Filesystem
Filesystem MCP Server is the reference filesystem MCP server from the Model Context Protocol project: a Node.js server that lets Claude and other MCP…
Project links
How to use it
- Open the listing page and read the server's documentation.
- Copy the configuration or command into your MCP client.
- Restart the client and try one of the server's tools.
Copy setup details
Use these instructions in your own environment. Copying text here does not run it.
MCP configuration 1
Copy into a client that accepts mcpServers JSON. Other clients may use a different configuration format.
{
"mcpServers": {
"filesystem": {
"command": "docker",
"args": [
"build",
"-t",
"mcp/filesystem",
"-f",
"src/filesystem/Dockerfile",
"."
]
}
}
}MCP configuration 2
Copy into a client that accepts mcpServers JSON. Other clients may use a different configuration format.
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-filesystem",
"/Users/username/Desktop",
"/path/to/other/allowed/dir"
]
}
}
}MCP configuration 3
Copy into a client that accepts mcpServers JSON. Other clients may use a different configuration format.
{
"mcpServers": {
"filesystem": {
"command": "cmd",
"args": [
"/c",
"npx",
"-y",
"@modelcontextprotocol/server-filesystem",
"/Users/username/Desktop",
"/path/to/other/allowed/dir"
]
}
}
}MCP configuration 4
Copy into a client that accepts mcpServers JSON. Other clients may use a different configuration format.
{
"mcpServers": {
"filesystem": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"--mount",
"type=bind,src=/Users/username/Desktop,dst=/projects/Desktop",
"--mount",
"type=bind,src=/path/to/other/allowed/dir,dst=/projects/other/allowed/dir,ro",
"mcp/filesystem",
"/projects"
]
}
}
}Claude Code command
Run on your own machine to add this server to Claude Code.
claude mcp add filesystem -- npx -y @modelcontextprotocol/server-filesystem /path/to/allowed/dir
Security checks
Automated checks, last run Nov 2, 2026. They can miss problems and do not guarantee a listing is safe. Read the source and what you are asked to run before you use it.
- PassedSetup commands and descriptionLayer 1
No blocking patterns. Notes are listed in the evidence.
Evidence (1)
- note: unpinned-package
- filesystem: npx runs "@modelcontextprotocol/server-filesystem" without a pinned version, so whoever owns that package name can change what runs
Source: AIWantsThis screening rules
- PassedInstall scripts and package statusLayer 2
The npm package runs no code at install time and is not deprecated.
Source: npm registry
- PassedKnown vulnerabilities in the packageLayer 2
OSV.dev lists no advisories for this package.
Evidence (1)
- @modelcontextprotocol/[email protected]
- No advisories listed in OSV.dev.
Source: OSV.dev
- PassedSource repositoryLayer 2
The repository is public, not archived and has recent activity.
Evidence (3)
- Last push
- 2026-10-29
- Archived
- no
- License
- none declared
Source: GitHub