MCP servers › io.github.Arkanji › iwork-studio

MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23

io.github.Arkanji/iwork-studio

Create, edit, design and export Apple Numbers, Keynote and Pages files. Verified and Arabic-safe. — the publisher's description

7 of 8 record checks metRead-only · tools listed 2026-10-23Topic: productivity-and-docs · AI-classifiedversion 2.6.1PythonMITstandard input/output65 tools

Summary

io.github.Arkanji/iwork-studio is a local MCP server listed in the official MCP registry at version 2.6.1. On 2026-10-23 ProtocolProbe started its published package in an isolated sandbox in read-only mode and read its inventory: 65 tools, 0 resources and 4 prompts.

Record checks

7 of 8 record checks met · 1 does not apply

met: Registry entry is active and says how to run it
met: Source repository link opens
met: Repository is not archived
met: Code pushed to the repository in the 90 days before our check
not met: Repository publishes a security policy (SECURITY.md)
met: Package names its licence with a standard (SPDX) identifier
met: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
met: No known critical or high advisory in the package or its dependencies

#4,931 of 15,115 packages by monthly downloads, tied with 10 others
Not ranked by stars: 3 stars (ranked from 10)

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Key facts

Runs: local package
Transport: standard input/output
Package: PyPI · listed version current
License: MIT
Dependencies: no known high or critical advisories
Repository: public
Tools: 65
Described as changing data: 45 of 65 toolsAI-classified
Mainly works on: files and code on the machine it runs onAI-classified
Topic: productivity-and-docsAI-classified
Last tested: 2026-10-23

Add to your client

Worth knowing before you connect it

45 tools are described as changing something (iwork_samples, numbers_edit_cell, numbers_set_dimensions, …): our AI model's reading of the descriptions, not something we tested. We did not call them.

Each line comes from a section below, with its source and date.

How fresh this is

Live-tested

yes, a real session (not a text-only review)

Last tested

2026-10-23

Mode

read-only (no tool calls)

Latest version

2.6.1, published 2026-10-13 (registry, as of the 2026-10-23 snapshot)

First listed version

2026-10-04 (earliest version still in the registry; older removed versions would be earlier)

Version history

6 versions listed, 2026-10-04 to 2026-10-13; 6 in the 90 days before the 2026-10-23 snapshot.

Most recent 6 versions

2.6.1 · 2026-10-13
2.6.0 · 2026-10-04
2.5.0 · 2026-10-04
2.4.1 · 2026-10-04
2.4.0 · 2026-10-04
2.3.0 · 2026-10-04

(versions still listed in the registry only)

Registry data

snapshot 2026-10-23

Package and repository

checked 2026-10-23

Engine

mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 2.6.1 (published 2026-10-13).

Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.

What it is

What does this server offer?

Observed inventory

65tools

0resources

4prompts

What it mainly works on, as our AI model read its tool descriptions: files and code on the machine it runs on.

45 of 65 tools are described as changing something (creating, editing, deleting, sending or running). For 1 the reading was uncertain, so no mark is shown.

