csvbox-mcp-server
OfficialClick on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@csvbox-mcp-servercreate a CSVBox importer for suppliers with columns name, GSTIN, email, phone"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
csvbox-mcp-server
A universal Model Context Protocol (MCP) server for CSVBox. It exposes CSVBox importer-sheet management as MCP tools so you can create, replace, patch, generate, validate, and scaffold importers from any MCP-compatible client — Claude Desktop, Cursor, Windsurf, Roo Code, Cline, VS Code, ChatGPT MCP, and more.
Runs over stdio, so it works the same way in every client.
Tools
Tool | Purpose | API call |
| Create a CSVBox sheet |
|
| Replace an existing sheet |
|
| Partially update a sheet |
|
| NL prompt → complete sheet JSON (via LLM) | none (calls LLM) |
| NL prompt → validate → create |
|
| Integration code (vanilla-js/react/vue/angular) | none |
| NL prompt → virtual columns / validation functions / data transforms (via LLM) | none (calls LLM) |
| Local schema validation | none |
CSVBox currently has no GET or LIST endpoints, so there are intentionally no
get_sheet/list_sheettools.
It also exposes two MCP prompts:
Prompt | Purpose |
| Make the host client's own LLM build a complete CSVBox sheet (no server-side LLM key needed). |
| Make the host client's own LLM author virtual columns, validation functions, and data transforms (no server-side LLM key needed). |
Prompt → sheet generation
generate_sheet_json and create_importer_from_prompt use an LLM to convert a free-form request into a complete CSVBox sheet — title, sheet_columns, destinations, webhooks, security_settings, and steps. Only actual data fields become columns; destinations, webhooks, domains, regions, file-upload and step settings are placed in their proper configuration sections, never turned into columns. There are three tiers:
Server LLM — when
ANTHROPIC_API_KEYorOPENAI_API_KEYis set, the server calls the LLM directly. Works in MCP Inspector and headless.MCP prompt (
create_csvbox_sheet) — when you have no server key, host clients (Cursor, Claude Desktop, Cline) run the generation with their own model, then callvalidate_schemaandcreate_sheet. Free.None configured —
generate_sheet_jsonreturns a structured "no LLM provider configured" error pointing to the MCP prompt, andcreate_importer_from_promptdoes not call the CSVBox API. There is no regex fallback.
Category / module expansion
The generator runs in one of two modes, chosen automatically from the prompt:
Extraction (default) — the prompt names concrete fields (e.g. "columns name, email, phone"). Only those become columns; nothing is invented.
Expansion — the prompt names business modules / categories as a list (e.g. "modules for: Company Information, Suppliers, Payroll, Invoice"), asks for a comprehensive/detailed schema, or asks for a column count ("at least 100 columns"). Each named module is expanded into several realistic, prefixed, correctly-typed columns (e.g. Suppliers →
supplier_id,supplier_name,supplier_gstin,supplier_email, …). An explicit minimum count is honored and everycolumn_nameis globally unique.
Data types and validations are inferred from the field names and any requested types:
Requested / implied | Column | Validators |
Dropdown / status / category with fixed options |
|
|
Percentage / percent |
|
|
Positive numeric (quantity, count, stock, cost, age) |
|
|
ID / code / reference number |
| — |
| — | |
Phone / mobile |
| — |
URL / website |
| — |
Price / cost / amount / salary |
| — |
Date fields |
|
|
Boolean / is_* / active |
| — |
GST / GSTIN / tax id |
| GSTIN pattern |
PIN code / postal code (India) |
|
|
Large schemas: the default models (
claude-haiku-4-5,gpt-4o-mini) are cheap but produce noticeably better 100+ column schemas when you override with a stronger model viaLLM_MODEL(e.g.claude-sonnet-4-6). The output cap is raised to fit big sheets; if a request is still too large the response is flaggedTRUNCATED(a distinct result, not a parse error) and the CSVBox API is not called — reduce the column count / modules or use a model with a larger output budget and retry.
Related MCP server: mcp-tabular
Function collections (virtual columns, validation functions, data transforms)
Beyond the six sheet properties, the CSVBox Sheet API accepts three collections whose items carry a js_code string that CSVBox executes during an import:
Collection | Identified by | Max |
|
|
| 20 | return the computed cell value |
|
| 10 | return an array of error strings ( |
|
| 10 | mutate the |
Inside js_code the csvbox object exposes row, column, virtual, user, import, and environment. The two accessors are not interchangeable — a virtual column is per-row and uses csvbox.row.<name> (a scalar), while a "column"-scoped function sees the whole column via csvbox.column.<name> (an array).
Shared optional fields: scope (column | row; not on virtual columns), run_at (before_validation | after_validation; data transforms only), columns / dynamic_columns, active, dependencies, and _delete (PATCH only).
