Filesystem MCP
The official reference MCP filesystem server, giving agents read and write access restricted to explicitly allowed directories. Exposes tools for reading, writing, editing, moving, listing and searching files, rejecting paths outside the allowed set.
- Website
- https://www.npmjs.com/package/@modelcontextprotocol/server-filesystem
- Who it's for
- Builders who want coding agents to work on local files safely within an explicitly allowed set of directories.
- Pricing
- Free and open source.
- Category
- MCP servers & connectors
- Last verified
- 2026-10-22 (current)
- Confidence
- high
Key facts
- Transport: stdio, launched from the filesystem server package with allowed directories
- Auth: none - the allowed-directory list is the sole access control
- Rejects parent-directory and symlink escapes
- Write operations are enabled by default; read-only requires a container mounted read-only
- Maintained in the modelcontextprotocol/servers repository
Sources
Every claim above is drawn from these; we do not publish unsourced specifications.
- https://www.npmjs.com/package/@modelcontextprotocol/server-filesystem
- https://github.com/modelcontextprotocol/servers
Notes & uncertainties
Write operations are on by default - scope allowed directories carefully or mount read-only.
Something changed or out of date? Tell us — corrections are how this stays worth reading.