iwork_capabilitiesreads or searches
“What this machine can do right now: routes, GUI session, installed apps, Keynote slide-op status.”
Publisher declares: read-only yes · destructive no · open-world no
Takes no inputs.
iwork_samplescreates or changes datadescribed as changing data
“Copy sample files (sample-sales.numbers with English and Arabic sheets of synthetic sales data, and sample-outline.md for a deck) into a folder, so a first try needs none of the user's own files.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
1 input, 1 required
- folderstringrequired“Folder to copy the samples into (created if missing), e.g.”
iwork_readreads or searches
“Read a .numbers, .key or .pages file into JSON (.pages needs the Pages app and a GUI session).”
Publisher declares: read-only yes · destructive no · open-world no
1 input, 1 required
- pathstringrequired“Path to the .numbers, .key or .pages file (absolute, or starting with ~).”
iwork_list_backupsreads or searches
“List the versioned backups (newest first) every write left for this file, plus the Keynote write manifest.”
Publisher declares: read-only yes · destructive no · open-world no
1 input, 1 required
- pathstringrequired“Path to the .numbers, .key or .pages file (absolute, or starting with ~).”
pages_preflightreads or searches
“Check Pages can answer AppleEvents.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
iwork_verify_formatreads or searches
“Independent check of formatting: export a PDF through the app and confirm `text` is drawn with the given font (name contains), size (pt), color (#RRGGBB), bold, and page size (pt).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
8 inputs, 2 required
- pathstringrequired“Path to the .numbers, .key or .pages file (absolute, or starting with ~).”
- textstringrequired“Text that must appear in the rendered PDF; for Arabic, one word (multi-word RTL text is reordered).”
- fontstring or null“Expected font; matches when the drawn font name contains it, e.g.”
- sizenumber or null“Expected size in points (±0.6).”
- colorstring or null“Expected text colour "#RRGGBB".”
- boldboolean or null“Expected bold (true) or not bold (false).”
- page_widthnumber or null“Expected page width in points.”
- page_heightnumber or null“Expected page height in points.”
iwork_verify_renderreads or searches
“Export the file to PDF through its app and assert `assert_text` is visibly rendered.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- pathstringrequired“Path to the .numbers, .key or .pages file (absolute, or starting with ~).”
- assert_textstringrequired“Text that must be visibly rendered; for Arabic, one word.”
- expected_pagesinteger or null“Expected page (or slide) count; omit to skip that check.”
numbers_edit_cellcreates or changes datadescribed as changing data
“Set one cell (e.g.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
6 inputs, 3 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- refstringrequired“One cell in A1 notation, e.g.”
- valuestring or integer or number or booleanrequired“New value: a number stays a number, text stays text exactly (Arabic too); null clears.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_inspect_formatreads or searches
“Current formatting of a Numbers table: column widths, row heights, header rows/cols, merges, and per-cell font/colour/fill/alignment, number format (shown_as) and borders.”
Publisher declares: read-only yes · destructive no · open-world no
3 inputs, 1 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
numbers_set_dimensionscreates or changes datadescribed as changing data
“Set column widths and/or row heights in points, e.g.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
6 inputs, 1 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- columnsobject or null“Column widths in points by letter, e.g.”
- rowsobject or null“Row heights in points by 1-based row number, e.g.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_set_number_formatcreates or changes datadescribed as changing data
“How numbers display in a range ("B2:B9"): format = number | currency | percentage | scientific | fraction | datetime | text.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
12 inputs, 3 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- cellsstringrequired“A cell or range in A1 notation, e.g.”
- formatstringrequired“number | currency | percentage | scientific | fraction | datetime | text.”
- decimal_placesinteger or null“Digits after the decimal point.”
- thousands_separatorboolean or null“true = group thousands (1,234).”
- negative_stylestring or null“minus | red | parentheses | red_parentheses.”
- currency_codestring or null“ISO currency code for format=currency, e.g.”
- accountingboolean or null“true = accounting style (symbol aligned left) for currency.”
- date_formatstring or null“Date pattern for format=datetime, e.g.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_set_cell_stylecreates or changes datadescribed as changing data
“Style a range ("A1:D1"): font_name, font_size, bold, italic, underline, strikethrough, font_color / fill_color as "#RRGGBB", align (left|center|right|justify|auto), valign (top|middle|bottom), wrap.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
16 inputs, 2 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- cellsstringrequired“A cell or range in A1 notation, e.g.”
- font_namestring or null“Font family, e.g.”
- font_sizenumber or null“Font size in points.”
- boldboolean or null“true/false; omit to leave as is.”
- italicboolean or null“true/false; omit to leave as is.”
- underlineboolean or null“true/false; omit to leave as is.”
- strikethroughboolean or null“true/false; omit to leave as is.”
- font_colorstring or null“Text colour "#RRGGBB".”
- fill_colorstring or null“Cell fill "#RRGGBB".”
- alignstring or null“Horizontal: left | center | right | justify | auto.”
- valignstring or null“Vertical: top | middle | bottom.”
- wrapboolean or null“true = wrap text in the cell.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”