Authoring them
// generate_sheet_functions (requires ANTHROPIC_API_KEY or OPENAI_API_KEY)
{
"prompt": "add a virtual column joining first and last name, and check every email contains an @",
"sheet": { "title": "Customers", "sheet_columns": [ ... ] }
}Returns { "virtual_columns": [...], "validation_functions": [...], "source": ..., "validation": {...} }. Collections the request does not imply are omitted, never returned as empty arrays.
This tool does not call the CSVBox API. Read the generated js_code, then apply it yourself with patch_sheet. Pass sheet so the model references real column names and the validator can check those references — CSVBox has no read endpoint, so it must be supplied inline. Without an LLM key, use the csvbox_sheet_functions MCP prompt instead.
PUT vs PATCH — read this before applying
|
| |
Collection you send | authoritative — any existing item not named is deleted | merged — unnamed items are left alone |
| deletes all 20 | no-op |
Key omitted | untouched | untouched |
| not valid | removes that item (all its other fields ignored) |
Use patch_sheet to apply generated functions. Validate first with the matching verb:
// validate_schema
{ "sheet": { "data_transforms": [ ... ] }, "mode": "patch" }mode is create (default), put, or patch. It only affects the function collections — under put an empty array is a hard error rather than a warning, and _delete is rejected outside patch.
Dependencies
An item may load up to 5 third-party scripts:
{ "url": "https://cdn.jsdelivr.net/npm/dayjs@1.11.10/dayjs.min.js",
"globals": ["dayjs"],
"integrity": "sha384-..." }Only cdn.jsdelivr.net, unpkg.com, and cdnjs.cloudflare.com are allowed; https only, .js/.mjs path, no query string, fragment, userinfo, or port.
Security. This server never executes
js_code— it is an opaque string here. Generated JavaScript is unreviewed model output, so read it before you PATCH it into a live importer. A dependency without anintegritydigest can change under your customers at any time;validate_schemawarns when one is missing.
See docs/sheet-functions-example.json for a full payload.
Installation
npm install @csvbox/mcp-serverOr build from source:
git clone <this-repo> csvbox-mcp-server
cd csvbox-mcp-server
npm install
npm run buildThis produces dist/index.js — the entrypoint MCP clients launch.
Environment variables
Copy .env.example to .env and fill in your CSVBox credentials:
CSVBOX_API_KEY=your_api_key
CSVBOX_API_SECRET=your_api_secretCSVBox credentials are only required for the API-backed tools (create_sheet, update_sheet, patch_sheet, create_importer_from_prompt). validate_schema and generate_import_code work without any credentials.
Auth header note: the client sends
x-csvbox-api-keyandx-csvbox-secret-api-key(matching the CSVBox reference payloads). These are defined as constants insrc/services/csvbox-api.tsif your account uses different header names.
LLM provider (for prompt → sheet generation)
generate_sheet_json and create_importer_from_prompt need an LLM. Set one of:
ANTHROPIC_API_KEY=sk-ant-...
OPENAI_API_KEY=sk-...The provider is auto-detected:
Condition | Provider | Default model |
| Anthropic |
|
| OpenAI |
|
| Anthropic |
|
| OpenAI |
|
neither key set | none — tools return an error pointing to the | — |
LLM_PROVIDER disambiguates when both keys are present; LLM_MODEL overrides the model for whichever provider is chosen. For large category/module schemas (100+ columns) set LLM_MODEL to a stronger model (e.g. claude-sonnet-4-6) — see Category / module expansion.
MCP Inspector: set the LLM key in the Inspector's environment-variables panel to use the server-LLM path. Inspector has no host LLM of its own, so it can render the
create_csvbox_sheetprompt but cannot execute it — for the keyless path use a client with a model (Cursor, Claude Desktop, Cline).
Running locally
# After building:
npm start
# Or run the built file directly:
node dist/index.jsThe server speaks MCP over stdio and logs csvbox-mcp-server running on stdio to stderr (stdout is reserved for the protocol).
Client configuration
For a published installation, use the npm package with npx. Set CSVBOX_API_KEY / CSVBOX_API_SECRET in the env block.
Note: The npm package is
@csvbox/mcp-serverand the executable iscsvbox-mcp-server.
