Word Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Word Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Windows MCP (Model Context Protocol) server that attaches to a running Microsoft Word instance via COM automation and exposes 20 tools for reading, editing, formatting, and exporting documents — live on screen.
The Word counterpart to the PowerPoint Live MCP.
The server attaches to the running Word.Application instance via win32com (pywin32). Because it talks to the live COM object, every edit appears instantly on the Word canvas — no file round-trip, no reopen.
| Category | Tool | Description |
|---|---|---|
| Discovery | list_documents | List all open Word documents |
get_active_document | Details of active document (name, path, word/para count) | |
| Read | get_document_content | Paginated paragraph listing with styles |
get_paragraph | Full text + formatting of one paragraph | |
get_table | All cell content from a table | |
get_selection | Current cursor/selection state | |
find_text | Full-text search with paragraph locations | |
| Edit | set_paragraph_text | Replace text of a paragraph |
insert_paragraph_after | Insert new paragraph after a given index | |
delete_paragraph | Delete a paragraph | |
replace_text | Find-and-replace throughout document | |
| Format | set_font | Font size/bold/italic/color/name |
set_highlight | Yellow/red/green/none highlight | |
set_paragraph_style | Apply named style (Heading 1, Normal, etc.) | |
| Tables | set_table_cell | Set cell text by (row, column) |
insert_table | Insert a new table | |
| Export | export_pdf | Export document to PDF |
export_page_image | Export single page as PNG (via PDF render) | |
| Other | update_toc | Update all Tables of Contents |
save_document | Save the document |
pip install pywin32 mcp pymupdfRun python Scripts/pywin32_postinstall.py -install once after installing pywin32.
Add to ~/.hermes/config.yaml:
mcp_servers:
word:
command: "C:/Users/You/AppData/Local/Programs/Python/Python313/python.exe"
args: ["C:/path/to/word-live-mcp/server.py"]
connect_timeout: 30
enabled: true
timeout: 90Add to claude_desktop_config.json:
{
"mcpServers": {
"word": {
"command": "python",
"args": ["C:/path/to/word-live-mcp/server.py"]
}
}
}The server communicates over stdio using the MCP protocol. Any MCP-compatible client can connect by spawning the server process.
Word must be running with a document open. Tools operate on the active document by default; pass doc="filename.docx" to target a specific open document.
Paragraph and table indices are 1-indexed (matching what you see in Word).
get_paragraph(paragraph_index=5)find_text(find="confidential")replace_text(find="old term", replace="new term")set_highlight(paragraph_index=20, color="yellow")export_page_image(page=3)set_font(paragraph_index=10, bold=True, color_rgb="FF0000")pythoncom.CoInitialize) and dispatches Word.Application, which transparently reconnects to the running instance.word_tool decorator injects the COM app handle as the first argument, but strips it from the public signature so FastMCP doesn't expose it.{"error": "...", "traceback": "..."} JSON dicts — never crash the server.MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.