Show 53 more tools

numbers_set_borderscreates or changes datadescribed as changing data
“Cell borders on a range: sides = all | outline | inner | top | right | bottom | left; width in points; color "#RRGGBB"; style = solid | dashes | dots | none.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
9 inputs, 2 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- cellsstringrequired“A cell or range in A1 notation, e.g.”
- sidesstring“all | outline | inner | top | right | bottom | left.”
- widthnumber“Line width in points.”
- colorstring“Line colour "#RRGGBB".”
- stylestring“solid | dashes | dots | none (none removes the border).”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_set_headerscreates or changes datadescribed as changing data
“Set how many header rows / header columns a table has (0–5).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
6 inputs, 1 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- header_rowsinteger or null“Number of header rows (0 for none).”
- header_columnsinteger or null“Number of header columns (0 for none).”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_merge_cellscreates or changes datadescribed as changing data
“Merge a rectangular range ("A1:C1").”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
5 inputs, 2 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- cellsstringrequired“The range to merge, e.g.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_replace_textcreates or changes datadescribed as changing data
“Find/replace text across every slide of a .key deck (literal unless regex=true).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
5 inputs, 3 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- findstringrequired“Text to find (literal unless regex=true).”
- replacestringrequired“Replacement text.”
- regexboolean“true = treat find as a regular expression.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
pages_replace_allcreates or changes datadescribed as changing data
“Replace every occurrence of `find` in a .pages body (needs Pages + GUI session).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
4 inputs, 3 required
- pathstringrequired“Path to the .pages document (absolute, or starting with ~).”
- findstringrequired“Text to find, exactly.”
- replacestringrequired“Replacement text.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
pages_set_bodycreates or changes datadescribed as changing data
“Replace the entire body text of a .pages document (needs Pages + GUI session).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
3 inputs, 2 required
- pathstringrequired“Path to the .pages document (absolute, or starting with ~).”
- bodystringrequired“The new body text; paragraphs separated by newlines.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
iwork_restore_backupcreates or changes datadescribed as changing data
“Undo: atomically restore a backup (a name from iwork_list_backups).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
2 inputs, 2 required
- pathstringrequired“Path to the .numbers, .key or .pages file (absolute, or starting with ~).”
- backupstringrequired“Backup name from iwork_list_backups.”
keynote_add_slidecreates or changes datadescribed as changing data
“Insert a slide after slide number `after` (0 = first, omit = end).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
3 inputs, 1 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- afterinteger or null“Insert after this slide number; 0 = make it the first slide; omit = at the end.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_duplicate_slidecreates or changes datadescribed as changing data
“Duplicate slide number `slide` (1-based); the copy lands right after it.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
3 inputs, 2 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_delete_slidedeletesdescribed as changing data
“Delete slide number `slide` (1-based).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
3 inputs, 2 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_move_slidecreates or changes datadescribed as changing data
“Move slide number `slide` so it ends up at position `to` (both 1-based).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
4 inputs, 3 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“The slide to move, 1-based.”
- tointegerrequired“Where it should end up, 1-based.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_skip_slidecreates or changes datadescribed as changing data
“Hide (skipped=true) or show a slide in the slideshow.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
4 inputs, 2 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- skippedboolean“true = hide the slide in the slideshow; false = show it again.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_set_presenter_notescreates or changes datadescribed as changing data
“Set the presenter notes of slide number `slide` (1-based).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
4 inputs, 3 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- notesstringrequired“The presenter notes text (replaces existing notes).”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
iwork_exportcreates or changes datadescribed as changing data
“Export to another format.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
8 inputs, 2 required
- pathstringrequired“Path to the .numbers, .key or .pages file (absolute, or starting with ~).”
- formatstringrequired“Numbers: pdf | xlsx | csv.”
- outstring or null“Output path (a folder for images); omit to write next to the source.”
- passwordstring or null“Optional password for pdf, xlsx, docx or pptx.”
- password_hintstring or null“Optional hint shown with the password prompt.”
- image_qualitystring or null“good | better | best.”
- image_formatstring or null“Slide images only: jpeg | png | tiff.”
- overwriteboolean“true = replace an existing output (the old one is kept as a backup or returned).”