Claude Desktop
Add the following to your Claude Desktop MCP configuration:
{
"mcpServers": {
"csvbox": {
"command": "npx",
"args": [
"-y",
"--package=@csvbox/mcp-server",
"csvbox-mcp-server"
],
"env": {
"CSVBOX_API_KEY": "your_api_key",
"CSVBOX_API_SECRET": "your_api_secret"
}
}
}
}Cursor
Edit ~/.cursor/mcp.json (global) or .cursor/mcp.json (per-project):
{
"mcpServers": {
"csvbox": {
"command": "npx",
"args": [
"-y",
"--package=@csvbox/mcp-server",
"csvbox-mcp-server"
],
"env": {
"CSVBOX_API_KEY": "your_api_key",
"CSVBOX_API_SECRET": "your_api_secret"
}
}
}
}Windsurf
Edit ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"csvbox": {
"command": "npx",
"args": [
"-y",
"--package=@csvbox/mcp-server",
"csvbox-mcp-server"
],
"env": {
"CSVBOX_API_KEY": "your_api_key",
"CSVBOX_API_SECRET": "your_api_secret"
}
}
}
}Roo Code
In the Roo Code MCP settings (mcp_settings.json):
{
"mcpServers": {
"csvbox": {
"command": "npx",
"args": [
"-y",
"--package=@csvbox/mcp-server",
"csvbox-mcp-server"
],
"env": {
"CSVBOX_API_KEY": "your_api_key",
"CSVBOX_API_SECRET": "your_api_secret"
}
}
}
}Cline
In the Cline MCP settings (cline_mcp_settings.json):
{
"mcpServers": {
"csvbox": {
"command": "npx",
"args": [
"-y",
"--package=@csvbox/mcp-server",
"csvbox-mcp-server"
],
"env": {
"CSVBOX_API_KEY": "your_api_key",
"CSVBOX_API_SECRET": "your_api_secret"
}
}
}
}VS Code MCP
Add to .vscode/mcp.json (or the global mcp.json):
{
"servers": {
"csvbox": {
"command": "npx",
"args": [
"-y",
"--package=@csvbox/mcp-server",
"csvbox-mcp-server"
],
"env": {
"CSVBOX_API_KEY": "your_api_key",
"CSVBOX_API_SECRET": "your_api_secret"
}
}
}
}Example tool calls
Generate a complete sheet from a prompt (LLM, no CSVBox API call):
// generate_sheet_json (requires ANTHROPIC_API_KEY or OPENAI_API_KEY)
{ "prompt": "Create employee importer with name, email, salary, joining date; destination as testapi; allow only xlsx files" }Returns { "sheet": { "title": ..., "sheet_columns": [...], "destinations": [...], "steps": {...} }, "source": "llm:anthropic:claude-haiku-4-5", "validation": { "valid": true, ... } }. Data fields become columns (salary → currency, joining date → date); the destination and xlsx setting go to destinations / steps, not columns. With no LLM key, returns an error pointing to the create_csvbox_sheet prompt.
Validate a schema before sending it:
// validate_schema
{ "sheet": { "title": "Customers", "sheet_columns": [
{ "column_name": "email", "display_label": "Email", "type": "email" }
] } }Returns { "valid": true, "errors": [], "warnings": [ ... ] }.
Create a sheet:
// create_sheet
{ "sheet": { "title": "Customer Import", "sheet_columns": [
{ "column_name": "name", "display_label": "Name", "type": "text" },
{ "column_name": "email", "display_label": "Email", "type": "email" }
] } }Generate + create in one step:
// create_importer_from_prompt (requires an LLM key + CSVBox credentials)
{ "prompt": "Create customer importer with name, email, phone; allow for example.com" }Returns { "generated_schema": { ... }, "source": ..., "validation": { ... }, "api_response": { ... } }. Aborts without calling the API if no LLM provider is configured or the generated schema fails validation.
Replace a sheet:
// update_sheet
{ "sheet_license_key": "abc123", "sheet": { "title": "Updated", "sheet_columns": [ ... ] } }Destructive for any collection you send — see PUT vs PATCH.
Patch a sheet:
// patch_sheet
{ "sheet_license_key": "abc123", "changes": { "title": "New Title" } }Remove one function without touching the rest:
// patch_sheet
{ "sheet_license_key": "abc123",
"changes": { "virtual_columns": [ { "column_name": "full_name", "_delete": true } ] } }Generate integration code:
// generate_import_code
{ "framework": "react" }Supported column types
text, number, email, date, time, boolean, regex, ip, url, credit_card, phone_number, currency, list, dependent_list, dynamic_list, dependent_dynamic_list, multiselect_list, multiselect_dynamic_list.
Development
npm run build # compile TypeScript → dist/
npm start # run the built server
npm run lint # type-check without emitting
npm test # compile and run the unit suite (alias: npm run test:unit)Tests
npm test compiles src/tests/ and runs it with Node's built-in test runner — no
test framework, no mocking library.
The suite is hermetic. It never contacts an external host, never reads your
ambient CSVBOX_API_* / ANTHROPIC_API_KEY / OPENAI_API_KEY, and never touches
a real CSVBox account, so it passes identically whether or not you have
credentials configured. HTTP is intercepted at the axios adapter; the LLM is a
scripted fake; the one test that needs real request encoding starts an ephemeral
listener on 127.0.0.1 and closes it afterwards. Tests that read environment
variables set what they need explicitly and restore the previous values.
