"filesystem" matching MCP servers:

A minimal MCP server that exposes three file operations (read_file, write_file, list_directory) within a sandboxed workspace, enabling file management via natural language.

Filesystem MCP server for AI assistants. Search, read, edit, and manage local files in directories you choose.

Enables reading, writing, appending, and listing files, restricted to explicitly allowed directories with safety checks against path traversal and symlink escapes.

A FastMCP server providing comprehensive file system, Docker, and Git operations with concurrency safety and dual transport support.

Exposes Linux filesystem operations as tools for LLM agents, with configurable root directory and read-only mode, built with FastMCP.

Enables AI coding agents to watch directories for live filesystem changes (create, modify, delete, move) via the Model Context Protocol, providing event-driven access without busy-polling.

Enables advanced file system operations such as file read/write, directory management, search, archiving, and file watching through natural language.

A secure, read-only MCP server for browsing and searching files in a specified directory with path traversal protection and .gitignore support.

Provides local hybrid search over files by combining semantic vector and full-text BM25 retrieval, with MCP stdio/HTTP support, OAuth 2.1 authentication, and tools for reading and converting documents to Markdown.

Enables any MCP-compatible client to perform filesystem operations — reading, listing, writing, searching, watching directories, and batch processing files — over JSON-RPC 2.0 stdio transport. Includes resource discovery, metrics tracking, and security controls such as allowed roots, size limits, and format allowlists, with a LangGraph agent that accesses files exclusively through MCP.

Provides desktop AI clients with sandboxed, controlled read, write, search, and management access to user-selected local folders and projects over the Model Context Protocol.

A safe MCP server for sandboxed filesystem operations (list, move, create directories, delete files) via pure Python, designed for Claude Desktop.

Enables AI assistants to interact with local Obsidian vaults through direct filesystem access for reading, creating, and managing notes. It features high-performance SQLite indexing for fast searches, regex support, and tools for organizing tags and links without requiring additional plugins.

MCP server that vets LLM-emitted shell commands BEFORE execution — detects rm -rf nested deep in chains, package-manager glob removal (apt remove 'nvidia'), dd/mkfs filesystem destruction, chmod 777 / chown -R privilege blast, network-exfil via curl | bash, chained shutdown/reboot, git destructive ops. 30 detection rules across 8 families. Sub-second, local, free, MCP-native.

Serves an LLM-maintained markdown wiki to agents over MCP, providing tools for querying and navigating wiki pages without direct filesystem access.

Local inter-agent messaging for AI coding agents via filesystem relay.

Enables AI agents to interact with Kubernetes clusters through progressive disclosure, where agents discover TypeScript modules via filesystem, write and execute code, and receive summarized console output for cluster management tasks.

Enables AI coding agents to safely execute code, run tests, and build projects inside disposable Docker sandboxes, protecting the host machine through enforced isolation, filesystem snapshots, and network controls.

An MCP memory server for coding agents that checks stored facts against the filesystem and git before relying on them, flagging stale memories.

Enables natural-language diagnosis of Linux system issues by providing sandboxed, typed tools for system, service, filesystem, and git inspection, with human approval for mutating actions.

Enables interaction with multiple Obsidian vaults through natural language, supporting note operations, search, and vault management with both REST and filesystem backends.

Provides transactional intelligence for AI agents, enabling safe tool execution with pre-flight invariant checks, sub-second filesystem snapshots/rollback, causal tracing, belief contradiction detection, and 15 native MCP tools for Claude Code.

Enables reading and verifying C2PA Content Credentials from images and videos through both embedded manifests and invisible watermarks. Supports direct filesystem access, URL checking, and provides structured provenance data including creator identity, AI generation info, and content authenticity.

Enables primary AI orchestrators to delegate token-heavy coding tasks to economical models via OpenRouter, running sandboxed autonomous ReAct loops with filesystem operations and git audit tools while reducing token costs.

MCP server for reading Claude Code session history from the local filesystem, exposing project and session data to MCP-compatible clients.

Filesystem first MCP server for Obsidian vaults with an LLM-Wiki layer on top.

Lets Claude Code drive a Qodalis CLI server, exposing that server's CLI commands, filesystem, data explorer, jobs, and plugin tools with the configured account's permissions. It handles token or password sign-in, automatic reconnection after drops, read-only filtering, and client-side allow/deny lists.

Enables MCP-capable LLM clients to perform read-only Linux system observation and OS algorithm experiments by exposing typed tools for memory, filesystem, process, and CPU scheduling data with controlled, safe boundaries.

Provides filesystem, web search, SQLite, and system tools for AI assistants like Claude, enabling secure access to local resources and the web.

Enables executing local commands via an argv-based tool with optional non-interactive sudo, command allowlisting, and filesystem write confinement using Bubblewrap.

Enables agent hosts to perform guarded, undoable filesystem operations confined to registered workspaces: atomic whole-file writes, file and directory create/copy/move/delete, staged literal text and line-range edits, patch application, and search, all journaled with content-addressed blobs. Every mutation returns an operation id and undo availability so history can be inspected and safely reverted with conflict detection, while credential-shaped targets are refused and errors come back as structured data with stable codes.

A Python MCP server that provides controlled access to local filesystem, terminal, processes, and SAP HANA Cloud, enabling Claude to interact with your machine and databases securely.

An MCP server for capturing screenshots of Qt/desktop windows and performing filesystem operations, enabling AI clients to inspect and modify project files.

Provides core filesystem, shell, search, and listing tools with a path sandbox, supporting HTTP and stdio transports.

Enables secure Windows development automation by providing MCP tools for filesystem access, project builds, restricted PowerShell commands, and approved network fetches.

An all-in-one self-hosted remote MCP server and gateway that lets AI clients access filesystem, terminal, background processes, and computer-use tools, and multiplex local stdio MCP servers over Streamable HTTP on Linux, Jetson, macOS, and Windows. It bundles revocable API keys, OAuth 2.0, and a read-only/coding safety switch so cloud and desktop assistants can safely drive remote machines.

Manage local/SSH/WinRM remote hosts via MCP, providing tools for exec, filesystem, screen, process, serial console, and configuration.

Connects AI assistants to GitHub repositories, pull requests, issues, commits, and code search while enabling repository visibility controls, CI/CD monitoring, sandboxed local filesystem access, and code quality/security analysis.

Enables AI agents to understand, inspect, create, validate, build, and document Jekyll component frameworks through Jekyll-aware tools, resources, prompts, sandboxed filesystem access, and configurable write modes.

Enables managing documents on the filesystem through natural language, with tools for read, create, edit, delete, and commands for summarize, format, rewrite, and convert.