THRONE
See report Verify server

registry / record

office-word-mcp-server

uvx / sealed 2026-06-16 / No. d590ef5c

Does office-word-mcp-server MCP work in Claude Code and Cursor? Throne executed office-word-mcp-server mcp in a single-use Firecracker microVM and replayed both recorded client behaviours. Compatibility verdict: needs launch arguments. Is office-word-mcp-server mcp safe? Static security scan: 11 finding(s) to review under security ruleset v1. The full per-step results, security findings, scan date, and evidence hash are below.

re-scan this server gate it in your CI
> throne registry office-word-mcp-server sealed
This server needs launch argumentsthe server requires command-line arguments (for example a database URL) that a bare launch does not pass, An executable named `office-word-mcp-server` is not provided by package `office-word-mcp-server`. The following executables are available: - word_mcp_server Use `uvx --from office-word-mcp-server word_mcp_server` instead.
receiptsealed evidence
scan id
d590ef5cac50400ea05f111178adedb6
target
uvx office-word-mcp-server
sealed at
2026-06-16 19:28:08Z
evidence hash
sha256:2881103c1d189a3e3b8531b5490032a23b30b33bc8809cf91e72226a820c3585
01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake, stderr: An executable named `office-word-mcp-server` is not provided by package `office-word-mcp-server`. The following executables are available: - word_mcp_server Use `uvx --from office-word-mcp-server word_mcp_server` instead.

02discoverSKIPPED0ms

not run, server never launched

03validate_schemasSKIPPED0ms

not run, server never launched

04smoke_test_toolsSKIPPED0ms

not run, server never launched

05error_handlingSKIPPED0ms

not run, server never launched

06streamingSKIPPED0ms

not run, server never launched

07resource_lifecycleSKIPPED0ms

not run, server never launched

08concurrent_callsSKIPPED0ms

not run, server never launched

09reconnectSKIPPED0ms

not run, server never launched

01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake, stderr: An executable named `office-word-mcp-server` is not provided by package `office-word-mcp-server`. The following executables are available: - word_mcp_server Use `uvx --from office-word-mcp-server word_mcp_server` instead.

02discoverSKIPPED0ms

not run, server never launched

03validate_schemasSKIPPED0ms

not run, server never launched

04smoke_test_toolsSKIPPED0ms

not run, server never launched

05error_handlingSKIPPED0ms

not run, server never launched

06streamingSKIPPED0ms

not run, server never launched

07resource_lifecycleSKIPPED0ms

not run, server never launched

08concurrent_callsSKIPPED0ms

not run, server never launched

09reconnectSKIPPED0ms

not run, server never launched

chatgpt desktop calibratingemulation profile pending real-traffic captureCOMING SOON
SECURITY: REVIEW / 11 finding(s) (10 medium) / review recommended
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

subprocess.run() called with a dynamically built command (heuristic, review): ''

office_word_mcp_server-1.1.11/setup_mcp.py:26
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

system() called with a dynamically built command (heuristic, review): ') == "Windows"'

office_word_mcp_server-1.1.11/setup_mcp.py:105
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

subprocess.run() called with a dynamically built command (heuristic, review): "[sys.executable, '-m', 'venv', venv_path], check=True)"

office_word_mcp_server-1.1.11/setup_mcp.py:131
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

subprocess.run() called with a dynamically built command (heuristic, review): "[pip_path, 'install', 'fastmcp'], check=True)"

office_word_mcp_server-1.1.11/setup_mcp.py:149
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

subprocess.run() called with a dynamically built command (heuristic, review): "[pip_path, 'install', 'python-docx'], check=True)"

office_word_mcp_server-1.1.11/setup_mcp.py:151
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

subprocess.run() called with a dynamically built command (heuristic, review): "[pip_path, 'install', '-r', requirements_path], check=True)"

office_word_mcp_server-1.1.11/setup_mcp.py:156
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

subprocess.run() called with a dynamically built command (heuristic, review): '[sys.executable, "-m", "pip", "install", "word-mcp-server"], check=True)'

office_word_mcp_server-1.1.11/setup_mcp.py:337
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

system() called with a dynamically built command (heuristic, review): ') == "Windows":'

office_word_mcp_server-1.1.11/setup_mcp.py:378
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

system() called with a dynamically built command (heuristic, review): ')'

office_word_mcp_server-1.1.11/word_document_server/tools/extended_document_tools.py:105
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

subprocess.run() called with a dynamically built command (heuristic, review): 'cmd, capture_output=True, text=True, timeout=60, check=False)'

office_word_mcp_server-1.1.11/word_document_server/tools/extended_document_tools.py:132
LOWTHR-NET-05 / Hardcoded outbound endpoints

1 non-local endpoint host(s) referenced in code, verify each is expected for this server's purpose: schemas.openxmlformats.org (office_word_mcp_server-1.1.11/word_document_server/core/comments.py:103)

office_word_mcp_server-1.1.11/word_document_server/core/comments.py:103
VERDICT: NEEDS LAUNCH ARGUMENTSSANDBOXED RUN, submitted server executed in a disposable microVM, compatibility not assessable: needs arguments: the server requires command-line arguments (for example a database URL) that a bare launch does not pass, An executable named `office-word-mcp-server` is not provided by package `office-word-mcp-server`. The following executables are available: - word_mcp_server Use `uvx --from office-word-mcp-server word_mcp_server` instead. / security: review, 11 finding(s), 0 highsealed by THRONE / No. d590ef5c / 2026-06-16
scopeattestation tuple
target
uvx office-word-mcp-server pypi
engine
sandboxed
claude code
calibration: partial recorded=9,spec=0,assumed=9
cursor
calibration: partial recorded=11,spec=0,assumed=7
chatgpt desktop
calibration: unavailable recorded=0,spec=2,assumed=16
steps exercised
18 of 18
test suite
v1.0.0
security ruleset
v1.0.0
sealed at
2026-06-16 19:28:08Z
evidence hash
sha256:2881103c1d189a3e3b8531b5490032a23b30b33bc8809cf91e72226a820c3585
valid until
2026-09-14
executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.