E2E tests
npm run test:e2e # run the Playwright suite
npm run test:e2e:report # open the HTML report from the last runSpecs live in e2e/, configured by playwright.config.ts. Like the unit suite,
this suite is hermetic: it starts mock CSVBox and LLM servers on loopback
(e2e/support/mock-csvbox-server.ts, e2e/support/mock-llm-server.ts) and
drives the real built server (dist/index.js) through MCP Inspector with
fake credentials pointed at those mocks — it never contacts a real CSVBox
account or LLM provider, and never reads your .env. A separate,
zero-credential Inspector instance covers the "missing credentials" error
paths. Requires npm run build first (the test:e2e webServer entries build
automatically).
Embedding the server
createServer() is exported from the entry module. It registers every tool and
prompt and returns the McpServer without attaching a transport, so you can
connect it to one of your own:
import { createServer } from "@csvbox/mcp-server";
const server = createServer();
await server.connect(myTransport);Importing the module does not start anything; the stdio server runs only when
dist/index.js is executed directly.
License
MIT
Available Tools
9 toolscreate_importer_from_promptCreate Importer From PromptA
Generate a COMPLETE CSVBox sheet from a natural-language prompt via a configured LLM, validate it locally, then create it via POST /1.1/sheet. Returns { generated_schema, source, validation, api_response }. Aborts (no API call) if no LLM provider is configured or if validation fails. Requires ANTHROPIC_API_KEY or OPENAI_API_KEY plus CSVBox credentials.
| Name | Required | Description | Default |
|---|---|---|---|
| prompt | Yes | Natural-language description of the importer, e.g. "Create customer importer with columns name, email, phone; allow for example.com". |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the full sequence (generate, validate locally, create via POST), the return object, the abort condition (no LLM provider or validation failure), and the required credentials (ANTHROPIC_API_KEY or OPENAI_API_KEY plus CSVBox credentials). This is comprehensive and honest about side effects (it creates a sheet).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences deliver the purpose, flow, return value, abort conditions, and required credentials without waste. The main action is front-loaded, followed by essential caveats. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one parameter, no output schema, and no annotations, the description covers the essential decision points: what it does, what it returns, when it aborts, and what credentials are needed. Missing is any detail on the validation failure behavior beyond aborting, and there is no example output or error handling guidance, but these are not critical for invoking the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the description for 'prompt' in the schema already explains it as a natural-language description of the importer. The tool description adds no extra detail about how the prompt is used, format expectations, or examples beyond what the schema provides. Baseline 3 is appropriate when schema fully documents the parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Generate ... then create') and a clear resource (CSVBox sheet via POST /1.1/sheet). It is distinct from siblings like create_sheet (which likely creates without generation) and generate_sheet_json (which likely generates without creation). The flow is explicit and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clearly implies use when you have a natural-language prompt and want a complete, validated sheet. It notes that an LLM provider must be configured and that it aborts if not, which hints at alternative workflows, but it does not explicitly name alternatives or state when to prefer create_sheet or generate_sheet_json over this tool. The context is clear but exclusions are not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_sheetCreate CSVBox SheetC
Create a new CSVBox sheet via POST /1.1/sheet. Input: { sheet }. Returns the API response.
| Name | Required | Description | Default |
|---|---|---|---|
| sheet | Yes | The full CSVBox sheet object to create. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description bears full responsibility for disclosing behavior. It only states that it returns the API response, but gives no detail on side effects, error handling, idempotency, or what happens on duplicate creation. For a creation tool this is a significant gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is brief and front-loaded with the action, which is good. However, its brevity comes at the cost of essential context, so it is under-specified rather than appropriately concise. A few extra sentences clarifying behavior and usage would be justified.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema, so the description should clarify what the response contains, but it only says 'Returns the API response' without specifics. The nested 'sheet' object is intentionally open-ended, but the description doesn't hint at required fields or validation. Given the simplicity of the tool and sibling complexity, the description is incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides full coverage of the sole parameter, describing the 'sheet' as 'The full CSVBox sheet object to create.' The tool description adds nothing beyond restating the parameter name and format. Since coverage is 100%, the description meets the baseline but adds no extra value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear action: creating a new CSVBox sheet via a POST request, and identifies the resource explicitly. It distinguishes from siblings like update_sheet and patch_sheet by indicating creation, though it doesn't explicitly call out the distinction. The purpose is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives such as update_sheet or patch_sheet. It does not mention any prerequisites, when creation is appropriate, or when another sibling might be better. An agent would have to infer usage from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_import_codeGenerate CSVBox Integration CodeA
Generate complete CSVBox importer integration code for a framework (vanilla-js, react, vuejs2 [Vue 2], vuejs3 [Vue 3], angular [Angular 8-13], angular2 [Angular 14+]). Input: { framework }. Replace the license key placeholder with your sheet's license key.
