This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+5 more
Summary
AI summaryFixed silent failures that produced near‑empty documents when converting Markdown and improved track changes insertion handling.
Full changelog
Bulletproof Documents — Auto-Repair, Backups, and Silent-Failure Fixes
v0.3.1 makes every document that passes through docx-mcp structurally valid on save — no more Word recovery dialogs, no more silently empty conversions.
Save Safety Net
Every save_document() call now runs three layers of protection automatically:
- Backup-on-overwrite — creates
.bak(or.bak2,.bak3...) before overwriting any existing file, so you never lose the original - Auto-repair — silently fixes orphaned footnotes/endnotes, duplicate paraIds, and broken internal relationships before writing
- Warn-on-save — surfaces heading level skips, unpaired bookmarks, inconsistent tables, and residual DRAFT/TODO markers in the save response
Markdown Conversion Fixes
Three bugs that caused create_from_markdown to silently produce near-empty documents:
- BOM handling — files starting with a byte-order mark no longer lose the first heading
- HTML headings —
<h1>–<h6>tags (common in AI-generated markdown) now render as proper Word headings instead of being silently dropped - Unknown content preserved — unrecognized markdown blocks render as plain paragraphs instead of disappearing
Track Changes Fix
- Mid-run insertion placement —
insert_textwith apositionsubstring that falls mid-run now correctly splits the run and inserts at the right point (previously placed at end of run) - Delete-then-insert — inserting after previously deleted text now works correctly
Other
- README rewritten for end-user audience (legal, security, consulting professionals)
create_from_markdownauto-saves to disk immediately (no separatesave_documentcall needed)- 355 tests, 100% coverage
Full Changelog: https://github.com/SecurityRonin/docx-mcp/compare/v0.3.0...v0.3.1
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About SecurityRonin/docx-mcp
Read and edit Word (.docx) documents with track changes, comments, footnotes, and structural validation. The only MCP server combining w:ins/w:del tracked changes, threaded comments, and footnotes with OOXML-level paraId validation and document auditing. 18 tools, Python 3.10+.
Related context
Related tools
Earlier breaking changes
- v0.6.1 Empty `document_handle` resolves to `__default__` slot, maintaining backward compatibility.
Beta — feedback welcome: [email protected]