iwork_metadatareads or searches
“What a file says about itself, without the app: kind, size, modified, template it was made from, app builds that saved it, file format version, slide count (Keynote), embedded media count.”
Publisher declares: read-only yes · destructive no · open-world no
1 input, 1 required
- pathstringrequired“Path to the .numbers, .key or .pages file (absolute, or starting with ~).”
iwork_thumbnailreads or searches
“Extract the preview image stored in the file (first page/slide) to a JPEG and return its path — a quick look without opening the app.”
Publisher declares: read-only yes · destructive no · open-world no
2 inputs, 1 required
- pathstringrequired“Path to the .numbers, .key or .pages file (absolute, or starting with ~).”
- out_dirstring or null“Folder for the extracted JPEG; omit for a temporary folder.”
iwork_findreads or searches
“Find Numbers / Keynote / Pages files (newest first).”
Publisher declares: read-only yes · destructive no · open-world no
4 inputs
- folderstring or null“Folder to search; omit to search the allowed folders, else Documents, Desktop and Downloads.”
- kindstring or null“numbers | keynote | pages; omit for all three.”
- namestring or null“Part of the file name to match (case-insensitive).”
- limitinteger“Maximum results (1–500).”
iwork_list_design_kitsreads or searches
“Design kits for good-looking decks and tables: font pairs (Latin + Arabic, bundled with macOS), contrast-checked palettes and a type scale.”
Publisher declares: read-only yes · destructive no · open-world no
Takes no inputs.
iwork_extract_design_kitcreates or changes datadescribed as changing data
“Make a design kit from the user's own deck or table: heading and body fonts (Latin and Arabic) and the title, body and brand colours.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
6 inputs, 1 required
- pathstringrequired“A .key deck or .numbers table that already has the look to capture.”
- namestring or null“Name for the kit, e.g.”
- saveboolean“true = save it under name for reuse; contrast must pass.”
- overwriteboolean“true = replace a saved kit with the same name.”
- sheetstring or null“For .numbers: the sheet holding the styled table.”
- tablestring or null“For .numbers: the styled table.”
iwork_save_design_kitcreates or changes datadescribed as changing data
“Save a design kit by name for reuse anywhere a kit is accepted.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- namestringrequired“Name to save under, e.g.”
- kitrequired“{"fonts": {...}, "colors": {...}, "theme": "...", "background": "#RRGGBB", "base": "<preset>"} or a preset name to copy.”
- overwriteboolean“true = replace a saved kit with the same name.”
iwork_delete_design_kitdeletesdescribed as changing data
“Delete a saved design kit (presets can't be deleted).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
1 input, 1 required
- namestringrequired“Name of the saved kit to delete (presets can't be deleted).”
numbers_apply_designcreates or changes datadescribed as changing data
“Style a whole table from a design kit: header band (fill, bold, contrast-checked text), body font and colour (Arabic cells get the Arabic font), alternate-row banding, number columns right-aligned.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
6 inputs, 1 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- kit“A design kit: a name from iwork_list_design_kits (preset or saved, e.g.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- bandingboolean“true = tint alternate body rows.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
iwork_list_templatesreads or searches
“Built-in templates for Numbers or Pages, or themes for Keynote (app: numbers | pages | keynote).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- appstringrequired“numbers | pages | keynote.”
numbers_createcreates or changes datadescribed as changing data
“Create a new .numbers file from data.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
2 inputs, 2 required
- pathstringrequired“Where to create the new .numbers file; it must not exist yet.”
- sheetsarrayrequired“Sheets with their tables: [{"name": "Sales", "tables": [{"name": "Q1", "rows": [["Region", "Revenue"], ["Riyadh", 1200]], "header_rows": 1}]}].”
numbers_import_csvcreates or changes datadescribed as changing data
“Turn a CSV/TSV into a new .numbers file (UTF-8, delimiter auto-detected).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
7 inputs, 2 required
- csv_pathstringrequired“The CSV or TSV file to read (UTF-8).”
- pathstringrequired“Where to create the new .numbers file; it must not exist yet.”
- delimiterstring or null“Column separator, e.g.”
- header_rowsinteger“How many rows at the top are headers (styled and kept on top).”
- sheetstring“Name for the new sheet.”
- tablestring“Name for the new table.”
- numbersboolean“true = plain numbers become numbers; false = keep every cell as text.”
numbers_insertcreates or changes datadescribed as changing data
“Insert rows or columns (what = rows | columns) before 1-based position `at`; omit `at` to append.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
8 inputs, 2 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- whatstringrequired“rows | columns.”
- countinteger“How many to insert.”
- atinteger or null“1-based position to insert before; omit to append at the end.”
- valuesarray or null“Optional contents: one list per new row (or column), e.g.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_deletedeletesdescribed as changing data
“Delete `count` rows or columns (what = rows | columns) starting at 1-based position `at`.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
7 inputs, 3 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- whatstringrequired“rows | columns.”
- atintegerrequired“1-based position of the first one to delete.”
- countinteger“How many to delete.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_add_tablecreates or changes datadescribed as changing data