| Name | Required | Description | Default |
|---|---|---|---|
| framework | Yes | Target framework: vanilla-js | react | vuejs2 (Vue 2) | vuejs3 (Vue 3) | angular (Angular 8-13) | angular2 (Angular 14+). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions replacing the license key placeholder, which is a useful note, but it does not state whether the tool has side effects, what the output format is, or any prerequisites. The agent is left guessing about the return value and if any state changes occur. This is a notable gap for a tool that generates code.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense sentence. It front-loads the main action, immediately lists the supported frameworks with version clarifications, and includes the only crucial auxiliary instruction (replacing the license key placeholder). There is zero redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with no output schema, the description covers the essential information: what it does, the input, and a critical post-processing step. While it doesn't explicitly describe the return format, the term 'integration code' makes it obvious. Minor omission: it doesn't state whether the code is returned as a string, file, or other, but this is not critical for invoking the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameter `framework` is already fully documented via enum and description. The tool description merely repeats 'Input: { framework }' without adding new parameter-specific details. The license key placeholder note concerns the output, not the input, so it doesn't enhance parameter understanding. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear action ('generate complete CSVBox importer integration code'), a specific resource (CSVBox importer integration), and the parameter (framework). It lists all supported values, distinguishing it from sibling tools like generate_sheet_json or create_sheet. It is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description is self-contained and clearly implies when to use it: whenever you need integration code for a listed framework. It does not explicitly mention alternatives or exclusions, but the context is clear enough that an agent can infer appropriate usage without confusion.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_sheet_functionsGenerate CSVBox Sheet FunctionsA
Author CSVBox virtual_columns, validation_functions, and data_transforms from a natural-language prompt using a configured LLM. Does NOT call the CSVBox API — it returns JSON so you can REVIEW the generated JavaScript before applying it with patch_sheet. Collections the request does not imply are omitted, never returned as empty arrays. Returns { virtual_columns?, validation_functions?, data_transforms?, source, validation }. Requires ANTHROPIC_API_KEY or OPENAI_API_KEY; without one it returns an error pointing to the csvbox_sheet_functions MCP prompt. Input: { prompt, sheet? }.
| Name | Required | Description | Default |
|---|---|---|---|
| sheet | No | The existing sheet the functions will be applied to. Supplying it lets the model reference real column names and lets validation check those references. CSVBox exposes no read endpoint, so this must be passed inline. | |
| prompt | Yes | Natural-language description of the functions to author, e.g. "add a virtual column joining first and last name, and validate that every email contains an @". |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It discloses that the tool does not call the API, omits unmentioned collections rather than returning empty arrays, returns a specific JSON shape, requires ANTHROPIC_API_KEY or OPENAI_API_KEY, and names the error fallback. This is unusually transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place: purpose, non-API behavior, output contract, authentication requirement, error handling, and input shape. The structure front-loads the main purpose before moving to constraints and fallbacks.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Even though there is no output schema, the description provides the return contract, omission behavior, auth prerequisites, and the downstream patch_sheet step. With only two parameters and one required, nothing essential is left for the agent to infer.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters well. The description only restates the input shape as '{ prompt, sheet? }' and adds no new meaning beyond what the schema's per-parameter descriptions provide. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Uses a specific verb and resource ('Author CSVBox virtual_columns, validation_functions, and data_transforms') and clearly states it returns reviewable JSON rather than calling the CSVBox API. This distinguishes it from patch_sheet, create_sheet, and generate_import_code even before reading schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Establishes a clear workflow: generate functions, review the returned JSON, then apply with patch_sheet. It also says the tool does not call the API and warns about missing API keys, but it does not explicitly contrast itself with generation siblings like generate_sheet_json or generate_import_code.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_sheet_jsonGenerate CSVBox Sheet JSONA
Generate a COMPLETE CSVBox sheet (title, sheet_columns, destinations, webhooks, security_settings, steps) from a natural-language prompt using a configured LLM. Does NOT call the CSVBox API. Returns { sheet, source, validation }. Requires ANTHROPIC_API_KEY or OPENAI_API_KEY; without one it returns an error pointing to the create_csvbox_sheet MCP prompt. Input: { prompt }.
