"filesystem" matching MCP servers:

A filesystem MCP server that preserves file inode and metadata when writing or editing files, operating within allowed directories.

MCP Server that enables LLMs to interact with the local filesystem.

MCP server for performing filesystem operations, enabling file management and manipulation through natural language.

A FastMCP server providing comprehensive file system, Docker, and Git operations with concurrency safety and dual transport support.

Provides a hardened filesystem interface that lets a local model read and write files only within user-specified directories, with symlink protection and atomic operations.

A secure, highly capable MCP server written in Rust. It exposes a comprehensive suite of filesystem operations as tools for AI agents.

Enables advanced file system operations such as file read/write, directory management, search, archiving, and file watching through natural language.

Provides local hybrid search over files by combining semantic vector and full-text BM25 retrieval, with MCP stdio/HTTP support, OAuth 2.1 authentication, and tools for reading and converting documents to Markdown.

Enables exploration and search of local filesystems using glob pattern matching to find files and grep to search for text patterns within files.

A comprehensive Node.js server implementing Model Context Protocol (MCP) that enables filesystem operations, process management, and terminal session handling with an enterprise-grade security approach.

MCP server that vets LLM-emitted shell commands BEFORE execution — detects rm -rf nested deep in chains, package-manager glob removal (apt remove 'nvidia'), dd/mkfs filesystem destruction, chmod 777 / chown -R privilege blast, network-exfil via curl | bash, chained shutdown/reboot, git destructive ops. 30 detection rules across 8 families. Sub-second, local, free, MCP-native.

An MCP memory server for coding agents that checks stored facts against the filesystem and git before relying on them, flagging stale memories.

Provides transactional intelligence for AI agents, enabling safe tool execution with pre-flight invariant checks, sub-second filesystem snapshots/rollback, causal tracing, belief contradiction detection, and 15 native MCP tools for Claude Code.

Enables executing local commands via an argv-based tool with optional non-interactive sudo, command allowlisting, and filesystem write confinement using Bubblewrap.

AI agent file editing via MCP: JSON/YAML/TOML, AST renames, markdown, batch.

Comprehensive MCP server for filesystem operations, process management, interactive sessions, and async file search. Includes utilities for JSON repair, encoding fixes, duplicate detection, OCR, ZIP archives, and Markdown export.

Enables safe filesystem and git operations confined within a single allowed directory tree, using symlink-resolved path containment to protect against path traversal. Users can read, write, list, and search files, as well as initialize repos and run status, stage, commit, diff, and log operations through MCP.

A production-grade MCP server for Windows developer environments, providing AI assistants with secure terminal, filesystem, git, Docker, SQLite, browser, and GitHub capabilities through 12 providers and 40+ tools.

An MCP server for reading files from the local filesystem. Currently supports listing files in directories on the Desktop.

A proof-of-concept MCP server that scopes GitHub tools to the current repository without filesystem access, using MCP roots to carry the repo identity.