Is Bach Filecommander MCP Server safe to use?

Bach Filecommander MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Bach Filecommander MCP Server?

Bach Filecommander MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Bach Filecommander MCP Server do?

Bach Filecommander MCP Server provides 43 tools: fc_read_file, fc_read_multiple_files, fc_write_file, fc_edit_file, fc_str_replace and 38 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Bach Filecommander MCP Server?

Bach Filecommander MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Bach Filecommander MCP Server actively maintained?

Bach Filecommander MCP Server is actively maintained — last commit was 1 day ago. It has 4 GitHub stars.

Bach Filecommander MCP Server

ellmos-filecommander-mcp

43 tools for filesystem, process management, sessions, search, OCR, ZIP, and PDF export.

4 124/wk 43 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse, http

43 tools · ~1.3k tok

Grade B · 0.7% of 200K ctx

MCPpedia last refreshed this data 8h ago

Edit this pageView history

Bach Filecommander MCP Server is an MCP server that 43 tools for filesystem, process management, sessions, search, OCR, ZIP, and PDF export. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 83/100 on MCPpedia's security, maintenance and efficiency rubric.

Developer Tools Productivity

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "filecommander": {
      "command": "ellmos-filecommander"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-lukisch-bach-filecommander-mcp)](https://mcppedia.org/s/io-github-lukisch-bach-filecommander-mcp)

Read me

What Bach Filecommander MCP Server does

Part of the ellmos-ai family.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'ellmos-filecommander-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

83/100across 5 weighted dimensions

How we score →

0255075100

−17

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

2 fixed

CVE-2026-47429critical · fixedCVSS 9.8

When Vitest UI server is listening, arbitrary file can be read and executed

### Summary Arbitrary file can be read on Windows when Vitest UI server is listening, especially when exposed to the network. ### Impact Only users that match either of the following conditions are affected: - explicitly exposes the Vitest UI server to the network (using `--api.host` or [`api.host` config option](https://vitest.dev/config/api.html)) - running the Vitest UI or Browser Mode on Windows ### Details The API handler for `/__vitest_attachment__` uses the deprecated `isFileServingAll

Affected: >= 4.0.0Fixed in 4.1.0source →

CVE-2025-24964critical · fixedCVSS 9.6

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

### Summary Arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking (CSWSH) attacks. ### Details When [`api` option](https://vitest.dev/config/#api) is enabled (Vitest UI enables it), Vitest starts a WebSocket server. This WebSocket server did not check Origin header and did not have any authorization mechanism and was vulnerable to CSWSH attacks. https://github.com/vitest-dev/vitest/blob/9a581e1c43e5c02b11e2a8026

Affected: >= 1.0.0Fixed in 1.6.1source →

Inventory

Tools (43)

Click any tool to inspect its schema.

~1.3k tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Bach Filecommander MCP Server safe to use?: Bach Filecommander MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Bach Filecommander MCP Server?: Bach Filecommander MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Bach Filecommander MCP Server do?: Bach Filecommander MCP Server provides 43 tools: fc_read_file, fc_read_multiple_files, fc_write_file, fc_edit_file, fc_str_replace and 38 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Bach Filecommander MCP Server?: Bach Filecommander MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Bach Filecommander MCP Server actively maintained?: Bach Filecommander MCP Server is actively maintained — last commit was 1 day ago. It has 4 GitHub stars.

Similar servers

Others in developer-tools / productivity

View all →

Context797

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

61.1k 2

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.3k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.3k 1

Browser Tools Mcp96

Monitor browser logs directly from Cursor and other MCP compatible IDEs.

7.3k 7

MCP Security Weekly

Get CVE alerts and security updates for Bach Filecommander MCP Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools Productivity

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "filecommander": {
      "command": "ellmos-filecommander"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-lukisch-bach-filecommander-mcp)](https://mcppedia.org/s/io-github-lukisch-bach-filecommander-mcp)

Read me

What Bach Filecommander MCP Server does

Part of the ellmos-ai family.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'ellmos-filecommander-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

ellmos FileCommander MCP Server

🇩🇪 Deutsche Version

Part of the ellmos-ai family.

Quick Navigation: Tools Overview | Installation | Configuration | Security Policy | Changelog | llms.txt

A comprehensive Model Context Protocol (MCP) server that gives AI assistants full filesystem access, bounded multi-file content search, process management, interactive shell sessions, and async filename search capabilities.

47 tools in a single server - everything an AI agent needs to interact with the local system.

Discovery keywords: local filesystem MCP server, multi-file content search MCP, safe delete MCP, Recycle Bin MCP server, process management MCP, interactive shell MCP, async file search for AI agents, cloud-lock-safe file operations, Markdown to PDF MCP, OCR MCP server, ZIP archive MCP.

Registry status: published on npm, indexed by jsDelivr, visible on LobeHub, listed on Glama, and prepared for the official MCP Registry via server.json. Some third-party directories still show older 43-tool metadata, so the canonical README/npm metadata should remain the source of truth until their reindex catches up.

[!NOTE] For AI Agents & LLM Integrations: FileCommander provides 47 specialized tools accessible via standard stdio transport. All tool names use the fc_ prefix to prevent namespace collisions. For LLMs, compact context and schema overviews are available in llms.txt and server.json.

Why FileCommander?

Most filesystem MCP servers only cover basic read/write operations. FileCommander goes further:

Safe Delete - Moves files to Recycle Bin (Windows) or Trash (macOS/Linux) instead of permanent deletion
Interactive Sessions - Start and interact with REPLs (Python, Node.js, shells) through the MCP protocol
Async Search - Search large directory trees in the background while the AI continues working
Explicit Content Search - Search literal text or regex across a bounded list of files without recursion or glob expansion
Process Management - List, start, and terminate system processes
String Replace - Edit files by matching unique strings with cont

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

83/100across 5 weighted dimensions

How we score →

0255075100

−17

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

2 fixed

CVE-2026-47429critical · fixedCVSS 9.8

When Vitest UI server is listening, arbitrary file can be read and executed

Affected: >= 4.0.0Fixed in 4.1.0source →

CVE-2025-24964critical · fixedCVSS 9.6

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

Affected: >= 1.0.0Fixed in 1.6.1source →

Inventory

Tools (43)

Click any tool to inspect its schema.

~1.3k tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Bach Filecommander MCP Server safe to use?: Bach Filecommander MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Bach Filecommander MCP Server?: Bach Filecommander MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Bach Filecommander MCP Server do?: Bach Filecommander MCP Server provides 43 tools: fc_read_file, fc_read_multiple_files, fc_write_file, fc_edit_file, fc_str_replace and 38 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Bach Filecommander MCP Server?: Bach Filecommander MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Bach Filecommander MCP Server actively maintained?: Bach Filecommander MCP Server is actively maintained — last commit was 1 day ago. It has 4 GitHub stars.