What can you do with this server?

MCP File Forge is a sandboxed MCP server that gives AI agents secure, policy-controlled file system operations and project scaffolding across 17 tools in five categories. Reading * Read a single file (with encoding, line range, and size limits) * List directory contents (with recursion, depth limits, hidden files, and glob filtering) * Batch-read multiple files with configurable error handling Writing & Management * Write/overwrite files (with auto-parent-creation and backup options) * Create directories (recursively) * Copy, move/rename, or delete files and directories Search * Find files by glob pattern * Search file contents via regex (grep_search) with context lines and case sensitivity * Find files containing a specific literal string Metadata * Get file/directory statistics (size, timestamps, type) * Check existence and type at a given path * Calculate disk usage for a directory * Compare two files or directories Scaffolding * Create a new project from a named template with variable substitution * List available templates, optionally filtered by category Security: All operations are sandboxed to explicitly allowed directories, with path traversal and symlink protection, denied path patterns, configurable read-only mode, and file size/recursion depth limits. It is cross-platform with configuration via environment variables, config files, or Claude Desktop integration.

How do I use MCP File Forge?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@MCP File Forge scaffold a new project from the web-app template in C:/Projects/my-app" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

MCP File Forge

by mcp-tool-shop-org

Overview Schema Related Servers Score Discussions

TypeScript

Local

At a Glance

MCP File Forge is a Model Context Protocol (MCP) server that gives AI agents sandboxed, policy-controlled access to the local file system. It ships 17 tools across five categories:

Category	Tools	Description
Reading	`read_file`, `read_directory`, `read_multiple`	Read files and directory listings
Writing	`write_file`, `create_directory`, `copy_file`, `move_file`, `delete_file`	Create, modify, copy, move, and delete
Search	`glob_search`, `grep_search`, `find_by_content`	Find files by name pattern or content
Metadata	`file_stat`, `file_exists`, `get_disk_usage`, `compare_files`	Inspect size, timestamps, existence
Scaffolding	`scaffold_project`, `list_templates`	Create projects from templates with variable substitution

Key properties:

Sandboxed -- operations are restricted to explicitly allowed directories.
Read-only mode -- flip one env var to disable all write tools.
Symlink-safe -- symlink following is off by default to prevent sandbox escapes.
Windows-first -- designed for Windows paths and conventions, works everywhere.
Template engine -- {{var}} / ${var} substitution plus path-level __var__ renaming.

Installation

npm install -g @mcptoolshop/file-forge

Or run directly with npx:

npx @mcptoolshop/file-forge

Claude Desktop Configuration

Add the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "file-forge": {
      "command": "npx",
      "args": ["-y", "@mcptoolshop/file-forge"],
      "env": {
        "MCP_FILE_FORGE_ALLOWED_PATHS": "C:/Projects,C:/Users/you/Documents"
      }
    }
  }
}

If you installed globally you can point directly at the binary:

{
  "mcpServers": {
    "file-forge": {
      "command": "mcp-file-forge",
      "env": {
        "MCP_FILE_FORGE_ALLOWED_PATHS": "C:/Projects"
      }
    }
  }
}

Tool Reference

Reading

Tool	Description	Key Parameters
`read_file`	Read file contents	`path`, `encoding?`, `start_line?`, `end_line?`, `max_size_kb?`
`read_directory`	List directory entries	`path`, `recursive?`, `max_depth?`, `include_hidden?`, `pattern?`
`read_multiple`	Batch-read multiple files	`paths`, `encoding?`, `fail_on_error?`

Writing

Tool	Description	Key Parameters
`write_file`	Write or overwrite a file	`path`, `content`, `encoding?`, `create_dirs?`, `overwrite?`, `backup?`
`create_directory`	Create a directory	`path`, `recursive?`
`copy_file`	Copy a file or directory	`source`, `destination`, `overwrite?`, `recursive?`
`move_file`	Move or rename	`source`, `destination`, `overwrite?`
`delete_file`	Delete a file or directory	`path`, `recursive?`, `force?`

Search

Tool	Description	Key Parameters
`glob_search`	Find files by glob pattern	`pattern`, `base_path?`, `max_results?`, `include_dirs?`
`grep_search`	Search file contents with regex	`pattern`, `path?`, `glob?`, `case_sensitive?`, `max_results?`, `context_lines?`
`find_by_content`	Literal text search (no regex)	`text`, `path?`, `file_pattern?`, `max_results?`

Metadata

Tool	Description	Key Parameters
`file_stat`	File/directory statistics	`path`
`file_exists`	Check existence and type	`path`, `type?` (`file` / `directory` / `any`)
`get_disk_usage`	Directory size breakdown	`path`, `max_depth?`
`compare_files`	Compare two paths	`path1`, `path2`

Scaffolding

Tool	Description	Key Parameters
`scaffold_project`	Create project from template	`template`, `destination`, `variables?`, `overwrite?`
`list_templates`	List available templates	`category?`

Full parameter documentation, examples, and error codes are in the HANDBOOK.md.

