sqlite-spreadsheet-sync-mcp

Item: sqlite-spreadsheet-sync-mcp
Rating: 58
Author: M8ven

This MCP server enables AI assistants to interact with a SQLite database through a spreadsheet-like interface, supporting operations such as querying, editing, importing Excel/CSV, and managing table structures via natural language.

→ MauricioPerera/sqlite-spreadsheet-sync · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 8 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies8 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highmulter@1.4.5-lts.1GHSA-44fp-w29j-9vj5

Multer vulnerable to Denial of Service via memory leaks from unclosed streams

highmulter@1.4.5-lts.1GHSA-4pg4-qvpc-4q3h

Multer vulnerable to Denial of Service from maliciously crafted requests

highmulter@1.4.5-lts.1GHSA-5528-5vmv-3xc2

Multer Vulnerable to Denial of Service via Uncontrolled Recursion

highmulter@1.4.5-lts.1GHSA-72gw-mp4g-v24j

Multer vulnerable to Denial of Service via deeply nested field names

highmulter@1.4.5-lts.1GHSA-fjgf-rc76-4x9p

Multer vulnerable to Denial of Service via unhandled exception from malformed request

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOWED_ORIGIN— Restringe el acceso CORS. Por defecto es http://localhost:3000.

🔐 secretAPI_KEY— tu_contraseña_secreta_super_segura

configDB_PATH— /data/data.db

configPORT

configUPLOADS_DIR— /data/uploads/

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/mauricioperera-sqlite-spreadsheet-sync-iqsq43)](https://m8ven.ai/mcp/mauricioperera-sqlite-spreadsheet-sync-iqsq43)

commit: 30b942da6ecdd94e07ae7a28d1ba72e503ab401c

code hash: 82565315928b30b26dbd01c75cd12e19c9437993a31523b81e5bfe95e8225754

verified: 6/19/2026, 10:54:47 AM

view raw JSON →