"Roots" matching MCP servers:

Enables interactive chat with AI models via Anthropic API, with controlled file system access to specified directories and video conversion capabilities.

Enables coding agents to safely inspect and modify project files within explicitly allowed workspace roots, with controls for file operations, git status/diff, and optionally allowlisted command execution.

Enables any MCP-compatible client to perform filesystem operations — reading, listing, writing, searching, watching directories, and batch processing files — over JSON-RPC 2.0 stdio transport. Includes resource discovery, metrics tracking, and security controls such as allowed roots, size limits, and format allowlists, with a LangGraph agent that accesses files exclusively through MCP.

Enforces authorized file access through MCP roots, blocking path traversal, symlink escapes, and absolute path escapes before any read.

MCP server that scans workspace roots to build a registry of version-controlled projects, exposing tools for searching, listing, and inspecting projects to help AI coding agents navigate multi-repo workspaces efficiently.

Enables AI assistants to safely read local files and directories from explicitly configured roots, without write, edit, or shell execution capabilities.

A local Windows MCP server that lets a ChatGPT/OpenAI MCP client list, read, write, search, move, and delete files within allowed roots, run PowerShell/CLI commands, start and manage long-running processes, and inspect or commit/push Git repositories. It binds to loopback with policy-gated shell and Git mutations plus a local JSONL audit log.

An MCP server for FTP and FTPS file operations, supporting multiple named hosts with configurable roots, read-only mode, and guarded deletion. It enables remote file management (list, upload, download, create, rename, delete) through natural language while keeping credentials secure.

Enables local management of approved project folders through tools for file operations, project status, backups, health checks, git checkpoints, and rollback. Operations are restricted to configured allowed roots.

Lets web ChatGPT and other MCP clients explore, read, and edit files under allowed local project roots, run whitelisted commands such as git and npm, and hand off or resume coding tasks with the local Codex CLI, optionally over an OpenAI Secure MCP Tunnel.

Enables safe, read-only browsing of allowlisted local directories through MCP, providing tools to list roots, read files, and search text.

Enables self-hosted remote access to a user-controlled device's approved filesystem roots, allowing clients to list directories, read and search files, inspect metadata, ping the agent, and list devices through an MCP tunnel.

Enables controlled local Windows file inspection, reading, writing, reversible deletion, restoration, and auditing across user-selected folder roots. Commits occur only after separate owner approval in a native desktop dialog, while the tool cannot bypass OS security controls.

Enables remote filesystem access and command/process control through MCP, with safe-by-default permission profiles that restrict file operations to configured roots and make command execution an explicit opt-in.

Enables secure filesystem operations (read, write, list, move, search files/directories) through the Model Context Protocol, with dynamic directory access control via MCP Roots.

MCP server for filesystem operations, enabling reading, writing, editing, moving, and searching files with dynamic directory access control via MCP Roots.

Provides safe, allowlisted local filesystem access for MCP-compatible AI clients, enabling directory listing, file reading/writing (with byte limits), and text search while blocking paths outside approved roots and symlink escapes.

Enables MCP clients like ChatGPT to securely access and manage a controlled local directory over a remote, OAuth-protected endpoint, with configurable filesystem roots and ngrok tunneling.

locidx