mcpField
O
OLETools Secure MCP Server

OLETools Secure MCP Server

Local
github.com/pradeep895Security4Updated 82w ago
Repository

About OLETools Secure MCP Server

OLETools Secure MCP Server is an MCP service for static analysis of Office documents and related files, aimed at malware investigation. It combines macro, embedded-object, XLL, and indicator checks with configurable risk scoring.

Key features

  1. 01VBA and XLM macro analysis
  2. 02DDE link detection
  3. 03Embedded OLE object extraction
  4. 04XLL export inspection
  5. 05IOC extraction and risk scoring

Use cases

  1. 01Screening Office files for malicious macros
  2. 02Checking XLL add-ins for suspicious exports
  3. 03Extracting indicators from submitted documents

MCP support

It exposes document-analysis tools to MCP clients, including compatible versions of Claude Desktop.

#oletools#mcp-server#malware-analysis

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

No install method listed yet

We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.

Repository

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

OLETools Secure MCP Server

This project provides a secure microservice using FastMCP to analyze Microsoft Office documents (Excel, Word, PowerPoint) and related file types (like XLL add-ins) for potential malicious content using static analysis techniques. It leverages external tools like oletools, XLMMacroDeobfuscator, and pefile.

Features

  • Analyzes VBA Macros (olevba)
  • Detects XLM Macros (XLMMacroDeobfuscator, olevba)
  • Checks for DDE Links (msodde)
  • Extracts embedded OLE Objects (oleobj)
  • Analyzes XLL file exports for suspicious functions (pefile)
  • Extracts IOCs (URLs, IPs, Hashes, Emails) using iocextract
  • Provides basic MIME type and file size validation (python-magic)
  • Uses a configurable scoring system for basic risk classification
  • Designed for integration with systems supporting the MCP protocol (like compatible versions of Claude Desktop).

Prerequisites

  • Python 3.6+
  • OLETools: Install via pip install oletools
  • XLMMacroDeobfuscator: Install via pip install XLMMacroDeobfuscator
  • python-magic: Install via pip install python-magic-bin (Windows)
  • iocextract (optional): Install via pip install iocextract for advanced IOC extraction
  • Claude Desktop application

Installation

  1. Clone the Repository: 
    git clone https://github.com/pradeep895/oletools-mcp-server.git
cd oletools-mcp-server
  2. Install Dependencies:
pip install -r requirements.txt
  1. Download the "Claude Desktop" application go to the Developer settings and Edit the "claude_desktop_config.json" file and paste content in the configuration.json file.Restart the application.
  2. Run the config file:
python config.py
  1. Run the server:
python mcp_service.py
  1. Go to "Claude Desktop" application and check for the "hammer symbol" it appeared means MCP tools are available.
  2. type "analyze_vba_macros in <filepath\example.xlsm>" this will help you to analyze the excel file statically and gave you the findings.
analyze_vba_macros file_path:"C:\path\to\your\example.xlsm"

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.