MCP.Market

Sezzlee XML MCP server

by sezzlee·io.github.sezzlee/xml·v0.5.1

Query local XML documents with XPath, paged and sandboxed to one folder. Read-only.

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

0 stars190 downloads/wk

Reviews

Write one

Nobody has reviewed Sezzlee XML yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sezzlee XML tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-12 · same rubric, same numbers if you re-run it

1 medium
  • Code scan97 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/engine/xpath.js: …t raw; try { raw = document.eval(compiled); } catch (error) { …
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Sezzlee XML compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,273 servers
Downloads a week
190
more than 75% of 11,915 servers with a package

Install Sezzlee XML in Claude Code, Cursor or VS Code

Runs npx -y @sezzlee/xml-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add xml -- npx -y @sezzlee/xml-mcp
Add to Cursor

What the publisher says

From the Sezzlee XML repository's README, as published. We do not edit it. Read it on GitHub

Sezzlee MCP

Swagger for agents. Sezzlee turns what you already have — an HTTP backend, a folder of spreadsheets, a SQL Server or PostgreSQL database — into tools an AI agent can find and call over the Model Context Protocol.

It comes in two shapes:

search-first tool catalog and replays every agent call through your backend's own request pipeline, so your authentication, authorization and validation apply unchanged. For a backend on any other stack, an OpenAPI gateway builds the same catalog from its document.

  • The HTTP catalog embeds in an ASP.NET Core or NestJS backend. It exposes your endpoints as a

XML, PDF, Microsoft SQL Server and PostgreSQL, plus a server that hands bounded language work to a local model.

  • Source servers are standalone, read-only MCP servers for local files and databases: Excel,

Status: early. Every package below is on npm or NuGet; APIs may still change. The spec, the

fixture corpus and both SDKs are tested in CI.

Why

A naive MCP adapter turns every endpoint into a tool and forwards calls over the network. That floods the agent's context, loses the caller's identity and silently papers over what it cannot represent. Sezzlee instead:

whole catalog, so the size of your API does not grow the agent's context;

  • shows the agent three meta-tools (searchtools, loadtool, invoke_tool) rather than the

call in the backend at invoke time;

  • decides what a caller can see from the backend's own authorization, and still enforces every

an error with a code the agent can act on.

  • treats every silent resolution — a name collision, an unknown argument, a truncated response — as

The longer argument is on the docs site: why sezzlee is not an OpenAPI adapter.

Quick start

Pick what you need. The servers need Node.js 22+; the ASP.NET Core SDK targets .NET 8 and 10.

Each package README has its own quick start, configuration and limits. To build from source, see CONTRIBUTING.md.

Packages

HTTP catalog

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Sezzlee XML: common questions

Is Sezzlee XML MCP server safe?
Mostly: it is graded B (83/100). Read the Sezzlee XML safety report
How do I install Sezzlee XML?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Sezzlee XML need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Sezzlee XML maintained?
The last commit was 21 days ago (2026-10-12). The latest release is v0.5.1.
How does Sezzlee XML compare with other MCP servers?
safety score 83/100 (higher than 65% of 48,273 servers); downloads a week 190 (more than 75% of 11,915 servers with a package). Full comparison.

More from sezzlee →