ellmos FileCommander MCP Server
The ellmos FileCommander MCP Server gives AI assistants comprehensive local system access via 47 specialized tools across the following capabilities:
Filesystem Operations
Read (single or batch), write, append, create, move, copy, and delete files/directories
Safe delete routes to Recycle Bin/Trash instead of permanent deletion
List directories recursively, create nested directories, get detailed file metadata
Cloud-lock-safe move operations with automatic copy+delete fallback
Content & File Search
Synchronous wildcard file search (up to 500 results)
Multi-file literal/regex content search across an explicit list of up to 50 files, with context lines and match limits
Async background file searches with paginated result retrieval, plus stop/list/clear management
Process Management
Execute blocking shell commands with configurable timeout
Start non-blocking background processes
List running processes (with name filtering) and terminate by PID or name
Interactive Sessions (REPLs)
Start Python, Node.js, PowerShell, or shell sessions
Send input, read output, list, and close sessions
File Repair & Maintenance
Fix and validate JSON (BOM, trailing commas, comments, single quotes, NUL bytes)
Clean up files (remove BOM/NUL bytes, normalize line endings, strip trailing whitespace)
Fix Mojibake/encoding errors
Track directory changes via snapshots (new/modified/deleted files)
Batch rename files by pattern
Detect duplicate files (SHA-256) and compute checksums (MD5, SHA-1, SHA-256, SHA-384, SHA-512)
Convert between formats: JSON, CSV, INI, YAML, TOML, XML, TOON
Archive & OCR
Create, extract, and list ZIP archives
Extract text from images (JPG/PNG/BMP/TIFF) via Tesseract OCR
Export & Web
Convert Markdown to styled HTML or PDF (via headless browser)
Fetch web pages with SSRF protection, returning clean text, raw HTML, links, forms, or headers
Cloud Sync & Safety
Diagnose potential cloud sync lock conflicts (OneDrive, Dropbox, Google Drive, iCloud)
Toggle global safe mode to route all deletes through Recycle Bin/Trash
System Utilities
Get current system time with timezone info
Set output language for tool responses (English, German, Spanish, Chinese, Japanese, Russian)
Provides automatic handling of cloud sync conflicts (e.g., copy+delete fallback) when operations on Dropbox-synced files fail due to sync filters.
Provides automatic handling of cloud sync conflicts (e.g., copy+delete fallback) when operations on Google Drive-synced files fail due to sync filters.
Provides automatic handling of cloud sync conflicts (e.g., copy+delete fallback) when operations on iCloud-synced files fail due to sync filters.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ellmos FileCommander MCP Serverlist files in the project directory"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ellmos FileCommander MCP Server
🇩🇪 Deutsche Version
Part of the ellmos-ai family.
A comprehensive Model Context Protocol (MCP) server that gives AI assistants full filesystem access, bounded multi-file content search, process management, interactive shell sessions, and async filename search capabilities.
47 tools in a single server - everything an AI agent needs to interact with the local system.
Discovery keywords: local filesystem MCP server, multi-file content search MCP, safe delete MCP, Recycle Bin MCP server, process management MCP, interactive shell MCP, async file search for AI agents, cloud-lock-safe file operations, Markdown to PDF MCP, OCR MCP server, ZIP archive MCP.
Registry status: published on npm, indexed by jsDelivr, visible on LobeHub, listed on Glama, and prepared for the official MCP Registry via server.json. Some third-party directories still show older 43-tool metadata, so the canonical README/npm metadata should remain the source of truth until their reindex catches up.
For AI Agents & LLM Integrations:
FileCommander provides 47 specialized tools accessible via standard stdio transport. All tool names use the fc_ prefix to prevent namespace collisions. For LLMs, compact context and schema overviews are available in llms.txt and server.json.
Why FileCommander?
