MCP Files Server

A lightweight HTTP streamable MCP (Model Context Protocol) server implemented in Go that provides secure file operations within a designated workspace.

Goal

The MCP Files Server enables AI assistants and automation tools to safely read and write text files through the standardized MCP protocol. This server provides:

• Workspace Isolation: All file operations are contained within a configurable workspace directory via LOCAL_WORKSPACE_FOLDER
• Path Traversal Protection: Advanced security validation prevents access outside the workspace folder (blocks ../, absolute paths, etc.)
• Secure File Access: Proper path validation and cleaning to prevent directory traversal attacks
• Simple API: Eight essential tools for file manipulation - read, write, delete files, create/delete directories, list directory contents, and tree view operations
• HTTP Streaming: Built on the MCP streamable HTTP protocol for real-time communication
• Zero Dependencies: Minimal external dependencies for easy deployment and maintenance

Use Cases

• Content Management: Allow AI assistants to read configuration files, documentation, or data files
• Code Generation: Enable automated code writing and modification within project boundaries
• Data Processing: Read input files and write processed results
• Template Systems: Read templates and write generated content
• Log Analysis: Read log files and write analysis reports
• Backup Operations: Read source files and write backup copies

Tools

read_file

Reads the content of a text file within the workspace.

Parameters:

• file_path (string, required): Relative path to the file within the workspace (automatically validated for security)

Returns: The complete file content as text

Security: Path is automatically validated to prevent access outside the workspace folder.

write_file

Writes content to a text file within the workspace.

Parameters:

• file_path (string, required): Relative path to the file within the workspace (automatically validated for security)
• content (string, required): Text content to write to the file

Returns: Success message with file path and byte count

Security: Path is automatically validated to prevent access outside the workspace folder. Directories are created automatically if needed.

delete_file

Deletes a file from the filesystem within the workspace.

Parameters:

• file_path (string, required): Relative path to the file within the workspace (automatically validated for security)

Returns: Success message confirming file deletion

Security: Path is automatically validated to prevent access outside the workspace folder.

create_directory

Creates a directory and all necessary parent directories within the workspace.

Parameters:

• directory_path (string, required): Relative path to the directory to create within the workspace (automatically validated for security)

Returns: Success message confirming directory creation

Security: Path is automatically validated to prevent access outside the workspace folder. Parent directories are created automatically if needed.

delete_directory

Deletes a directory and all its contents from the filesystem within the workspace.

Parameters:

• directory_path (string, required): Relative path to the directory to delete within the workspace (automatically validated for security)

Returns: Success message confirming directory deletion

Security: Path is automatically validated to prevent access outside the workspace folder. Includes verification that the path is actually a directory before deletion.

list_directory

Lists the contents of a directory within the workspace.

Parameters:

• directory_path (string, required): Relative path to the directory to list within the workspace (automatically validated for security)

Returns: Formatted list of directory conte

... View full README on GitHub