Filesystem MCP Server

Filesystem MCP Server (v0.1)

A simple MCP server for filesystem operations with directory sandboxing and read-only mode support.

Early version (0.1) - not thoroughly tested/reviewed, use with caution

Quick Start

Install dependencies:

git clone <repo_url>
uv sync

Run the server:

# Normal mode - full filesystem access
uv run main.py /path/to/allowed/directory

# Read-only mode - no write operations  
uv run main.py --read-only /path/to/allowed/directory

Features

Directory sandboxing (operations restricted to allowed paths)
--read-only flag disables write operations
Gitignore support for searches
Human-readable error messages

Usage Examples

Normal Mode

uv run main.py ~/projects
# Provides: create_file, delete_file, move_file, edit_file, create_directory + read tools

Read-Only Mode

uv run main.py --read-only ~/projects
# Provides only: read_text_file, list_directory, search_files, grep, directory_tree

Multiple Directories

uv run main.py /home/user/docs /tmp/workspace
uv run main.py --read-only /var/log /etc/config

Available Tools

Read Operations (always available):

read_text_file - Read file contents
list_directory - List directory contents
directory_tree - JSON directory structure
search_files - Find files by pattern
grep - Search text in files
read_multiple_files - Bulk file reading

Write Operations (disabled in --read-only):

create_file - Create new files
delete_file - Delete files
move_file - Move/rename files
edit_file - Edit file contents
create_directory - Create directories

Dependencies

From pyproject.toml:

fastmcp>=2.11.2 - MCP framework
pathspec>=0.12.1 - Gitignore patterns

Security Notes

All paths resolved with Path.resolve() to prevent traversal
Operations restricted to allowed directories only
Binary files rejected for text operations

This server cannot be installed

security - not tested

license - not found

quality - not tested

How are these scores calculated?

local-only server

The server can only run on the client's local machine because it depends on local resources.

Enables secure filesystem operations with directory sandboxing and optional read-only mode. Supports file reading/writing, directory management, file searching, and text operations while restricting access to specified directories.

Related MCP Servers

MCP Filesystem Python
mtunell
-
security
A
license
-
quality
A secure MCP server enabling read-only access and file search capabilities within a specified directory, while respecting .gitignore patterns.
Last updated -
Python
MIT License
MCP Filesystem Python
punkpeye
-
security
A
license
-
quality
This server offers secure, read-only access to directory files via the MCP, supporting file searching, .gitignore compliance, path traversal protection, and MIME type detection using the 'file://' URI scheme.
Last updated -
19
MIT License
MCP File System Server
kvas-it
-
security
F
license
-
quality
This server provides an interface for performing basic file system operations such as navigation, reading, writing, and file analysis, allowing users to manage directories and files efficiently.
Last updated -
4
Python
MCP File System
Wayazi
A
security
A
license
A
quality
A server implementing the Model Context Protocol that provides filesystem operations (read/write, directory management, file movement) through a standardized interface with security controls for allowed directories.
Last updated -
9
3
TypeScript
MIT License

View all related MCP servers

Filesystem MCP Server