Skip to main content
Glama
Sign In
Local-Workspace-MCP

Local-Workspace-MCP

by Aparsa40
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Local-Workspace-MCP

A local, policy-controlled MCP server that gives AI assistants and agents explicitly authorized access to selected files and developer resources on a Windows workstation.

Status: Early foundation implementation. The initial server exposes read-only filesystem tools. Write, delete, Git, terminal, and PowerShell capabilities are not enabled yet.

Features in this foundation

  • MCP over local stdio; no network listener.

  • Explicit workspace roots and capability-based authorization.

  • Read-only tools: list_files, read_file, get_file_info, and search_files.

  • Canonical path validation and symlink/reparse-point escape checks.

  • Bounded file size, search depth, and result count.

  • Audit events written to stderr so stdout remains reserved for MCP JSON-RPC.

  • CI checks for type safety, lint, tests, build, dependency audit, and CodeQL.

Related MCP server: File Context MCP Server

Requirements

  • Node.js 22 or later

  • npm 10 or later

Local setup

npm install
Copy-Item config/permissions.example.json config/permissions.json

Edit config/permissions.json and replace the sample root with a real, existing absolute directory. Grant only the capabilities you need. The initial implementation supports list, read, search, and metadata.

Start the server:

npm run dev

The process waits for an MCP client over stdin/stdout. Do not type ordinary commands into the server terminal while it is running.

For a non-default configuration path:

$env:LWMCP_CONFIG = "F:\\AI-Config\\local-workspace-mcp.json"
npm run dev

MCP tools

Tool

Description

list_files

List direct entries in an authorized directory

read_file

Read a bounded UTF-8 text file

get_file_info

Read limited file/directory metadata

search_files

Search file names with bounded traversal

Tool paths must be relative to a configured root. Absolute paths and traversal segments are rejected. The most specific matching configured root controls permissions for nested roots.

Checks

npm run typecheck
npm run lint
npm test
npm run build
npm audit --audit-level=high

CI runs typecheck, lint, tests, build, and dependency audit. Dependency Review runs on pull requests; CodeQL runs on pushes, pull requests, and a weekly schedule. The first CI run will validate the initial dependency graph; a committed lockfile should be added after the first local install.

Security notes

  • Run as the current user; do not use Administrator.

  • Keep config/permissions.json private; it is ignored by Git.

  • Do not configure broad roots such as an entire drive or user profile.

  • Do not expose the server through a network transport.

  • This initial implementation is read-only. Future write-capable modules require separate capabilities, tests, and review.

See SECURITY.md and architecture.md.

License

MIT. See LICENSE.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo recent community issues

Resources

Related MCP Connectors

Related MCP Servers

  • MCP File Browser Server

    ntufar
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables Large Language Models to safely browse and interact with local file systems through secure directory listing, file reading, and content search capabilities. Built with comprehensive security controls and high-performance handling of large directories and files.
    1
    MIT

  • File Context MCP Server

    alayonyo
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI assistants to read, search, and analyze local file systems with tools for reading file contents, listing directories, searching by patterns, and analyzing folder structures for context-aware queries.
    MIT