Manage persistent AI-agent filesystems. Paid hosted service; Apache-2.0 client.
MCPpedia last refreshed this data
io.github.writeitai/mountable is an MCP server that manage persistent AI-agent filesystems. Paid hosted service; Apache-2.0 client. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 64/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"mountable": {
"env": {
"MOUNTABLE_API_KEY": "${MOUNTABLE_API_KEY}"
},
"args": [
"-y",
"mountable-cli",
"mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Manage persistent AI-agent filesystems. Paid hosted service; Apache-2.0 client.
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked mountable-cli against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in ai-ml
A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。
An open-source AI agent that brings the power of Gemini directly into your terminal.
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
MCP Security Weekly
Get CVE alerts and security updates for io.github.writeitai/mountable and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
mountable mounts a mountable.io filesystem, a shared
POSIX filesystem for agents and teams, on any Linux machine or agent sandbox
and on a Mac (macOS 26, Apple Silicon), and manages filesystems, mount
tickets and sessions. It is also an MCP server.
curl -fsSL https://mountable.io/install.sh | sh # standalone binary
npx -y mountable-cli version # or npm
uvx mountable version # or PyPI
The installer checks the package against npm's sha512 and installs to
~/.local/bin. All three channels run the same CLI for Linux/macOS (x64 and
arm64). With npm or PyPI, use npx -y mountable-cli or uvx mountable in
place of mountable below.
The CLI is one self-contained binary: it downloads nothing at mount time and
keeps the session's credentials in memory. Mounting needs FUSE (/dev/fuse)
on Linux; on macOS it needs nothing else installed and no sudo (see
macOS).
mountable login signs this machine in with a device flow.MOUNTABLE_API_KEY=mtblm_…, a management
key an owner or admin creates in the console. It manages: filesystems
(create, delete, limits), API keys, S3 keys and grants. It never touches
files.MOUNTABLE_API_KEY=mtbl_…, an API key. It
accesses files: tickets, sessions, the files commands and webhooks, on
the filesystems it has a grant on.management_key_required or
api_key_required.Commands that work inside an organisation take --org ORG_ID, then
MOUNTABLE_ORG, then the only organisation the caller has; with several,
they fail with org_required.
| Command | Does |
|---|---|
mountable orgs list | the caller's organisations |
mountable fs list | filesystems |
mountable fs create NAME [--spending-cap-cents N] [--mutations-per-minute N] [--byte-quota BYTES] [--entry-quota N] | create a filesystem, with the limits given; prints its ID |
mountable fs get FS_ID | a filesystem and its limits |
mountable fs update FS_ID [--spending-cap-cents N|none] [--mutations-per-minute N|none] [--byte-quota BYTES] [--entry-quota N] | change only the limits given (at least one); none removes the spending cap or restores the default mutation rate |
mountable fs usage FS_ID | stored bytes and files against quotas, 30-day traffic |
mountable fs delete FS_ID | delete a filesystem at once, with all its files, sessions and S3 keys |
mountable api-keys create NAME [--expires-in-days N] [--filesystem FS_ID [--ro]] | an API key, limited to one filesystem with --filesystem; prints its secret |
mountable api-keys list / revoke KEY_ID | the organisation's API keys; revoke one |
mountable s3-keys create FS_ID NAME [--ro] [--expires-in-days N] | an S3 key for the filesystem's bucket; prints its secret, with the access key ID on stderr |
mountable s3-keys list FS_ID / revoke FS_ID ACCESS_KEY_ID | the filesystem's S3 keys; revoke one |
mountable grants list FS_ID | who may use the filesystem |
mountable grants set FS_ID member|group|api_key PRINCIPAL_ID ro|rw | give access, or change its mode |
mountable grants delete FS_ID GRANT_ID | remove access |
mountable ticket create FS_ID [--ro] [--idempotency-key KEY] [--max-duration D] | a one-time mount ticket for a sandbox; the session lasts D (such as 12h or 720h; default 12 hours, at most the API key's or login's expiry) |
mountable sessions list FS_ID | live mount sessions |
mountable sessions revoke SESSION_ID | revoke a session; its mount stops |
mountable files write FS_ID PATH [--from FILE] [--if-match ETAG] [--if-none-match] | write a whole file from FILE or stdin; prints `path eta |