Skip to content

io.github.theluckystrike/docx-document-generator-proposal-contract-markdown

by theluckystrike · remote · local (mcpb) · no sign-in to list tools · v0.22.6 · published by GitHub user theluckystrike

Create real Word .docx files from your AI chat: proposals, quotes, contracts, statements of work.

Deletes · 1Final · 5Changes · 6

14 tools: 1 can delete or cancel things, 5 do something that can't be undone, 6 change things and 2 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http docx-document-generator-proposal-contract-markdown https://mcp.zovo.one/mcp/docx --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "doc_read" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "doc_read" says "read": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Deletes or cancels 1Claude Code: deny
  • doc_delete_uploadDelete one document uploaded for your token: name is the name it was uploaded under, without .docx.No findings

    Why it is in this group

    • The name "doc_delete_upload" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete one document uploaded for your token: name is the name it was uploaded under, without .docx. doc_files lists them. A name nothing is stored under is refused and nothing is deleted.
Can't be undone 5Claude Code: ask
  • contract_createCall this tool to produce a freelance service agreement .docx.No findings

    Why it is in this group

    • The name "contract_create" says "create": a word for a change.
    • The input carries an amount (input.fee.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Call this tool to produce a freelance service agreement .docx. Returns the reference, the fee and the file path. It is a template skeleton for a lawyer to review, not legal advice. Free tier: 3 agreements per month.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • doc_createCall this tool to write a real .docx file from structured sections.No findings

    Why it is in this group

    • The name "doc_create" says "create": a word for a change.
    • The input addresses people (input.recipient): what it sends cannot be taken back.
    Description, as the server wrote it
    Call this tool to write a real .docx file from structured sections. Returns the file path, the number of blocks written and the layout used. Free and unlimited.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • doc_uploadSend an existing Word document to this hosted endpoint.No findings

    Why it is in this group

    • The name "doc_upload" says "upload": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send an existing Word document to this hosted endpoint. There is no filesystem here, so instead of a path you upload the file once with doc_upload and then pass its name as `path` to doc_read, doc_to_html and doc_fill_template. Give exactly one of docx_base64 or url. url: fetch a public file instead of pasting base64 (recommended above about 10 KB): a 13 KB base64 paste can take minutes to write out, while a url costs one line and the fetch happens here (10 second timeout, at most 3 redirects, public http(s) hosts only, 2 MB cap). Uploads are kept for your token between calls; doc_read and doc_fill_template also take docx_base64 directly; that file is stored under the name you give (default 'inline' / 'template') and can be removed with doc_delete_upload. Documents this server writes come back as a download link valid for one hour.
  • proposal_createCall this tool to produce a client-ready .docx proposal from summary, scope, deliverables, timeline, price and terms.No findings

    Why it is in this group

    • The name "proposal_create" says "create": a word for a change.
    • The input carries an amount (input.price.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Call this tool to produce a client-ready .docx proposal from summary, scope, deliverables, timeline, price and terms. Returns the reference, the total and the file path. Free tier: 3 proposals or contracts per month.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • proposal_updateRewrite an existing proposal in place from its reference.No findings

    Why it is in this group

    • The name "proposal_update" says "update": a word for a change.
    • The input carries an amount (input.price.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Rewrite an existing proposal in place from its reference. Only the fields you pass change; the rest comes from the data stored at creation. Returns the fields that changed and the file path.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Changes things 6Claude Code: ask
  • business_setStore the sender details printed on every proposal, contract and letter, plus the currency, VAT, terms and prefix defaults.No findings

    Why it is in this group

    • The name "business_set" says "set": a word for a change.
    Description, as the server wrote it
    Store the sender details printed on every proposal, contract and letter, plus the currency, VAT, terms and prefix defaults. It writes the SAME shared profile as the invoice server's business_set.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • doc_fill_templateCall this tool to replace {{placeholders}} in a .docx and write a new file, reporting what was filled, unfilled or ignored.No findings

    Why it is in this group

    • The name "doc_fill_template" says "fill": a word for a change.
    Description, as the server wrote it
    Call this tool to replace {{placeholders}} in a .docx and write a new file, reporting what was filled, unfilled or ignored. Call it with no values to list them. Free: templates up to 10 placeholders.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • doc_from_markdownCall this tool to turn markdown into a .docx, returning the file and a count of blocks by type.No findings

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    Description, as the server wrote it
    Call this tool to turn markdown into a .docx, returning the file and a count of blocks by type. Headings, lists, GFM tables and code fences are honoured. Empty markdown is refused, and so is overwriting without the flag.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • doc_readCall this tool to extract the text of an existing .docx.1 finding

    Why it is in this group

    • The name "doc_read" says "read": a word for reading.
    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "doc_read" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "doc_read" says "read": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Call this tool to extract the text of an existing .docx. Returns an outline of the headings and the full text in document order, or the block structure. Free and unlimited.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • doc_to_htmlCall this tool to convert a .docx to semantic HTML you can open in a browser and print to PDF.No findings

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    Description, as the server wrote it
    Call this tool to convert a .docx to semantic HTML you can open in a browser and print to PDF. Returns the path of the .html file. This is the supported PDF route; no PDF is rendered here. Free and unlimited.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • license_activateTurn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Turn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle. Data under your token stays; a wrong or expired key changes nothing. license_status confirms it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 2Claude Code: allow
  • doc_filesList the documents uploaded for your token, with their sizes.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the documents uploaded for your token, with their sizes.
  • license_statusReport this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL.No findings

    Why it is in this group

    • The name "license_status" says "status": a word for reading.
    Description, as the server wrote it
    Report this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL. Call it to explain a free-tier refusal. No arguments, nothing changes.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.22.6. Values in angle brackets are yours to fill in.

claude mcp add --transport http docx-document-generator-proposal-contract-markdown https://mcp.zovo.one/mcp/docx --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__docx-document-generator-proposal-contract-markdown__license_status",
      "mcp__docx-document-generator-proposal-contract-markdown__doc_files"
    ],
    "ask": [
      "mcp__docx-document-generator-proposal-contract-markdown__business_set",
      "mcp__docx-document-generator-proposal-contract-markdown__doc_create",
      "mcp__docx-document-generator-proposal-contract-markdown__doc_from_markdown",
      "mcp__docx-document-generator-proposal-contract-markdown__doc_read",
      "mcp__docx-document-generator-proposal-contract-markdown__doc_to_html",
      "mcp__docx-document-generator-proposal-contract-markdown__doc_fill_template",
      "mcp__docx-document-generator-proposal-contract-markdown__proposal_create",
      "mcp__docx-document-generator-proposal-contract-markdown__proposal_update",
      "mcp__docx-document-generator-proposal-contract-markdown__contract_create",
      "mcp__docx-document-generator-proposal-contract-markdown__license_activate",
      "mcp__docx-document-generator-proposal-contract-markdown__doc_upload"
    ],
    "deny": [
      "mcp__docx-document-generator-proposal-contract-markdown__doc_delete_upload"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as docx-document-generator-proposal-contract-markdown. Review it before you use it.