“Add a table with data to an existing sheet (`sheet`, default the first) or to a new sheet (`new_sheet`).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
8 inputs, 3 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- table_namestringrequired“Name of the new table (must not exist on that sheet).”
- rowsarrayrequired“The data, header first: [["Region", "Revenue"], ["Riyadh", 1200]].”
- sheetstring or null“Existing sheet to add it to; omit for the first sheet.”
- new_sheetstring or null“Name of a new sheet to create for the table instead.”
- header_rowsinteger“How many rows at the top are headers (styled and kept on top).”
- header_columnsinteger“How many columns on the left are headers.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
iwork_create_from_templatecreates or changes datadescribed as changing data
“Start a new document from one of the user's own files (any .numbers / .key / .pages): copies it to `path` and checks it opens.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
2 inputs, 2 required
- templatestringrequired“The user's own .numbers, .key or .pages file to copy.”
- pathstringrequired“Where to create the new file; it must not exist yet.”
iwork_createcreates or changes datadescribed as changing data
“New .numbers / .key / .pages from Apple's built-in templates (Keynote: themes); names from iwork_list_templates.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
2 inputs, 1 required
- pathstringrequired“Where to create the new file (.numbers, .key or .pages); it must not exist yet.”
- templatestring or null“Template or theme name from iwork_list_templates; omit for Blank / Basic White.”
numbers_set_formulacreates or changes datadescribed as changing data
“Put a formula in one cell, e.g.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
6 inputs, 3 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- refstringrequired“One cell in A1 notation, e.g.”
- formulastringrequired“The formula, starting with "=", e.g.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_recalculatecreates or changes datadescribed as changing data
“Make Numbers recompute every formula from the current values.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
2 inputs, 1 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
numbers_sortcreates or changes datadescribed as changing data
“Sort a table's body rows by a column letter (header rows stay on top).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
8 inputs, 2 required
- pathstringrequired“Path to the .numbers file (absolute, or starting with ~).”
- columnstringrequired“Column letter to sort by, e.g.”
- descendingboolean“true = largest/last first.”
- sheetstring or null“Sheet name.”
- tablestring or null“Table name on that sheet.”
- to_new_tableboolean“true = leave the table as it is and put a sorted copy of its values (no formulas) in a new table on the same sheet.”
- new_table_namestring or null“Name for the new table (with to_new_table); default "<table> sorted".”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
pages_list_placeholdersreads or searches
“Template placeholders in a .pages document (tag + current text), e.g.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- pathstringrequired“Path to the .pages document (absolute, or starting with ~).”
pages_fill_placeholderscreates or changes datadescribed as changing data
“Fill template placeholders by tag, e.g.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
3 inputs, 2 required
- pathstringrequired“Path to the .pages document (absolute, or starting with ~).”
- valuesobjectrequired“Placeholder tag → text, e.g.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
pages_read_tablesreads or searches
“Every table in a .pages document: name, size, and each cell's value, shown text and formula.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- pathstringrequired“Path to the .pages document (absolute, or starting with ~).”
pages_set_table_cellscreates or changes datadescribed as changing data
“Write cells of an existing table in a .pages document.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
4 inputs, 3 required
- pathstringrequired“Path to the .pages document (absolute, or starting with ~).”
- tablestringrequired“The table's name or number (from pages_read_tables).”
- cellsobjectrequired“{"B2": 1200, "C3": "تم", "D9": "=SUM(D2:D8)"}: numbers stay numbers, "=…" is a formula, null clears.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_slideshow
“Present: action = start (needs path; from_slide 1-based) | stop | next | previous.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- actionstringrequired“start | stop | next | previous.”
- pathstring or null“The deck to present (needed for start).”
- from_slideinteger“Slide to start from, 1-based.”
keynote_list_slidesreads or searches
“Every slide with its text, presenter notes and whether it is hidden (via Keynote).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
keynote_list_themesreads or searches
“Themes available in Keynote on this Mac (names to pass to keynote_set_theme).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
keynote_inspect_stylereads or searches
“A deck's styling: current theme, available slide layouts, and per slide its layout plus each text item's text, font, size and colour.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
keynote_set_themecreates or changes datadescribed as changing data
“Apply a different Keynote theme to the whole deck.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
3 inputs, 2 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- themestringrequired“Theme name from keynote_list_themes.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_set_slide_layoutcreates or changes datadescribed as changing data
“Change one slide's layout (master), e.g.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
