@modelcontextprotocol/server-filesystem
Anthropic's official reference MCP server for local filesystem access. Gives agents read/write access to files and directories on the host machine, with configurable path restrictions.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
Path allowlist at startup is the primary security control. No credentials needed. Runs locally so TLS is stdio transport. Official Anthropic implementation, regularly maintained.
⚡ Reliability
Best When
Your agent needs to read, write, or search files on the local machine. The gold standard reference implementation — if you need filesystem access, start here.
Avoid When
Running in containerized or remote environments where local paths don't map to useful resources, or when you need cloud storage access.
Use Cases
- • Reading and writing files on the local machine from agent workflows
- • Listing directory contents and navigating file trees
- • Creating, moving, and deleting files and directories
- • Searching file contents with pattern matching
- • Watching files for changes in long-running agent loops
Not For
- • Remote/cloud file systems (S3, GCS, Azure Blob) — filesystem-local only
- • High-security environments where agents should not have any file access
- • Large-scale file processing (no streaming — reads full file content)
Interface
Authentication
No authentication — access controlled by allowed_paths configuration parameter. Specify allowed directories at server startup; agent cannot access paths outside this list.
Pricing
MIT licensed, free. Requires Node.js runtime.
Agent Metadata
Known Gotchas
- ⚠ Path restrictions enforced at startup — agents cannot read outside allowed_paths; configure this carefully
- ⚠ No streaming — large files are read entirely into memory and returned as text
- ⚠ Binary files (images, executables) returned as base64 but tool doesn't auto-detect; use read_file with explicit encoding
- ⚠ Symlinks followed by default — may lead outside allowed_paths unexpectedly on misconfigured systems
- ⚠ No file locking — concurrent writes can corrupt files if multiple agents write simultaneously
Alternatives
Full Evaluation Report
Detailed scoring breakdown, competitive positioning, security analysis, and improvement recommendations for @modelcontextprotocol/server-filesystem.
Scores are editorial opinions as of 2026-03-06.