mcp-server-filesystem

MCP server exposing Linux filesystem operations as tools for LLM agents, built with FastMCP. Designed as a lightweight, low-dependency test server for the mcprack MCP proxy/catalog tool.

Configuration

No credentials are needed. All configuration is via environment variables, read once at startup:

All paths given to tools are resolved against FS_ROOT and rejected if they would escape it (via .. or a symlink). This is an application-level boundary, not a hardened sandbox (no chroot/mount namespace).

Related MCP server: ab_mcp

Tools

Read-only: list_dir, read_file, stat, exists, glob_search.

Mutating (require FS_READONLY=false): write_file, mkdir, delete, move, copy.

Usage

Recommended — Debian package from VitexSoftware repository

sudo curl -fsSL http://repo.vitexsoftware.com/KEY.gpg -o /usr/share/keyrings/vitexsoftware-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/vitexsoftware-archive-keyring.gpg] http://repo.vitexsoftware.com trixie main backports" \
  | sudo tee /etc/apt/sources.list.d/vitexsoftware.list
sudo apt update
sudo apt install mcp-server-filesystem

The backports component is required, not optional: python3-mcp (a python3-fastmcp dependency) needs python3-jsonschema >= 4.20.0, which is newer than the version Debian trixie ships in main — it's only available in backports. Without it, apt install fails with an unmet-dependency error on python3-jsonschema.

This installs python3-fastmcp and mcp-server-filesystem in a single step.

Alternative — pip

pip install -e .
export FS_ROOT=/path/to/sandbox
mcp-server-filesystem

mcprack integration

Register this server in mcprack with:

• Command: mcp-server-filesystem

• Env: FS_ROOT=/path/to/sandbox, FS_READONLY=false (if writes are needed)

mcprack spawns it as a stdio subprocess and proxies it over HTTP per user.

Development

pytest