io.github.j0hanz/filesystem-mcp

@j0hanz/filesystem-mcp

Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.

10 188/wk GitHub npm

No known CVEs

No license

Actively maintained

Last commit 21d ago

Works with most clients

Transport: stdio, http

0 tools

Grade F

MCPpedia last refreshed this data 1d ago

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "filesystem": {
      "args": [
        "-y",
        "@j0hanz/filesystem-mcp@latest"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-j0hanz-filesystem-mcp-j0hanz)](https://mcppedia.org/s/io-github-j0hanz-filesystem-mcp-j0hanz)

Read me

What io.github.j0hanz/filesystem-mcp does

Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@j0hanz/filesystem-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

57/100across 5 weighted dimensions

How we score →

0255075100

−43

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @j0hanz/filesystem-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.j0hanz/filesystem-mcp safe to use?: io.github.j0hanz/filesystem-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.j0hanz/filesystem-mcp?: io.github.j0hanz/filesystem-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.j0hanz/filesystem-mcp?: io.github.j0hanz/filesystem-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.j0hanz/filesystem-mcp actively maintained?: io.github.j0hanz/filesystem-mcp is actively maintained — last commit was 21 days ago. It has 10 GitHub stars.

Similar servers

Others in other

View all →

Headroom95

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

62.5k 3

Pi Lean Ctx94

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.4k 6

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

604 6

Brigade93

One local source for the MCP servers, tools, and memory your AI coding agents share, synced into each tool's native config with a review gate and a receipt for every change. No daemon, no lock-in.

62 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.j0hanz/filesystem-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Overview

A secure, production-ready Model Context Protocol server that gives AI assistants controlled access to the local filesystem. All operations are sandboxed to explicitly allowed directories with path traversal prevention, sensitive file blocking, and optional Bearer token authentication.

Supports stdio (default) and Node Streamable HTTP transport. HTTP sessions are implemented with isolated per-session server state. The HTTP transport is stateful by default and currently non-resumable; it does not persist an event store for Last-Event-ID replay.

Key Features

18 filesystem tools — read, write, search, diff, patch, hash, and bulk operations with structured output schemas

Security-first — path validation, symlink escape prevention, sensitive file denylist, localhost-only CORS, Host header validation for loopback HTTP binds, optional API key auth

Dual transport — stdio for local use, Node Streamable HTTP for networked/multi-session deployments

Structured output — all tools return typed outputSchema / structuredContent for reliable LLM parsing

Self-documenting — 6 built-in resources (internal://instructions, `internal://tool-ca

Frequently Asked Questions

Is io.github.j0hanz/filesystem-mcp safe to use?

io.github.j0hanz/filesystem-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.j0hanz/filesystem-mcp?

io.github.j0hanz/filesystem-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.j0hanz/filesystem-mcp?

io.github.j0hanz/filesystem-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.j0hanz/filesystem-mcp actively maintained?

io.github.j0hanz/filesystem-mcp is actively maintained — last commit was 21 days ago. It has 10 GitHub stars.

Filesystem MCP Server

Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.

Overview
Key Features
Quick Start — Docker · CLI Usage
Client Configuration
Use Cases
Architecture
MCP Surface — Tools · Resources · Prompts
MCP Capabilities — Tool Annotations · Structured Output
Configuration — HTTP & Auth · File Size Limits · Access Control · Output & Inline Limits · Tasks · Logging & Diagnostics · Performance
HTTP Endpoints
Security
Development
Troubleshooting
Credits
Contributing and License

Overview

Key Features

18 filesystem tools — read, write, search, diff, patch, hash, and bulk operations with structured output schemas
Security-first — path validation, symlink escape prevention, sensitive file denylist, localhost-only CORS, Host header validation for loopback HTTP binds, optional API key auth
Dual transport — stdio for local use, Node Streamable HTTP for networked/multi-session deployments
Structured output — all tools return typed outputSchema / structuredContent for reliable LLM parsing
Self-documenting — 6 built-in resources (internal://instructions, `internal://tool-ca

... View full README on GitHub

io.github.j0hanz/filesystem-mcp

Install in your client