oletools-mcp-server
If you are the rightful owner of oletools-mcp-server and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
OLETools Secure MCP Server is a microservice using FastMCP to analyze Microsoft Office documents for potential malicious content.
The OLETools Secure MCP Server is a robust microservice designed to analyze Microsoft Office documents and related file types for potential malicious content using static analysis techniques. It utilizes the FastMCP protocol to provide a secure and efficient analysis environment. The server leverages a suite of external tools, including oletools, XLMMacroDeobfuscator, and pefile, to perform comprehensive analyses. Key functionalities include the analysis of VBA and XLM macros, detection of DDE links, extraction of embedded OLE objects, and analysis of XLL file exports for suspicious functions. Additionally, it extracts Indicators of Compromise (IOCs) such as URLs, IPs, hashes, and emails using iocextract. The server also includes basic MIME type and file size validation using python-magic and employs a configurable scoring system for basic risk classification. It is designed for seamless integration with systems supporting the MCP protocol, such as compatible versions of Claude Desktop.
Features
- Analyzes VBA Macros using olevba
- Detects XLM Macros with XLMMacroDeobfuscator and olevba
- Checks for DDE Links using msodde
- Extracts embedded OLE Objects with oleobj
- Analyzes XLL file exports for suspicious functions using pefile
Tools
olevba
Analysis of VBA macros
XLMMacroDeobfuscator
Detect XLM macros
msodde
Check DDE link
oleobj
Extract embedded OLE objects
pefile
Analyze suspicious functions in XLL file export
iocextract
Extract IOC (URL, IP, hash, email)
python-magic
Provide basic MIME type and file size verification
