Filesystem MCP Server
Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.
Table of Contents
- Overview
- Key Features
- Quick Start — Docker · CLI Usage
- Client Configuration
- Use Cases
- Architecture
- MCP Surface — Tools · Resources · Prompts
- MCP Capabilities — Tool Annotations · Structured Output
- Configuration — HTTP & Auth · File Size Limits · Access Control · Output & Inline Limits · Tasks · Logging & Diagnostics · Performance
- HTTP Endpoints
- Security
- Development
- Troubleshooting
- Credits
- Contributing and License
Overview
A secure, production-ready Model Context Protocol server that gives AI assistants controlled access to the local filesystem. All operations are sandboxed to explicitly allowed directories with path traversal prevention, sensitive file blocking, and optional Bearer token authentication.
Supports stdio (default) and Node Streamable HTTP transport. HTTP sessions are implemented with isolated per-session server state. The HTTP transport is stateful by default and currently non-resumable; it does not persist an event store for Last-Event-ID replay.
