File-Delete-MCP
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@File-Delete-MCPpreview deleting the old build folder, then move it to .del after I confirm"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
File-Delete-MCP
给 Codex 等 Agent 提供受控的文件删除能力
预览开票 → 移入 .del → 确认后永久清空
仓库边界
本仓库只提供一个工作区级的删除 MCP,不负责文件浏览、移动、复制或版本控制操作。
功能概览
功能 | 说明 |
删除预检 | 解析相对/绝对路径,检查越界、 |
可恢复删除 |
|
永久清空 |
|
防误删 | 票据绑定路径、 |
Related MCP server: sweep-mcp
核心 API
分类 | API | 说明 |
预检 |
| 返回 |
删除 |
| 将预览过的路径移入 |
清空 |
| 永久删除匹配的 |
risk 为 warn 时必须显式传 accept_warnings=true;risk 为 block 时不签发票据。
.del 布局
.del/
├── .gitignore
└── 20261102T153000-7f3a/
├── manifest.json
└── files/
└── src/foo.py构建
uv venv --python 3.13
uv pip install --python .venv\Scripts\python.exe -e ".[dev]"
.venv\Scripts\python.exe -m pytestCodex 配置
[mcp_servers.file-delete]
type = "stdio"
command = 'D:\Projects\File-Delete-MCP\.venv\Scripts\python.exe'
args = ["-m", "file_delete_mcp"]
enabled = true
startup_timeout_sec = 60
tool_timeout_sec = 120工作区根默认取 MCP 进程当前目录,也可用 --root 或 FILE_DELETE_ROOT 固定。相对路径按工作区根解析,绝对路径必须落在根内。
MCP 运行在 Codex 沙箱之外。--root 不要指向磁盘根或用户目录。
Platform: Windows | License: MIT
Available Tools
3 toolspreview_deleteA
Validate a delete request and issue a one-time ticket.
scope="trash" previews moving paths into the workspace .del directory; set recursive=true to allow non-empty directories. scope="purge" previews permanently deleting .del batches selected by batch_ids, older_than_days, or all=true. A blocked request returns risk="block" and no ticket.
| Name | Required | Description | Default |
|---|---|---|---|
| all | No | ||
| paths | No | ||
| scope | Yes | ||
| batch_ids | No | ||
| recursive | No | ||
| older_than_days | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With zero annotations, the description carries the full burden and does well: it discloses the ticket-issuance side effect, the blocking failure mode ('risk="block" and no ticket'), and the destructive semantics of purge. It omits ticket lifetime/single-use enforcement details and any permission or irreversibility warnings for purge.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the core action and ticket mechanics, then details each scope in one clause. Dense and largely waste-free, though the final blocking sentence could be folded into the scope discussion rather than trailing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a six-parameter, no-annotation, no-output-schema mutation-gating tool, the description covers the decision-relevant surface: scope semantics, recursion constraint, purge selectors, and the block outcome. It stops short of explaining what the returned ticket is and how it is consumed downstream, which an agent would need to complete the workflow.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% with six parameters including a free-form scope string, so the description must do all the work and does: it supplies the two valid scope values (absent from the schema), explains recursive, and enumerates the mutually alternative purge selectors (batch_ids, older_than_days, all=true). Only 'paths' is described implicitly via 'moving paths into the .del directory', which is still adequate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific compound verb+resource: validates a delete request and issues a one-time ticket, then breaks down the two scopes (trash vs purge). It never names the sibling tools that actually execute the deletion (trash_paths, purge_del), so the two-phase relationship is implied by 'previews' and 'ticket' rather than stated outright.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explains per-scope when to use: scope="trash" for moving paths into .del, scope="purge" for permanently removing .del batches, with recursive=true required for non-empty directories. It gives no explicit 'do not call trash_paths/purge_del without a ticket' routing instruction, so the sequencing to siblings stays implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
purge_delA
Permanently delete .del batches selected by the matching purge preview.
The ticket must come from preview_delete with scope="purge". Batches added or changed after preview are refused.