| Name | Required | Description | Default |
|---|---|---|---|
| prompt | Yes | Natural-language description of the importer, e.g. "Create employee importer with columns name, email, salary, joining date; destination as testapi; allow only xlsx files". |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It discloses several key behaviors: no API call, key requirements, error fallback, and the return shape { sheet, source, validation }. However, it does not describe whether the call is synchronous, how long it may take, token/rate-limit considerations, or the meaning of the returned 'source' and 'validation' fields — moderate disclosure but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, all load-bearing: the exclusions ('Does NOT call...') and key requirement ('Requires ANTHROPIC_API_KEY...') are front-loaded before the input spec. The use of ALL-CAPS for emphasis is a minor stylistic distraction, but overall it is compact with no wasted sentences.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-input-parameter tool with no output schema and no annotations, the description covers the essentials: what it returns, its prerequisites, a common failure mode, and what the prompt parameter expects. The only notable gap is the absence of a minimal output/JSON example structure, which would help the agent gauge the result format.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter prompt is fully documented in the schema (100% coverage, with a concrete example). The description adds only 'natural-language prompt' context, which marginally reinforces but does not extend the schema. Baseline 3 is appropriate where the schema already carries the parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb+resource ('Generate a COMPLETE CSVBox sheet') and enumerates the exact fields produced (title, sheet_columns, destinations, webhooks, security_settings, steps). It distinguishes itself from the API-calling siblings by explicitly stating 'Does NOT call the CSVBox API,' which is the key differentiator among the sibling list.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states the enabling condition (ANTHROPIC_API_KEY or OPENAI_API_KEY required) and the failure behavior when absent (returns an error pointing to create_csvbox_sheet). It clearly implies this tool generates JSON only and is the predecessor to an API-calling tool, though it doesn't name an explicit 'when not to use' sibling or a direct comparison to create_importer_from_prompt.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
patch_sheetPatch CSVBox SheetA
Partially update a CSVBox sheet via PATCH /1.1/sheet/{sheet_license_key}. Sends only the changes object. Input: { sheet_license_key, changes }. Returns the API response. PATCH MERGES: only the items you list are touched and nothing is deleted implicitly, so an empty array is a no-op. Items in virtual_columns, validation_functions and data_transforms are matched by column_name / function_name / transform_name respectively — an unmatched name creates a new item. To remove one, send it with _delete: true; every other field on a _delete item is ignored, including js_code. This is the safe verb for applying generated functions. Run validate_schema with mode 'patch' first.
| Name | Required | Description | Default |
|---|---|---|---|
| changes | Yes | Only the partial changes to apply to the sheet. | |
| sheet_license_key | Yes | The license key of the sheet to patch. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden and discloses substantial behavior: PATCH merges, only listed items are touched, empty array is a no-op, matching by names with unmatched creating new items, _delete: true for removal, and that other fields on a _delete item are ignored. It also mentions the return is 'the API response.' This exceeds typical descriptions, though it omits error handling or permission nuances.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but each sentence earns its place: purpose, input/output, merge semantics, matching rules, deletion, and usage advice. It's front-loaded with the purpose, and while it's longer than average, the complexity of the operation justifies the length. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (nested objects, merge behavior, deletion), the description covers all critical aspects: how partial updates work, how to target items, how to delete, and the prerequisite validation step. It returns the API response but doesn't detail error cases, which is acceptable without an output schema. The description is sufficient for an agent to call correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds significant meaning to the 'changes' object by explaining the internal structure (virtual_columns, validation_functions, data_transforms), how items are matched by names, and the _delete flag semantics. This goes well beyond the schema's minimal 'Only the partial changes to apply to the sheet.'
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Partially update'), resource ('CSVBox sheet'), and the HTTP method (PATCH /1.1/sheet/{sheet_license_key}'). It clearly differentiates from sibling tools like update_sheet by emphasizing 'partial' and 'PATCH', and from create_sheet by 'update'. The purpose is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear context: 'This is the safe verb for applying generated functions' and instructs to 'Run validate_schema with mode patch first.' While it doesn't explicitly name update_sheet as an alternative, the 'partial' vs full update distinction and the 'safe verb' guidance effectively imply when to prefer this tool over others.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
submit_fileSubmit File via CSVBox REST File APIA
Submit a file for import via POST /1.1/file. Provide exactly one of public_file_url (JSON submission) or file_base64 + file_name (multipart direct upload — file_base64 is decoded server-side and sent to CSVBox as true binary multipart content, never as a base64 string). Input: { sheet_license_key, public_file_url? | (file_base64?, file_name?), file_sheet_name?, user?, options?, dynamic_columns? }. Returns the API response.