Most filesystem MCP servers only cover basic read/write operations. FileCommander goes further:
Safe Delete - Moves files to Recycle Bin (Windows) or Trash (macOS/Linux) instead of permanent deletion
Interactive Sessions - Start and interact with REPLs (Python, Node.js, shells) through the MCP protocol
Async Search - Search large directory trees in the background while the AI continues working
Explicit Content Search - Search literal text or regex across a bounded list of files without recursion or glob expansion
Process Management - List, start, and terminate system processes
String Replace - Edit files by matching unique strings with context validation
Format Conversion - Convert between JSON, CSV, INI, YAML, TOML, XML, and TOON
ZIP Archives - Create, extract, and list ZIP archives
File Checksums - MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashing with compare
OCR - Extract text from images (optional tesseract.js dependency)
Safety Mode - Toggle to route all deletes through Recycle Bin / Trash
Markdown Export - Convert Markdown to professional HTML/PDF with code blocks, tables, nested lists, blockquotes
Cloud-Lock Safe - Automatic copy+delete fallback when cloud sync filters (OneDrive, Dropbox, Google Drive, iCloud) block rename operations
Cloud Lock Diagnosis - Check whether a path is at risk of sync-filter conflicts before operating
Cross-platform - Works on Windows, macOS, and Linux with platform-specific optimizations
Related MCP server: MCP Toolkit
System Architecture
flowchart TD
subgraph Client["MCP Client Layer"]
Claude["Claude Desktop / Claude Code"]
Custom["Custom LLM Agents / Frameworks"]
end
subgraph Transport["Transport Layer"]
Stdio["Stdio Transport (JSON-RPC)"]
end
subgraph Core["ellmos FileCommander Engine (47 Tools)"]
FS["Filesystem & Cloud-Lock Guard\n(14 tools: read, write, edit, safe-delete, cloud-lock safe)"]
Search["Search Engine\n(6 tools: explicit content search plus 5 async filename-search tools)"]
Proc["Process & REPL Sessions\n(9 tools: exec, background proc, interactive REPLs)"]
Repair["Repair & Format Converter\n(9 tools: JSON fix, Mojibake fix, duplicates, format convert)"]
Export["Export & Web Scraper\n(3 tools: Markdown->HTML/PDF, web_fetch)"]
Sys["System & Utilities\n(6 tools: OCR, ZIP, checksums, safe-mode, time)"]
end
Client -->|JSON-RPC| Stdio
Stdio --> Core
Core --> FS
Core --> Search
Core --> Proc
Core --> Repair
Core --> Export
Core --> SysInstallation
Prerequisites
Node.js 20 or higher
npm
Option 1: Install from NPM
npm install -g ellmos-filecommander-mcpOption 2: Install from Source
git clone https://github.com/ellmos-ai/ellmos-filecommander-mcp.git
cd ellmos-filecommander-mcp
npm install
npm run buildConfiguration
Claude Desktop
Add to your claude_desktop_config.json:
Windows: %APPDATA%\Claude\claude_desktop_config.json
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
If installed globally via NPM:
{
"mcpServers": {
"filecommander": {
"command": "ellmos-filecommander"
}
}
}If installed from source:
{
"mcpServers": {
"filecommander": {
"command": "node",
"args": ["/absolute/path/to/filecommander-mcp/dist/index.js"]
}
}
}Restart Claude Desktop after saving.
Other MCP Clients
The server communicates via stdio transport. Point your MCP client to the dist/index.js entry point or the ellmos-filecommander binary.
Tools Overview
Filesystem Operations (14 tools)
Tool | Description |
| Read file contents with optional line limit |
| Read up to 20 files in a single call |
| Write/create/append to files |
| Line-based editing (replace, insert, delete lines) |
| Replace a unique string in a file with context validation |
| List directory contents (recursive, configurable depth) |
| Create directories (including parents) |
| Delete a file (permanent) |
| Delete a directory (with optional recursive flag) |
| Move to Recycle Bin / Trash (recoverable!) |
| Move or rename files and directories (cloud-lock safe) |
| Copy files and directories |
| Get detailed file metadata (size, dates, type) |
| Synchronous file search with wildcard patterns |
Content Search (1 tool)
Tool | Description |
| Read-only literal or regex search within an explicit ordered list of files, with case, context, global, and per-file limits |
fc_search_content never expands globs, traverses directories, or recursively discovers files. It accepts at most 50 explicit UTF-8 text files, skips binary and files over 10 MB, and returns deterministic JSON. Matches are limited to 200 globally and 100 per file, context to 10 lines, excerpts to 500 characters, and serialized output to 200,000 characters. Missing, cloud-only, permission, encoding, binary, and size failures are reported per file so readable files still produce results. Common secret formats are redacted from excerpts.