| Name | Required | Description | Default |
|---|---|---|---|
| all | No | ||
| ticket | Yes | ||
| batch_ids | No | ||
| accept_warnings | No | ||
| older_than_days | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose the most safety-critical traits: permanence/irreversibility, ticket provenance, and a staleness guard that refuses changed batches. It omits other meaningful behaviors such as what accept_warnings gates, whether warnings block execution, and partial-failure semantics.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the action and its permanence. Every sentence carries information (action, precondition, rejection rule); nothing is padded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive, irreversible, 5-parameter tool with no annotations and no output schema, the description covers provenance and atomicity but leaves the warning-acknowledgment flow, selection-mode interactions (`all` vs `batch_ids` vs `older_than_days`), and the result shape unexplained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so all five parameters are bare names. The description adds real meaning for `ticket` (must come from preview_delete with scope="purge") and implies batch_ids derive from the preview, but says nothing about `all`, `older_than_days`, or the safety-relevant `accept_warnings`.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource combination with emphasis on irreversibility: "Permanently delete .del batches selected by the matching purge preview." The preview-derived selection model distinguishes it from a generic delete, though it never names trash_paths as the non-permanent sibling, so an agent must infer the contrast.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit prerequisite: the ticket must originate from preview_delete with scope="purge", which effectively defines when the tool is callable. It also documents a rejection condition (batches added/changed after preview), but offers no guidance on when to prefer trash_paths instead of permanent purge.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
trash_pathsA
Move previewed paths into the workspace .del directory.
The ticket must come from preview_delete with scope="trash" and the same paths and recursive flag. Paths or files changed after preview are refused.
| Name | Required | Description | Default |
|---|---|---|---|
| paths | Yes | ||
| ticket | Yes | ||
| recursive | No | ||
| accept_warnings | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the whole burden and does disclose real behavior: the target is a .del directory (implying recoverable rather than permanent removal), and paths modified after preview are refused, a meaningful staleness guard. It omits what accept_warnings does, whether partial failures are possible, and what the caller gets back.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, no filler, and the core action is front-loaded before the preconditions. Every sentence adds a distinct constraint.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a four-parameter mutation with no annotations, no output schema, and 0% schema coverage, the description covers the workflow gate well but leaves accept_warnings unexplained and says nothing about outcome or recoverability. Adequate, not complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate and it partially does: it constrains 'paths' and 'recursive' by requiring them to match the preview, and explains 'ticket' by origin. 'accept_warnings' is never mentioned anywhere, leaving one of four parameters with no semantics at all.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a concrete verb and destination: 'Move previewed paths into the workspace .del directory.' The word 'previewed' and the ticket requirement implicitly position it downstream of preview_delete, but siblings are never named, so differentiation relies on the agent already knowing the workflow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a hard precondition: the ticket must come from preview_delete with scope="trash" and matching paths and recursive flag, which tells the agent to call preview first. It does not explicitly contrast with purge_del or say what to do when paths changed after preview beyond 'refused'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
v0.1.0- First observed
preview_delete - First observed
purge_del - First observed
trash_paths
TDQS
Scored across 3 tools
preview_delete is clearly a validation/ticket step, while trash_paths and purge_del execute distinct operations on different targets (workspace paths vs .del batches). The dual scope in preview_delete is explicitly described, so the overlap is minimal and predictable.
All names use snake_case with a leading verb, giving a consistent verb_noun pattern. The noun forms vary slightly (delete vs paths vs del), and 'purge_del' abbreviates 'delete' while 'preview_delete' spells it out, which is a minor inconsistency.
Three tools match the narrow, safety-focused deletion domain: one preview/authorization tool and two execution tools. Each tool has a clear role in the workflow, with no redundant surface.
The soft-delete and permanent-purge lifecycle is covered end-to-end with preview/ticket enforcement. A dedicated listing or inspection tool for .del batches (and possibly restore) is absent, which is a minor gap for selective purge by batch_ids, though broad selectors mitigate it.
Maintenance
Related MCP Connectors
Manage tickets, run agents and workflows, query tables, and search workspace knowledge.
Securely search and manage workspace context files for AI agents and teams.
Zendesk configuration management for AI agents: propose, review, apply and roll back changes.
Give every project one workspace for its files, its team, and its AI agents.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables policy-enforced access to dangerous tools like file read/write/delete and shell execution, with approval workflows, risk classification, and audit logging.-
- AlicenseNot gradedqualityBmaintenanceEnables LLM agents to safely reclaim disk space by deleting build artifact directories like node_modules, .venv, and target, with strong guardrails to prevent accidental or malicious deletion.MIT
- FlicenseNot gradedqualityBmaintenanceEnables AI agents to safely read and write files in a sandboxed workspace via natural language, with on-demand connection, CVE-hardened path confinement, injection resistance, and full audit logging.-

@shieldfive/mcpofficial
AlicenseNot gradedqualityAmaintenanceOfficial server for the ShieldFive end-to-end encrypted vault. Moves files off your computer into the vault, reading each copy back and verifying it before the original goes to a local trash folder (nothing deleted). Also finds duplicates by content and tidies folders. Decrypts on your machine; access is scoped, expiring, revocable and undoable.74 npmMIT