Skip to content

SecurityRonin/docx-mcp

v0.3.1 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-tools comments document-editing docx footnotes mcp
+5 more
mcp-server model-context-protocol ooxml track-changes word

Summary

AI summary

Fixed silent failures that produced near‑empty documents when converting Markdown and improved track changes insertion handling.

Full changelog

Bulletproof Documents — Auto-Repair, Backups, and Silent-Failure Fixes

v0.3.1 makes every document that passes through docx-mcp structurally valid on save — no more Word recovery dialogs, no more silently empty conversions.

Save Safety Net

Every save_document() call now runs three layers of protection automatically:

  • Backup-on-overwrite — creates .bak (or .bak2, .bak3...) before overwriting any existing file, so you never lose the original
  • Auto-repair — silently fixes orphaned footnotes/endnotes, duplicate paraIds, and broken internal relationships before writing
  • Warn-on-save — surfaces heading level skips, unpaired bookmarks, inconsistent tables, and residual DRAFT/TODO markers in the save response

Markdown Conversion Fixes

Three bugs that caused create_from_markdown to silently produce near-empty documents:

  • BOM handling — files starting with a byte-order mark no longer lose the first heading
  • HTML headings<h1><h6> tags (common in AI-generated markdown) now render as proper Word headings instead of being silently dropped
  • Unknown content preserved — unrecognized markdown blocks render as plain paragraphs instead of disappearing

Track Changes Fix

  • Mid-run insertion placementinsert_text with a position substring that falls mid-run now correctly splits the run and inserts at the right point (previously placed at end of run)
  • Delete-then-insert — inserting after previously deleted text now works correctly

Other

  • README rewritten for end-user audience (legal, security, consulting professionals)
  • create_from_markdown auto-saves to disk immediately (no separate save_document call needed)
  • 355 tests, 100% coverage

Full Changelog: https://github.com/SecurityRonin/docx-mcp/compare/v0.3.0...v0.3.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track SecurityRonin/docx-mcp

Get notified when new releases ship.

Sign up free

About SecurityRonin/docx-mcp

Read and edit Word (.docx) documents with track changes, comments, footnotes, and structural validation. The only MCP server combining w:ins/w:del tracked changes, threaded comments, and footnotes with OOXML-level paraId validation and document auditing. 18 tools, Python 3.10+.

All releases →

Related context

Earlier breaking changes

  • v0.6.1 Empty `document_handle` resolves to `__default__` slot, maintaining backward compatibility.

Beta — feedback welcome: [email protected]