4 inputs, 3 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- layoutstringrequired“Layout (master slide) name from keynote_inspect_style.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_format_textcreates or changes datadescribed as changing data
“Font (PostScript name, e.g.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
8 inputs, 2 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- iteminteger or null“Text item index on the slide (from keynote_inspect_style); or use match.”
- matchstring or null“A unique piece of the item's text, to pick it instead of item.”
- fontstring or null“PostScript font name, e.g.”
- sizenumber or null“Font size in points.”
- colorstring or null“Text colour "#RRGGBB".”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_set_transitioncreates or changes datadescribed as changing data
“Transition into a slide: effect such as dissolve, push, wipe, magic move, cube, flip, move in, reveal, "none"; duration/delay in seconds; automatic=true advances on its own.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
7 inputs, 3 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- effectstringrequired“Transition effect, e.g.”
- durationnumber or null“Duration in seconds.”
- delaynumber or null“Delay before it starts, in seconds.”
- automaticboolean or null“true = advance to the next slide on its own.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_build_deckcreates or changes datadescribed as changing data
“Build a new Keynote deck from an outline.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
5 inputs, 2 required
- pathstringrequired“Where to create the new .key deck; it must not exist yet.”
- slidesarrayrequired“The outline: [{"title": "…", "body": ["bullet", …], "notes": "…", "layout": "…", "image": "/path.png", "chart": {…}, "table": {…}}, …]; see the tool descriptio…”
- themestring or null“Theme name from keynote_list_themes; the kit's theme is used when omitted.”
- transitionstring or null“Transition for every slide, e.g.”
- kit“A design kit: a name from iwork_list_design_kits (preset or saved, e.g.”
keynote_add_tablecreates or changes datadescribed as changing data
“Add a table to a slide (1-based).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
9 inputs, 3 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- rowsarrayrequired“The table, header first: [["Region", "Q1"], ["Riyadh", 1200]]; text, numbers or null; "=…" is a formula.”
- header_rowsinteger“How many rows at the top are headers (styled and kept on top).”
- kit“A design kit: a name from iwork_list_design_kits (preset or saved, e.g.”
- xnumber or null“Left edge in points (give with y); omit to let Keynote place it.”
- ynumber or null“Top edge in points (give with x).”
- widthnumber or null“Table width in points; omit for Keynote's default.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_review_deckreads or searches
“Design review of a deck as Keynote actually draws it: renders to PDF and reports, per slide, text drawn off the slide or past the bottom of its box (errors), text boxes drawn on top of each other, te…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
keynote_slide_imagereads or searches
“One slide as an image (JPEG, `width` px wide), exported by Keynote, so you can look at the design yourself.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- widthinteger“Image width in pixels (320–2560).”
keynote_apply_designcreates or changes datadescribed as changing data
“Make a deck look designed: the kit's theme (optional), then every slide's title and body fonts (Arabic-aware), sizes from a type scale, and colours from a contrast-checked palette.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
4 inputs, 1 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- kit“A design kit: a name from iwork_list_design_kits (preset or saved, e.g.”
- set_themeboolean“true = also switch to the kit's theme first.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_set_slide_textcreates or changes datadescribed as changing data
“Fill a slide's title and/or body box (body may be a list of bullet lines).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
5 inputs, 2 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- titlestring or null“New title text; omit to leave it.”
- body“New body: a string, or a list of bullets; omit to leave it.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_add_chartcreates or changes datadescribed as changing data
“Add a chart to a slide from data.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
8 inputs, 5 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- rowsarrayrequired“Row names, e.g.”
- columnsarrayrequired“Column names, e.g.”
- dataarrayrequired“One list of numbers per row name, each as long as columns.”
- typestring“bar | stacked_bar | horizontal_bar | stacked_horizontal_bar | line | area | stacked_area | pie | scatter (or a *_3d variant).”
- group_bystring“row (each row is a series) | column.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”
keynote_add_imagecreates or changes datadescribed as changing data
“Place an image file (png, jpg, heic, pdf…) on a slide; optional x/y position and width in points.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
7 inputs, 3 required
- pathstringrequired“Path to the .key deck (absolute, or starting with ~).”
- slideintegerrequired“Slide number, 1-based (keynote_list_slides lists them).”
- imagestringrequired“Image file to place (png, jpg, heic, pdf…).”
- xnumber or null“Left edge in points (give with y); omit to let Keynote place it.”
- ynumber or null“Top edge in points from the slide's top-left corner (give with x).”
- widthnumber or null“Image width in points; height keeps the aspect ratio.”
- dry_runboolean“true = make the change on a throwaway copy, run every check, and return what would change; the file itself is not touched.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

