π Read-only MCP server for secure filesystem exploration, searching, and analysis
MCPpedia last refreshed this data
Config is the same across clients β only the file and path differ.
{
"mcpServers": {
"filesystem": {
"args": [
"-y",
"@j0hanz/filesystem-mcp@latest"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.
Run this in your terminal to verify the server starts. Then let us know if it worked β your result helps other developers.
npx -y '@j0hanz/filesystem-mcp' 2>&1 | head -1 && echo "β Server started successfully"
After testing, let us know if it worked:
Five weighted categories β click any category to see the underlying evidence.
No known CVEs.
Checked @j0hanz/filesystem-mcp against OSV.dev.
Be the first to review
Have you used this server?
Share your experience β it helps other developers decide.
Sign in to write a review.
Others in developer-tools
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
Manage Supabase projects β databases, auth, storage, and edge functions
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
MCP Security Weekly
Get CVE alerts and security updates for Filesystem Context MCP Server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.
A secure, production-ready Model Context Protocol server that gives AI assistants controlled access to the local filesystem. All operations are sandboxed to explicitly allowed directories with path traversal prevention, sensitive file blocking, and optional Bearer token authentication.
Supports stdio (default) and Node Streamable HTTP transport. HTTP sessions are implemented with isolated per-session server state. The HTTP transport is stateful by default and currently non-resumable; it does not persist an event store for Last-Event-ID replay.
outputSchema / structuredContent for reliable LLM parsinginternal://instructions, `internal://tool-ca