// SCAN REPORT

Excel Webview2

59 tools. 20 can modify or destroy data without limits.

20 write tools that can modify data. Rate limits recommended.

Last updated: 6 May 2026

20 can modify or destroy data

39 read-only

59 tools total

// TOOL MAP

Read (39) Write / Execute (20) Destructive / Financial (0)

// WHAT CAN GO WRONG

Write operations (click, close_page, drag) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

Execute tools (emulate, excel_active_range, excel_launch_addin) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

// RECOMMENDED RULES

Rate limit write operations

click:
  rules:
    - rate_limit: 30/hour

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

connection_status:
  rules:
    - rate_limit: 60/minute

Controls API costs and prevents retry loops from exhausting upstream rate limits.

// ALL 59 EXCEL WEBVIEW2 TOOLS

EXECUTE 9 tools

Execute emulate Execute excel_active_range Execute excel_launch_addin Execute excel_stop_addin Execute lighthouse_audit Execute performance_analyze_insight Execute performance_start_trace Execute performance_stop_trace Execute wait_for

WRITE 11 tools

Write click Write close_page Write drag Write excel_workbook_info Write fill Write fill_form Write handle_dialog Write press_key Write select_page Write type_text Write upload_file

READ 39 tools

Read connection_status Read evaluate_script Read excel_calculation_state Read excel_chart_image Read excel_chart_info Read excel_context_info Read excel_custom_xml_parts Read excel_detect_addin Read excel_find_in_range Read excel_list_charts Read excel_list_comments Read excel_list_conditional_formats Read excel_list_data_validations Read excel_list_named_items Read excel_list_pivot_tables Read excel_list_shapes Read excel_list_tables Read excel_list_worksheets Read excel_pivot_table_info Read excel_pivot_table_values Read excel_range_formulas Read excel_range_properties Read excel_range_special_cells Read excel_read_range Read excel_settings_get Read excel_table_filters Read excel_table_info Read excel_table_rows Read excel_used_range Read excel_worksheet_info Read get_console_message Read get_network_request Read hover Read list_console_messages Read list_network_requests Read list_pages Read take_memory_snapshot Read take_screenshot Read take_snapshot

// FAQ

How do I prevent bulk modifications through Excel Webview2? +

The Excel Webview2 server has 11 write tools including click, close_page, drag. Set rate limits in your policy file -- for example, rate_limit: 10/hour prevents an agent from making more than 10 modifications per hour. Intercept enforces this at the transport layer.

How many tools does the Excel Webview2 MCP server expose? +

59 tools across 3 categories: Execute, Read, Write. 39 are read-only. 20 can modify, create, or delete data.

How do I add Intercept to my Excel Webview2 setup? +

One line change. Instead of running the Excel Webview2 server directly, prefix it with Intercept: intercept -c excel-webview2.yaml -- npx -y @@dsbissett/excel-webview2-mcp. Download a pre-built policy from policylayer.com/policies/excel-webview2 and adjust the limits to match your use case.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies available for each. Same risk classification, same one-command setup.

Excel Webview2

Other MCP servers with similar tools.

Let agents act without letting them run wild.