Says what the tool does: 100% of 65 tools
Says what it returns: 86% of 59 tools
States limits, defaults or errors: 0% of 64 tools
Says when to use it: 100% of 65 tools
Items covered per tool: 2.9 of 4 on average

Counted from the listing

Parameters with a description: 100% of 274
Tools with a description: 100% of 65
Typical description length: 385 characters

The tool set

Counted from the listing

Tools: 65
Size of the list: about 23,724 tokens for an agent to load (characters ÷ 4)
Naming: 65 of 65 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 65 of 65 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the PyPI package iwork-studio

Our sandbox started this package on 2026-10-23 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below. The command runs the publisher’s code on your machine.

Claude Desktop · claude_desktop_config.json (Settings → Developer → Edit Config)

{
  "mcpServers": {
    "iwork-studio": {
      "command": "uvx",
      "args": [
        "iwork-studio==2.6.1"
      ]
    }
  }
}

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "iwork-studio": {
      "command": "uvx",
      "args": [
        "iwork-studio==2.6.1"
      ]
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "iwork-studio": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "iwork-studio==2.6.1"
      ]
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"iwork-studio","type":"stdio","command":"uvx","args":["iwork-studio==2.6.1"]}'

Claude Code

claude mcp add --transport stdio iwork-studio -- uvx iwork-studio==2.6.1

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 -- uvx iwork-studio==2.6.1

Optional settings the entry also lists (left out above): IWORK_STUDIO_ROOTS, IWORK_STUDIO_TOOLSETS.
This runs the publisher's code on your machine (uvx). Read its README first.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Can it be installed, and is it up to date?

Version pin · advisories

Listed version

Registry lists: 2.6.1
Latest stable: 2.6.1
Status: current
Withdrawn: no

Source: pypi.org · 2026-10-23. About the version the registry lists; a manual install may resolve to a different one.

Dependency advisories

Counted in the full dependency tree as resolved on 2026-10-24 (OSV.dev; each bar counts advisories). Bars share one scale. The package itself has no known vulnerability (OSV.dev).

Integrity, provenance, license

Integrity: sha256-7f2a1afcf90a3e1cb…
License: MIT

Source: the package registry · 2026-10-23.

Usage

Downloads: 518 in the last month

Source: pypistats.org · 2026-10-23.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Published package can be started	Started and answered	matches	our test · 2026-10-23
Version 2.6.1 on PyPI	Exists and can be installed	matches	PyPI · 2026-10-23
Repository github.com/Arkanji/iwork-studio	Opens publicly	matches	api.github.com · 2026-10-23

Who made it?

Feature #7 · lineage

Facts about the publisher. We do not turn them into a trust score.

Namespace: io.github.Arkanji
GitHub owner: a personal account (Arkanji)

Repository: github.com/Arkanji/iwork-studio
Stars: 3
Repository age: 0–30 days
Last push: 0–30 days ago
Archived: no
Security policy: none found (we looked for SECURITY.md in the repository and in its owner’s .github repository)

Source: the registry entry and api.github.com · 2026-10-23; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Choosing

Record checks

Public records · not a safety rating

7 of 8 record checks met · 1 does not apply

#4,931 of 15,115 packages by monthly downloads, tied with 10 others
Not ranked by stars: 3 stars (ranked from 10)

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
MetSource repository link opensThe linked GitHub repository is public.
MetRepository is not archivedNot archived.
MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
Not metRepository publishes a security policy (SECURITY.md)No SECURITY.md in the places GitHub reads it from.
MetPackage names its licence with a standard (SPDX) identifierMIT
MetThe version the registry lists can be installed and is not withdrawnThe listed version exists and is current.
Does not applynpm package carries build provenance (attestation)PyPI packages have no npm-style attestation.
MetNo known critical or high advisory in the package or its dependenciesNone known in the package or its dependency tree.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-23. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.Arkanji/iwork-studio

Answered from the data above

Is io.github.Arkanji/iwork-studio safe to install?