| Name | Required | Description | Default |
|---|---|---|---|
| user | No | Custom user reference object attached to the import. | |
| options | No | Import options: has_header (0/1), max_rows, auto_map. | |
| file_name | No | File name for the direct upload. Required with file_base64. | |
| file_base64 | No | Base64-encoded file content for direct upload. This is an MCP-transport-only encoding: the server decodes it into raw bytes and sends CSVBox a true multipart/form-data 'file' part, never a base64 string. Mutually exclusive with public_file_url. Requires file_name. Prefer public_file_url for large files. | |
| dynamic_columns | No | Dynamic column definitions with validators. | |
| file_sheet_name | No | Worksheet name to import, for multi-tab files. | |
| public_file_url | No | Public URL of the file to import. Mutually exclusive with file_base64. | |
| sheet_license_key | Yes | The license key of the sheet to import into. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and discloses key behavior: it explains the server-side decoding of file_base64 into true binary multipart content, the alternative JSON path, and that it returns the API response. It does not mention authentication or side effects, but the mutation is implied by 'submit for import' and the transport detail goes beyond basic expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. It front-loads the endpoint and the primary decision (which submission mode), then presents the full input structure compactly. Every clause contributes information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 8 parameters, nested objects, and two mutually exclusive alternatives, the description is thorough: it maps the parameter combos, explains the encoding nuance, and notes the return value. It omits authentication prerequisites and error handling, but those are commonly left to the API docs and the schema already covers required fields.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds real value beyond the schema by showing the exact input structure with alternatives and grouping, clarifying the mutual exclusivity already hinted in properties, and adding the file-size preference. This is more than the baseline 3 would require.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (submit a file for import), the resource (via POST /1.1/file), and the two distinct submission modes (JSON vs multipart). It distinguishes this tool from siblings like create_sheet or generate_import_code by focusing on the file submission action.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly lays out the mutually exclusive parameter combinations ('Provide exactly one of...') and even adds a practical preference ('Prefer public_file_url for large files'). It does not explicitly contrast with sibling tools, but the sibling set is clearly different in function, so this gap is minor.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_sheetUpdate (Replace) CSVBox SheetA
Replace an existing CSVBox sheet via PUT /1.1/sheet/{sheet_license_key}. Input: { sheet_license_key, sheet }. Returns the API response. DESTRUCTIVE: PUT is authoritative for every collection it sends — items listed are created or updated in place, and any existing item the array does not name is DELETED. This applies to virtual_columns, validation_functions and data_transforms: sending an empty array DELETES ALL of that collection's items, while OMITTING the key leaves them untouched. _delete is not valid here; use patch_sheet to remove a single item. Run validate_schema with mode 'put' first to catch a destructive body.
| Name | Required | Description | Default |
|---|---|---|---|
| sheet | Yes | The full replacement CSVBox sheet object. | |
| sheet_license_key | Yes | The license key of the sheet to replace. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden — and it excels. It discloses the destructive PUT semantics (unnamed items are DELETED), which collections are affected (virtual_columns, validation_functions, data_transforms), the critical empty-array-deletes vs omit-preserves distinction, and invalidates `_delete`. The safety warnings cover all dangerous behavior an agent needs to avoid.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long, but every sentence earns its place for a destructive operation — the PUT-authoritative semantics, collection scope, and empty-vs-omit warning are all essential safety information. Core purpose is front-loaded before the behavioral warnings. Slightly verbose, justified by the risk profile.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive mutation with zero annotations and no output schema, this is complete. It covers what gets destroyed, the collection semantics, the invalid `_delete`, and pre-validates via validate_schema. Return value is minimally stated ('Returns the API response'), which is acceptable given no output schema exists. Nothing an agent needs to call this safely is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so both parameters (sheet_license_key, sheet) are already documented inline, warranting baseline 3. The description adds some value by clarifying the destructive behavior of collections inside the `sheet` object, but it doesn't add syntax or format details beyond the schema's 'full replacement CSVBox sheet object'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Replace'), resource ('an existing CSVBox sheet'), and HTTP method (PUT /1.1/sheet/{sheet_license_key}'). The title reinforces the replace-vs-patch distinction, and the description names patch_sheet for partial updates, making it distinguishable from siblings without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly routes to alternatives with conditions: 'use patch_sheet to remove a single item', declares `_delete` is not valid here, and instructs 'Run validate_schema with mode put first'. This gives clear when-to/when-not guidance and names the safety pre-check, which is ideal for a destructive tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_schemaValidate CSVBox SchemaA