Async Search (5 tools)
Tool | Description |
| Start a background search (returns immediately) |
| Retrieve results with pagination |
| Cancel a running search |
| List all active/completed searches |
| Remove completed searches from memory |
Process Management (4 tools)
Tool | Description |
| Execute a shell command (blocking, with timeout) |
| Start a background process (non-blocking) |
| List running system processes |
| Terminate a process by PID or name |
Interactive Sessions (5 tools)
Tool | Description |
| Start an interactive process (Python, Node, shell...) |
| Read session output |
| Send input to a running session |
| List all sessions |
| Terminate a session |
File Maintenance & Repair (9 tools)
Tool | Description |
| Repair broken JSON (BOM, trailing commas, comments, single quotes) |
| Validate JSON with detailed error position and context |
| Remove BOM, NUL bytes, trailing whitespace, normalize line endings |
| Fix Mojibake / double-encoded UTF-8 (27+ character patterns) |
| Track directory changes with snapshots (new/modified/deleted) |
| Pattern-based batch renaming (prefix/suffix, replace, auto-detect) |
| Convert between JSON, CSV, INI, YAML, TOML, XML, and TOON formats |
| Find duplicate files using SHA-256 hashing |
| File hashing (MD5, SHA-1, SHA-256, SHA-384, SHA-512) with optional compare |
Archive (1 tool)
Tool | Description |
| Create, extract, and list ZIP archives |
OCR (1 tool)
Tool | Description |
| Extract text from images via tesseract.js (optional dependency) |
Cloud Sync (1 tool)
Tool | Description |
| Diagnose whether a path may be blocked by cloud sync filters (Windows) |
System (2 tools)
Tool | Description |
| Get current system time with timezone info |
| Toggle safe mode: all deletes go through Recycle Bin / Trash |
Export (2 tools)
Tool | Description |
| Markdown to standalone HTML with CSS styling (headers, code blocks, tables, nested lists, blockquotes, images, checkboxes) |
| Markdown to PDF via headless browser (Edge/Chrome). Falls back to HTML if no browser is available |
Web (1 tool)
Tool | Description |
| Fetch a web page and return content by |
Total: 47 tools
Comparison with Alternatives
Feature | FileCommander | ||
File read/write/copy/move | 14 tools | Yes | Yes |
Safe delete (Recycle Bin) | Yes | No | No |
Explicit multi-file content search | Yes | No | No |
Async background search | 5 tools | No | No |
Interactive sessions (REPL) | 5 tools | Yes | No |
Process management | 4 tools | Yes | No |
Shell command execution | Yes | Yes | No |
String replace with validation | Yes | Yes | No |
Line-based file editing | Yes | No | No |
JSON repair & validation | 2 tools | No | No |
Encoding fix (Mojibake) | Yes | No | No |
Duplicate detection (SHA-256) | Yes | No | No |
Folder diff / change tracking | Yes | No | No |
Batch rename (pattern-based) | Yes | No | No |
Format conversion (JSON/CSV/INI/YAML/TOML/XML/TOON) | Yes | No | No |
ZIP archive (create/extract/list) | Yes | No | No |
File checksums (MD5/SHA-1/SHA-256/SHA-384/SHA-512) | Yes | No | No |
OCR (image to text) | Optional | No | No |
Safety mode (delete → Recycle Bin) | Yes | No | No |
Path allowlist / sandboxing | No | No | Yes |
Excel / PDF support | PDF (via browser) | Yes | No |
HTTP transport | No | No | No |
Markdown to HTML/PDF export | Yes | No | No |
Total tools | 47 | ~15 | ~11 |
Servers needed | 1 | 1 | + extra for processes |
Key differentiators:
Only MCP server with recoverable delete (Recycle Bin / Trash)
Only MCP server with async background search with pagination
Built-in JSON repair, encoding fix, and duplicate detection
Only MCP server with cloud-lock-safe file operations (automatic copy+delete fallback)
Most comprehensive single-server solution (47 tools)
Built-in safety mode to prevent accidental permanent deletion
Tool Prefix
All tools use the fc_ prefix (FileCommander) to avoid conflicts with other MCP servers.
Discoverability
FileCommander is designed to be discoverable by both people and AI agents:
package.jsonexposes the officialmcpName(io.github.ellmos-ai/ellmos-filecommander-mcp) and MCP-specific npm keywords.server.jsonfollows the official MCP Registry schema and points to the npm package.glama.jsonprovides MCP-directory metadata for Glama-compatible indexes.llms.txtgives compact context for LLMs, agent catalogs, and documentation crawlers.
Primary search terms: ellmos-filecommander-mcp, FileCommander MCP, filesystem MCP server, multi-file content search MCP, safe delete MCP, async file search MCP, process management MCP, Markdown PDF MCP.
External discovery notes: npm and jsDelivr may show the previously published metadata until version 1.10.0 is released. LobeHub indexes the GitHub repo as an MCP server. Use the package description and this README as the canonical 47-tool source for the current repository.
Security
This server has full filesystem access with the running user's permissions.
See SECURITY.md for detailed security information and recommendations.
