Office Oxide MCP server
Rust-native MCP server for Office document processing
D49/100grade D
Adoption
Growing
163 stars
Reviews
Write oneNobody has reviewed Office Oxide yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Office Oxide tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
1 high2 medium
- Code scan4 source files scanned3/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 103 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (3)
- mediumnpm install lifecycle script present
install.script - highShell command built from a string (injection risk)
exec.shell-concatinstall.js: …if (platform() !== 'win32') { execSync(`chmod +x "${dest}"`); } resolve(); … - mediumnpm install lifecycle script present
install.scriptpackage.json: …-mcp": "run.js" }, "scripts": { "postinstall": "node install.js" }, "repository": …
Overall 49/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
How Office Oxide compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 49/100
- higher than 9% of 48,255 servers
- GitHub stars
- 163
- more than 95% of 28,688 servers
Install Office Oxide in Claude Code, Cursor or VS Code
Runs npx -y @aimino/opendocswork-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add office-oxide-mcp -- npx -y @aimino/opendocswork-mcp
Office Oxide: common questions
- Is Office Oxide MCP server safe?
- Not recommended: it is graded D (49/100). Read the Office Oxide safety report
- How do I install Office Oxide?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Office Oxide need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Office Oxide maintained?
- The last commit was 141 days ago (2026-06-16). The latest release is v0.2.1.
- How does Office Oxide compare with other MCP servers?
- safety score 49/100 (higher than 9% of 48,255 servers); github stars 163 (more than 95% of 28,688 servers). Full comparison.