Environment Variables

Variable	Description	Default
`MCP_FILE_FORGE_ALLOWED_PATHS`	Comma-separated list of allowed root directories	`.` (cwd)
`MCP_FILE_FORGE_DENIED_PATHS`	Comma-separated denied path glob patterns	`/node_modules/`, `/.git/`
`MCP_FILE_FORGE_READ_ONLY`	Disable all write operations	`false`
`MCP_FILE_FORGE_MAX_FILE_SIZE`	Maximum file size in bytes	`104857600` (100 MB)
`MCP_FILE_FORGE_MAX_DEPTH`	Maximum recursion depth	`20`
`MCP_FILE_FORGE_FOLLOW_SYMLINKS`	Allow following symlinks outside sandbox	`false`
`MCP_FILE_FORGE_TEMPLATE_PATHS`	Comma-separated template directories	`./templates`
`MCP_FILE_FORGE_LOG_LEVEL`	Log verbosity (`error`, `warn`, `info`, `debug`)	`info`
`MCP_FILE_FORGE_LOG_FILE`	Path to a log file (in addition to stderr)	none

Config File

Create mcp-file-forge.json (or .mcp-file-forge.json) in or above your working directory:

{
  "sandbox": {
    "allowed_paths": ["C:/Projects", "C:/Users/you/Documents"],
    "denied_paths": ["**/secrets/**", "**/.env"],
    "follow_symlinks": false,
    "max_file_size": 52428800,
    "max_depth": 20
  },
  "templates": {
    "paths": ["./templates", "~/.mcp-file-forge/templates"]
  },
  "logging": {
    "level": "info",
    "file": "./logs/mcp-file-forge.log"
  },
  "read_only": false
}

Configuration priority (highest wins):

Environment variables
Config file
Built-in defaults

Security

MCP File Forge enforces several layers of protection to keep AI agents from reaching outside their designated workspace:

Path sandboxing -- every path is resolved to an absolute path and checked against the allowed_paths list before any I/O occurs.
Denied paths -- glob patterns that are blocked even within allowed directories (e.g. **/secrets/**).
Symlink protection -- symlinks are not followed by default; if a symlink target resolves outside the sandbox, the operation is denied.
Path traversal detection -- .. sequences that would escape the sandbox are rejected.
Size limits -- files larger than max_file_size are refused to prevent memory exhaustion.
Depth limits -- recursive operations are capped at max_depth levels.
Read-only mode -- set MCP_FILE_FORGE_READ_ONLY=true to disable write_file, create_directory, copy_file, move_file, delete_file, and scaffold_project.
Null-byte rejection -- paths containing \0 are refused.
Windows long-path guard -- paths exceeding 32,767 characters are refused.

Documentation

Document	Description
HANDBOOK.md	Deep-dive: security model, tool reference, templates, architecture, FAQ
CHANGELOG.md	Release history (Keep a Changelog format)
docs/PLANNING.md	Internal planning and research notes

Development

# Install dependencies
npm install

# Build
npm run build

# Watch mode
npm run dev

# Run tests
npm test

# Lint
npm run lint

Security & Data Scope

MCP File Forge is an MCP server providing sandboxed file operations for AI agents.

Data accessed: Files within explicitly allowed directories only. Config files, template directories
Data NOT accessed: No cloud sync. No telemetry. No analytics. No data outside sandbox
Network: stdio transport by default — no network listeners, no egress. HTTP mode available via PORT env var for remote deployment
No telemetry is collected or sent

Full policy: SECURITY.md

Scorecard

Category	Score
A. Security	10/10
B. Error Handling	10/10
C. Operator Docs	10/10
D. Shipping Hygiene	10/10
E. Identity (soft)	10/10
Overall	50/50

License

MIT

Install Server

license - permissive license

quality

maintenance - not tested

How are these scores calculated?

Resources

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Connectors

hithereiamaliff-mcp-nextcloud
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
mcp
A Model Context Protocol server for Wix AI tools
mcp
MCP (Model Context Protocol) server for Appwrite

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/mcp-tool-shop-org/mcp-file-forge'

If you have feedback or need assistance with the MCP directory API, please join our Discord server