Validate a CSVBox sheet schema locally (no API call). Requires a non-empty title; sheet_columns is optional (absent passes, empty yields a warning). When columns are present, checks for missing column_name/display_label/type, unsupported types, duplicate names, duplicate positions, and invalid dependent column references. Also checks virtual_columns, validation_functions, and data_transforms: per-sheet caps, duplicate and colliding names, missing or oversized js_code, scope/run_at enums, column references against sheet_columns, and dependency URLs (https, allowed CDN hosts, .js/.mjs, integrity digest). Pass mode ('create' | 'put' | 'patch', default 'create') so empty-array and _delete rules match the verb you are about to use. Returns { valid, errors, warnings }.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | Which write verb this payload is headed for. "create" (default) for POST, "put" for a full replace, "patch" for a partial update. Affects only the function collections: an empty array is an error under "put" (it deletes every item); `_delete` is fully valid under "patch", redundant (warning only) under "put", and an error under "create". | |
| sheet | Yes | The CSVBox sheet object to validate. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It thoroughly describes what the tool does: it performs a local validation, enumerates all the checks (missing fields, duplicates, types, references, dependency rules), explains the mode-dependent behavior (empty array vs _delete), and states the return shape { valid, errors, warnings }. This is exceptionally transparent and leaves no ambiguity about side effects or limitations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense paragraph that front-loads the core purpose and then systematically covers prerequisites, specific checks, mode handling, and return format. Every sentence adds value; there is no filler or repetition. The structure is logical and allows an agent to quickly grasp the tool's behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (many validation rules), the minimal schema, and absence of annotations, the description is remarkably complete. It covers all relevant inputs (sheet, mode), the exact validation logic, the behavior under different modes, and the output structure. There is no critical information missing for an agent to call this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although the schema descriptions cover both parameters, the tool description adds significant meaning. For 'mode', it explains the impact of each enum value on validation rules, which the schema description only partially hints at. For 'sheet', since the schema only says 'object', the description is the sole source of truth for what the sheet object should contain (sheet_columns, virtual_columns, validation_functions, data_transforms). This goes well beyond the schema's generic definition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Validate a CSVBox sheet schema locally (no API call).' This clearly distinguishes it from sibling tools like create_sheet or update_sheet, which perform mutations. The phrase 'no API call' further separates it from any network-dependent tool. The purpose is unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly conveys when to use this tool: before an API call to validate the schema against the intended write verb, as shown by the mode parameter explanation ('Pass mode... so empty-array and _delete rules match the verb you are about to use'). However, it does not explicitly name alternative tools or state 'use this instead of X,' so it stops short of full exclusion guidance. The context is adequate for an agent to infer usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
9 tool updates
v1.0.1- First observed
create_importer_from_prompt - First observed
create_sheet - First observed
generate_import_code - First observed
generate_sheet_functions - First observed
generate_sheet_json - First observed
patch_sheet - First observed
submit_file - First observed
update_sheet - First observed
validate_schema
TDQS
Tools are mostly distinct: create/update/patch/validate/submit/generate each target different actions. The three 'generate_' tools produce different outputs (sheet JSON, code, functions), but 'create_importer_from_prompt' and 'generate_sheet_json' both involve prompt-based sheet generation, with the former actually creating while the latter only returns JSON, which could cause minor confusion.
Most names follow a verb_noun pattern (create_sheet, update_sheet, patch_sheet, validate_schema, submit_file, generate_sheet_json, generate_import_code, generate_sheet_functions). The exception is 'create_importer_from_prompt', which uses 'importer' instead of the more consistent 'sheet' and breaks the pattern slightly.
With 9 tools, the surface is well-scoped for a CSV import integration server. Each tool covers a distinct aspect (schema creation, modification, validation, file submission, and generation helpers) without redundancy, and the count fits comfortably in the ideal range.
The set covers create, update (PUT/PATCH), validation, and file submission, but lacks read operations (e.g., get_sheet, list_sheets) and explicit sheet deletion. While patch supports _delete, there is no direct delete_sheet tool. This creates a gap for agents that need to inspect or manage existing sheets outside of updates.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Query, join, profile, clean and convert CSV/JSON/Parquet with server-side DuckDB over MCP.
Manage feature requests, votes, roadmaps, and changelogs from any MCP client.
Create, update, and publish changelog entries on your Patchlog changelog from any MCP client.
Related MCP Servers
- FlicenseAqualityDmaintenanceEnables comprehensive CSV file management including creating, editing, analyzing, and transforming CSV data anywhere in the filesystem. Provides statistical analysis, data validation, filtering, and grouping capabilities through MCP protocol over stdio transport.15-
- AlicenseBqualityCmaintenanceEnables SQL querying over CSV and Excel files using DuckDB, providing tools to load files, inspect schemas, and run read-only queries via MCP.5MIT
- FlicenseNot gradedqualityCmaintenanceMCP server that exposes Google Sheets as read-only resources, providing static and templated URI access to sheet data as CSV.-
- AlicenseNot gradedqualityCmaintenanceEnables reading, writing, appending, and creating Google Sheets spreadsheets through MCP tools, with support for exploring spreadsheet structure and creating new sheets.14MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/csvbox-io/csvbox-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server