We do not rate servers as safe or unsafe. 7 of its 8 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. The listed version is the latest stable release. The package itself has no known vulnerability (OSV.dev). Its full dependency tree has no known advisory. 45 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Has io.github.Arkanji/iwork-studio been security tested?

Partly. 4 of the 13 checks that apply to it were exercised. We started the package in an isolated sandbox and read what it declares, but this test round was read-only, so its tools were not called. No security verdict is published before verification.

What can io.github.Arkanji/iwork-studio do?

It lists 65 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data and delete. We did not call any tool, so this describes the text, not the behaviour.

Can io.github.Arkanji/iwork-studio change or delete data?

45 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.

Does io.github.Arkanji/iwork-studio publish a security policy?

We found no SECURITY.md in its repository (root, .github/ or docs/) or in its owner's .github repository.

Is the listed version current?

Yes. The registry lists 2.6.1, the latest stable release on PyPI.

Where is the source code of io.github.Arkanji/iwork-studio?

In github.com/Arkanji/iwork-studio, which opens publicly.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Similar servers

Same topic · AI-read

io.github.usekaneo/kaneoalso has tools that creates or changes data, deletes, reads or searchescompare with this one
io.github.54yyyu/zotero-mcpZotero MCPalso has tools that creates or changes data, deletes, reads or searchescompare with this one
io.github.haris-musa/excel-mcp-serverExcel MCP Serveralso has tools that creates or changes data, deletes, reads or searchescompare with this one
io.github.Softeria/ms-365-mcp-serverMicrosoft 365 MCP Serveralso has tools that creates or changes data, deletes, reads or searchescompare with this one
io.github.arben-adm/mcp-sequential-thinkingSequential Thinking Working Notesalso has tools that creates or changes data, deletes, reads or searchescompare with this one
io.github.ykarapazar/word-mcp-liveWord MCP Livealso has tools that creates or changes data, deletes, reads or searchescompare with this one

Active servers whose topic is also “productivity-and-docs” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (read-only run)

We started the package in an isolated sandbox and read what it declares, but this test round was read-only, so its tools were not called. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-23

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: exercised
Fake assistant turns: exercised
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not applicable
Consent handling: not applicable
Sign-in metadata: not applicable

4 exercised9 not run (reason given)5 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 4 of the 13 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 4

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised
12Hidden content
audience-hidingChecks resources that hide content from the user.exercised
13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.exercised

Not run, with the reason · 9

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against

Does not apply to this server · 5

14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
17Consent handling
confused-deputyChecks consent handling when one service acts for another.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable

Source: our own test in an isolated sandbox, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted the published package in an isolated sandbox (read-only mode)
2,682 msConnected after 0 redirects.
Read the inventory: 65 tools, 0 resources, 4 prompts.
7,618 msFinished: 4 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

productivity-and-docs

AI-classified · 2026-10-23

Pricing modelAI-classified

not checked

no website in the registry entry

Programming language

Python

api.github.com · 2026-10-23

Hosting type

local package

registry · 2026-10-23

MCP capability

experimental, prompts, resources, tools

our test · 2026-10-23

Transport

standard input/output

registry · 2026-10-23

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

pypi

registry · 2026-10-23

Freshness

0–30 days

registry updatedAt · 2026-10-23

Lifecycle status

active

registry · 2026-10-23

License class

permissive

package registry · 2026-10-23

Integrity hash

declared (sha256)

package registry · 2026-10-23

Signature / provenance

does not apply

PyPI publishes no registry signature or attestation equivalent to npm dist.signatures

Dependency advisories

none known

OSV.dev · 2026-10-24

Popularity

518 downloads a month

package registry · 2026-10-23

Publisher signals

owner: a personal account · repository age: 0–30 days · stars: 0–9

api.github.com · 2026-10-23

Maintenance

active

api.github.com · 2026-10-23

Environment

your machine

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.Arkanji/iwork-studio: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/io.github.Arkanji/iwork-studio

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.Arkanji/iwork-studio)](https://protocolprobe.com/mcp/servers/io.github.Arkanji/iwork-studio)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology