"filesystem" matching MCP servers:

A minimal MCP server that exposes three file operations (read_file, write_file, list_directory) within a sandboxed workspace, enabling file management via natural language.

Filesystem MCP server for AI assistants. Search, read, edit, and manage local files in directories you choose.

Enables reading, writing, appending, and listing files, restricted to explicitly allowed directories with safety checks against path traversal and symlink escapes.

A FastMCP server providing comprehensive file system, Docker, and Git operations with concurrency safety and dual transport support.

Exposes Linux filesystem operations as tools for LLM agents, with configurable root directory and read-only mode, built with FastMCP.

Enables AI coding agents to watch directories for live filesystem changes (create, modify, delete, move) via the Model Context Protocol, providing event-driven access without busy-polling.

A secure, read-only MCP server for browsing and searching files in a specified directory with path traversal protection and .gitignore support.

Provides local hybrid search over files by combining semantic vector and full-text BM25 retrieval, with MCP stdio/HTTP support, OAuth 2.1 authentication, and tools for reading and converting documents to Markdown.

Provides desktop AI clients with sandboxed, controlled read, write, search, and management access to user-selected local folders and projects over the Model Context Protocol.

A safe MCP server for sandboxed filesystem operations (list, move, create directories, delete files) via pure Python, designed for Claude Desktop.

Enables AI assistants to interact with local Obsidian vaults through direct filesystem access for reading, creating, and managing notes. It features high-performance SQLite indexing for fast searches, regex support, and tools for organizing tags and links without requiring additional plugins.

MCP server that vets LLM-emitted shell commands BEFORE execution — detects rm -rf nested deep in chains, package-manager glob removal (apt remove 'nvidia'), dd/mkfs filesystem destruction, chmod 777 / chown -R privilege blast, network-exfil via curl | bash, chained shutdown/reboot, git destructive ops. 30 detection rules across 8 families. Sub-second, local, free, MCP-native.

Serves an LLM-maintained markdown wiki to agents over MCP, providing tools for querying and navigating wiki pages without direct filesystem access.

Local inter-agent messaging for AI coding agents via filesystem relay.

Enables AI coding agents to safely execute code, run tests, and build projects inside disposable Docker sandboxes, protecting the host machine through enforced isolation, filesystem snapshots, and network controls.

An MCP memory server for coding agents that checks stored facts against the filesystem and git before relying on them, flagging stale memories.

Enables natural-language diagnosis of Linux system issues by providing sandboxed, typed tools for system, service, filesystem, and git inspection, with human approval for mutating actions.

Enables interaction with multiple Obsidian vaults through natural language, supporting note operations, search, and vault management with both REST and filesystem backends.

Provides transactional intelligence for AI agents, enabling safe tool execution with pre-flight invariant checks, sub-second filesystem snapshots/rollback, causal tracing, belief contradiction detection, and 15 native MCP tools for Claude Code.

Enables primary AI orchestrators to delegate token-heavy coding tasks to economical models via OpenRouter, running sandboxed autonomous ReAct loops with filesystem operations and git audit tools while reducing token costs.

MCP server for reading Claude Code session history from the local filesystem, exposing project and session data to MCP-compatible clients.

Filesystem first MCP server for Obsidian vaults with an LLM-Wiki layer on top.

Lets Claude Code drive a Qodalis CLI server, exposing that server's CLI commands, filesystem, data explorer, jobs, and plugin tools with the configured account's permissions. It handles token or password sign-in, automatic reconnection after drops, read-only filtering, and client-side allow/deny lists.

Enables MCP-capable LLM clients to perform read-only Linux system observation and OS algorithm experiments by exposing typed tools for memory, filesystem, process, and CPU scheduling data with controlled, safe boundaries.

Provides filesystem, web search, SQLite, and system tools for AI assistants like Claude, enabling secure access to local resources and the web.

Enables executing local commands via an argv-based tool with optional non-interactive sudo, command allowlisting, and filesystem write confinement using Bubblewrap.

Enables agent hosts to perform guarded, undoable filesystem operations confined to registered workspaces: atomic whole-file writes, file and directory create/copy/move/delete, staged literal text and line-range edits, patch application, and search, all journaled with content-addressed blobs. Every mutation returns an operation id and undo availability so history can be inspected and safely reverted with conflict detection, while credential-shaped targets are refused and errors come back as structured data with stable codes.

A Python MCP server that provides controlled access to local filesystem, terminal, processes, and SAP HANA Cloud, enabling Claude to interact with your machine and databases securely.

An MCP server for capturing screenshots of Qt/desktop windows and performing filesystem operations, enabling AI clients to inspect and modify project files.

Provides core filesystem, shell, search, and listing tools with a path sandbox, supporting HTTP and stdio transports.

Enables secure Windows development automation by providing MCP tools for filesystem access, project builds, restricted PowerShell commands, and approved network fetches.

Manage local/SSH/WinRM remote hosts via MCP, providing tools for exec, filesystem, screen, process, serial console, and configuration.

Connects AI assistants to GitHub repositories, pull requests, issues, commits, and code search while enabling repository visibility controls, CI/CD monitoring, sandboxed local filesystem access, and code quality/security analysis.

Enables AI agents to understand, inspect, create, validate, build, and document Jekyll component frameworks through Jekyll-aware tools, resources, prompts, sandboxed filesystem access, and configurable write modes.

Enables managing documents on the filesystem through natural language, with tools for read, create, edit, delete, and commands for summarize, format, rewrite, and convert.

An MCP server for ROS 2 development that enables controlled creation of workspaces, packages, nodes, launch files, and tests within a sandboxed directory, with secure filesystem boundaries.

Provides AI agents with direct filesystem access to an Obsidian vault for note management, task orchestration, context persistence, and git synchronization.

Local-first filesystem MCP bridge with ripgrep search, atomic writes, multiple transports

This server enables AI agents to execute terminal commands, manage running processes, and interact with the host's filesystem and system configuration. It supports complex operations such as code execution, file searching, and surgical data editing.

Bridges Claude AI with the local filesystem for direct file and project management, enabling incremental saves and automatic work logs to overcome token limits.