A high-performance Model Context Protocol (MCP) server that provides secure filesystem access for Claude and other AI assistants.
MCPpedia last refreshed this data
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"fast-filesystem": {
"args": [
"-y",
"fast-filesystem-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Advanced filesystem operations for Claude Desktop with large file handling capabilities and Claude-optimized features.
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Five weighted categories — click any category to see the underlying evidence.
fast-filesystem-mcp is vulnerable to command injection through handleGetDiskUsage function
A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. The affected element is the function handleGetDiskUsage of the file src/index.ts. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
>= 0source →fast-filesystem-mcp has a Path Traversal vulnerability
fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including fast_read_file. This vulnerability arises from improper path validation that fails to resolve symbolic links to their actual physical paths. The safePath and isPathAllowed functions use path.resolve() which does not handle symlinks, allowing attackers to bypass directory access restrictions by creating symlinks within allowed directories that point to restricted system paths.
>= 0source →Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
Manage Supabase projects — databases, auth, storage, and edge functions
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
MCP Security Weekly
Get CVE alerts and security updates for Fast Filesystem Mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Add to your Claude Desktop config.
{
"mcpServers": {
"fast-filesystem": {
"command": "npx",
"args": ["-y", "fast-filesystem-mcp"]
}
}
}
{
"mcpServers": {
"fast-filesystem": {
"command": "npx",
"args": ["-y", "fast-filesystem-mcp"],
"env": {
"CREATE_BACKUP_FILES": "true"
}
}
}
}
Control backup file creation behavior.
CREATE_BACKUP_FILES=false (default): Disables backup file creation to reduce clutterCREATE_BACKUP_FILES=true: Creates backup files before modificationsNote: Backup files are created with timestamps (e.g., file.txt.backup.1755485284402) to prevent data loss during edits.
The MCP server uses a safe logging system that prevents JSON-RPC communication errors.
DEBUG_MCP=true or MCP_DEBUG=true: Enable debug logging to stderrMCP_LOG_FILE=/path/to/log.txt: Write logs to file instead of stderrMCP_SILENT_ERRORS=true or SILENT_ERRORS=true: Suppress error messages in responsesNote: Debug output is automatically suppressed by default to prevent JSON parsing errors in Claude Desktop.
To update to the latest version, follow these steps.
npm uninstall -g fast-filesystem-mcp
npm cache clean --force
pnpm store prune
npm install -g fast-filesystem-mcp
npm list -g fast-filesystem-mcp
fast-filesystem-mcp --version
| Tool | Description |
|---|---|
fast_read_file | Read files with chunking support |
fast_read_multiple_files | Read multiple files simultaneously with sequential reading support |
fast_write_file | Write or modify files |
fast_large_write_file | Stream-based writing for large files |
fast_get_file_info | Get detailed file information |
| Tool | Description |
|---|---|
fast_copy_file | Copy files and directories with advanced options |
fast_move_file | Move/rename files and directories safely |
fast_delete_file | Delete files and directories with protection |
fast_batch_file_operations | Execute multiple file operations in sequence |