Key points:
fc_execute_commandruns arbitrary shell commandsfc_delete_*tools perform permanent deletion by default (usefc_safe_deleteor enable safe mode viafc_set_safe_modeto route all deletes through Recycle Bin / Trash)No built-in sandboxing - security is delegated to the MCP client layer
Designed for local use via stdio transport only
Development
# Install dependencies
npm install
# Watch mode (auto-rebuild on changes)
npm run dev
# One-time build
npm run build
# Start the server
npm start
# Run test suite
npm testTesting
The project includes 175 Vitest tests plus 69 standalone i18n checks (244 total) covering filesystem operations, bounded content search, format conversion, encoding repair, archive handling, duplicate detection, language packs, and more.
npm test # Run all tests
node test-i18n.mjs # Run standalone i18n checks
npx vitest run # Same as above
npx vitest --watch # Watch modeTests are verified on Windows, macOS, and Linux.
Pushes and pull requests run CI on Node.js 20, 22, and 24 with npm ci, TypeScript build, Vitest, and an npm package dry-run.
See CONTRIBUTING.md for contribution guidelines.
Changelog
See CHANGELOG.md for the full version history.
License
MIT - Lukas Geiger (ellmos-ai)
History
This project was originally developed as BACH FileCommander (bach-filecommander-mcp). It has been renamed to ellmos FileCommander (ellmos-filecommander-mcp) as part of the ellmos-ai organization.
The legacy package name bach-filecommander-mcp is deprecated. Please use ellmos-filecommander-mcp instead:
npm uninstall -g bach-filecommander-mcp
npm install -g ellmos-filecommander-mcpellmos-ai Ecosystem
This MCP server is part of the ellmos-ai ecosystem — AI infrastructure, MCP servers, and intelligent tools.
MCP Server Family
Server | Tools | Focus | npm |
47 | Filesystem, content search, process management, interactive sessions, cloud-lock-safe operations | ||
22 | Code analysis, JSON repair, imports, diffs, regex | ||
12 | File repair, format conversion, batch operations | ||
18 | n8n workflow management via AI assistants | ||
20 | MCP stack discovery, profile management, control plane | ||
45 | Local-first LLM memory, knowledge, state, routing, swarm orchestration |
| |
8 | Server operations: health checks, log analysis, deploy dry-runs, mail diagnostics |
| |
3 | Headless Blender asset QA and FBX reimport verification |
| |
10 | Model-agnostic computer use: capture, safety-gated actions, Windows UIA |
|
AI Infrastructure
Project | Description |
Local-first text-based OS for LLM agents — 113+ handlers, 550+ tools, SQLite memory | |
Model-agnostic computer-use core powering Open Compute MCP | |
Provider-neutral LLM orchestration with auto-routing and budget tracking | |
Lightweight agent memory, connectors, and automation infrastructure | |
Self-hosted AI research stack (Ollama + n8n + Rinnsal + KnowledgeDigest) | |
Autonomous agent chain framework for Claude Code | |
Minimalist database-driven LLM OS prototype (4 functions, 1 table) | |
Testing framework for LLM operating systems (7 dimensions) |
Desktop Software
Our partner organization open-bricks bundles AI-native desktop applications — a modern, open-source software suite built for the age of AI. Categories include file management, document tools, developer utilities, and more.
Haftung / Liability
Dieses Projekt ist eine unentgeltliche Open-Source-Schenkung im Sinne der §§ 516 ff. BGB. Die Haftung des Urhebers ist gemäß § 521 BGB auf Vorsatz und grobe Fahrlässigkeit beschränkt. Ergänzend gilt der Haftungsausschluss der MIT-Lizenz.
Nutzung auf eigenes Risiko. Keine Wartungszusage, keine Verfügbarkeitsgarantie, keine Gewähr für Fehlerfreiheit oder Eignung für einen bestimmten Zweck.
This project is an unpaid open-source donation. Liability is limited to intent and gross negligence (§ 521 German Civil Code). The MIT license disclaimer also applies. Use at your own risk. No warranty, no maintenance guarantee, no fitness-for-purpose assumed.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- Alicense-qualityDmaintenanceA Model Context Protocol (MCP) server that allows AI models to safely access and interact with local file systems, enabling reading file contents, listing directories, and retrieving file metadata.Last updated4110MIT
- Alicense-qualityDmaintenanceA comprehensive Model Context Protocol server implementation that enables AI assistants to interact with file systems, databases, GitHub repositories, web resources, and system tools while maintaining security and control.Last updated542MIT
- Flicense-qualityFmaintenanceA Model Context Protocol server that extends AI capabilities by providing file system access and management functionalities to Claude or other AI assistants.Last updated2645
- FlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server that enables AI assistants to perform comprehensive file operations including finding, reading, writing, editing, searching, moving, and copying files with security validations.Last updated71
Related MCP Connectors
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
Personal assistant MCP server with search, execute, packages, jobs, secrets, and integrations.
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to control Unreal E…
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/lukisch/ellmos-filecommander-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server