Csvbox MCP server

Read from the package source without running it. The installed server may list more.

• create_importer_from_promptwrite action

  Generate a COMPLETE CSVBox sheet from a natural-language prompt via a configured LLM, validate it locally, then create it via POST /1.1/sheet. Returns { generated_schema, source, validation, api_response }. Aborts (no API call) if no LLM provider is configured or if validation fails. Requires ANTHROPIC_API_KEY or OPENAI_API_KEY plus CSVBox credentials.

• create_sheetwrite action

  Create a new CSVBox sheet via POST /1.1/sheet. Input: { sheet }. Returns the API response.

• generate_import_code

  Generate complete CSVBox importer integration code for a framework (vanilla-js, react, vuejs2 [Vue 2], vuejs3 [Vue 3], angular [Angular 8-13], angular2 [Angular 14+]). Input: { framework }. Replace the license key placeholder with your sheet's license key.

• generate_sheet_functions

  Author CSVBox virtual_columns, validation_functions, and data_transforms from a natural-language prompt using a configured LLM. Does NOT call the CSVBox API — it returns JSON so you can REVIEW the generated JavaScript before applying it with patch_sheet. Collections the request does not imply are omitted, never returned as empty arrays. Returns { virtual_columns?, validation_functions?, data_trans

• generate_sheet_json

  Generate a COMPLETE CSVBox sheet (title, sheet_columns, destinations, webhooks, security_settings, steps) from a natural-language prompt using a configured LLM. Does NOT call the CSVBox API. Returns { sheet, source, validation }. Requires ANTHROPIC_API_KEY or OPENAI_API_KEY; without one it returns an error pointing to the create_csvbox_sheet MCP prompt. Input: { prompt }.

• patch_sheetwrite action

  Partially update a CSVBox sheet via PATCH /1.1/sheet/{sheet_license_key}. Sends only the changes object. Input: { sheet_license_key, changes }. Returns the API response. PATCH MERGES: only the items you list are touched and nothing is deleted implicitly, so an empty array is a no-op. Items in virtual_columns, validation_functions and data_transforms are matched by column_name / function_name / tra

• submit_filewrite action

  Submit a file for import via POST /1.1/file. Provide exactly one of public_file_url (JSON submission) or file_base64 + file_name (multipart direct upload — file_base64 is decoded server-side and sent to CSVBox as true binary multipart content, never as a base64 string). Input: { sheet_license_key, public_file_url? | (file_base64?, file_name?), file_sheet_name?, user?, options?, dynamic_columns? }.

• update_sheetwrite action

  Replace an existing CSVBox sheet via PUT /1.1/sheet/{sheet_license_key}. Input: { sheet_license_key, sheet }. Returns the API response. DESTRUCTIVE: PUT is authoritative for every collection it sends — items listed are created or updated in place, and any existing item the array does not name is DELETED. This applies to virtual_columns, validation_functions and data_transforms: sending an empty ar

• validate_schema

• Code scan39 source files scanned13/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 8 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Safety score

66/100

higher than 18% of 1,299 Productivity servers

Tools

9

the typical Productivity server has 7

Tools that change things

56%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

1

more than 50% of 854 Productivity servers

Downloads a week

45

more than 34% of 427 Productivity servers with a package

Csvbox: common questions

Is Csvbox MCP server safe?

With care: it is graded C, so read the findings first (66/100). Read the Csvbox safety report

How do I install Csvbox?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Csvbox need an API key?

Yes. The registry entry asks for CSVBOX_API_KEY, CSVBOX_API_SECRET, OPENAI_API_KEY, ANTHROPIC_API_KEY.

Is Csvbox maintained?

The last commit was 12 days ago (2026-10-23). The latest release is v1.0.1.

What can I use instead of Csvbox?

Servers from other publishers that do the same job: MCP Server for Excel, Gsheets MCP server and Sheets MCP server.

How does Csvbox compare with other Productivity MCP servers?

safety score 66/100 (higher than 18% of 1,299 Productivity servers); tools 9 (the typical Productivity server has 7); tools that change things 56% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.