for agent workflows in Claude Code and Claude Desktop: APIs, files, schedules, undo.
    A

Csvbox reviews, tools and install