Chat Order Excel Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Chat Order Excel Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for parsing WeChat order messages, merging follow-up updates, and writing structured orders into a OneDrive Excel workbook.
Field mapping: docs/FIELD_MAPPING.md OpenClaw integration: docs/OPENCLAW_INTEGRATION.md Project roadmap: TODO.md
cy-excel-mcp is built for order-entry workflows where salespeople send order details through chat, sometimes as plain text, sometimes as follow-up updates after an image or partial draft.
The server converts those messages into structured JSON, merges updates into the same order, and writes the final result into a OneDrive Excel table through Microsoft Graph.
单号:26.3.13-7
测试客户A
示例产品2000支105元
收件人: 测试联系人
手机号码: 13800000000
收货地址:测试省测试市测试区示例路88号{
"日期": "2026-03-13",
"单号": "26.3.13-7",
"销售员": "业务员A",
"客户": "测试客户A",
"货品名称": "示例产品",
"数量": "2000",
"数量单位": "支",
"销售金额": "105",
"总货款": "105",
"已收": "105",
"未收": "0",
"收货联系人": "测试联系人",
"收货人电话": "13800000000",
"收货地址": "测试省测试市测试区示例路88号"
}ingest_order_messageThis repository should only contain desensitized sample text and JSON. Do not commit real customer names, phone numbers, addresses, order screenshots, or payment details.
ingest_order_messageparse_wechat_order_messagemerge_order_updateprocess_excel_ordercheck_product_catalog_statusrefresh_product_catalogresolve_product_nameanalyze_product_catalog_patternsgit clone <your-repo-url> cy-excel-mcp
cd cy-excel-mcp
./bootstrap.sh
cp .env.example .envEdit .env:
OC_OD_TENANT_ID=consumers
OC_OD_CLIENT_ID=your_microsoft_app_client_id
OC_OD_FILE_PATH=YourFolder/订单汇总.xlsx
OC_OD_TABLE_NAME=表1
OC_OD_CACHE_FILE=onedrive_token_cache.bin
OC_OD_PRODUCT_FILE_PATH=众一/2026诚亿报表.xlsx
OC_OD_PRODUCT_SHEET_NAME=产品明细
OC_OD_PRODUCT_CODE_COLUMN=A
OC_OD_PRODUCT_NAME_COLUMN=B
OC_OD_PRODUCT_CATEGORY_COLUMN=C
CY_PRODUCT_CACHE_FILE=product_catalog_cache.json
CY_PRODUCT_ALIAS_FILE=product_aliases.json
CY_EXCEL_MCP_HOST=127.0.0.1
CY_EXCEL_MCP_PORT=18061
CY_EXCEL_MCP_TRANSPORT=streamable-httpStart the server:
./start_cy_excel_mcp_http.shThe default MCP endpoint is:
http://127.0.0.1:18061/mcppython3 -m venv .venv
. .venv/bin/activate
pip install --upgrade pip
pip install -e .Or run directly after installation:
cy-excel-mcp --transport streamable-http --host 127.0.0.1 --port 18061Example mcporter.json:
{
"mcpServers": {
"cy-excel-mcp": {
"baseUrl": "http://127.0.0.1:18061/mcp"
}
},
"imports": []
}An example file is also included at config/mcporter.json.example.
Detailed runtime notes are available in docs/RUNNING.md. Chinese runtime notes are available in docs/RUNNING.zh-CN.md. OpenClaw integration notes are available in docs/OPENCLAW_INTEGRATION.md.
ingest_order_messageingest_order_message with existing_orderparse_wechat_order_messagemerge_order_updateprocess_excel_order单号客户匹配客户别名cy_excel_mcp.py: MCP server implementationstart_cy_excel_mcp_http.sh: local HTTP startup scriptbootstrap.sh: one-command local setup.env.example: environment variable templateconfig/mcporter.json.example: OpenClaw MCP config templateOC_OD_TENANT_ID=consumers.OC_OD_FILE_PATH can include a nested folder path such as YourFolder/订单汇总.xlsx.OC_OD_TABLE_NAME must be the Excel table object name, not the worksheet name.OC_OD_PRODUCT_SHEET_NAME in OC_OD_PRODUCT_FILE_PATH.编号 if that column exists in the target order table.oz, ml, color, and material before generic text similarity.product_catalog_cache.json when the file has not changed.onedrive_token_cache.bin and reused on later runs..env and onedrive_token_cache.bin out of version control.__pycache__ are already ignored by .gitignore.MIT. See LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.