Filesystem MCP

Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.

People who work with analysis, filesystem and scanner and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-17 · ★ 22 · VERIFIED 2026-09-18

MIT · TypeScript servers · how we verify → /methodology

01 · Install Filesystem MCP

before you install - you'll need

FS_ALLOWED_DIRS

Environment variables documented in the project's README - it lists which are required and which have defaults.

Claude Code

claude mcp add j0hanz-filesystem-mcp -- npx -y @j0hanz/filesystem-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "j0hanz-filesystem-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@j0hanz/filesystem-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · container (OCI image) - can be sandboxed away from your filesystem

license MIT - declared in the repository

npm package @j0hanz/filesystem-mcp - published under the repo owner's npm scope (@j0hanz)

registry namespace io.github.j0hanz is GitHub-verified and matches the repo owner

03 · What Filesystem MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can list allowed workspace roots. Call this first - all other tools scope to these, list directory contents. Returns entries (dirs-first, alphabetical) and an ASCII tree, find files by glob pattern (e.g. /.ts). Returns matching files with metadata, and get file/directory metadata: size, modified time, permissions, MIME type, token estimate.

Capability map

Tools grouped from the project's README - what Filesystem MCP lets an agent do.

read & search

5 tools - e.g. List allowed workspace roots. Call this first - all other tools scope to these.; List directory contents. Returns entries (dirs-first, alphabetical) and an ASCII tree.; Find files by glob pattern (e.g.…

list_roots · list · find_files · search_text · read

update

3 tools - e.g. Apply sequential literal string replacements to one or more files (max 5 per call).; Move, rename, or copy (copy: true) one or more files/directories to explicit destinations.; Apply a single-file unified…

edit · move · patch

Stat

1 tool - e.g. Get file/directory metadata: size, modified time, permissions, MIME type, token estimate.

stat

Diff

1 tool - e.g. Compare two files and return a unified diff with added/removed line counts.

diff

create & write

1 tool - e.g. Create one or more files, creating parent directories as needed. An existing file prompts the user to confirm the overwrite; overwrite: true on an entry skips t

create

delete

1 tool - e.g. Permanently delete one or more files or directories. This action is irreversible.

delete

Replace

1 tool - e.g. Bulk search-and-replace across files matching a glob pattern.

replace_text

Latest releases

v2.4.1 · 2026-09-17

A bug-fix release. One paging line reported the wrong range; the published · surface is byte-identical to 2.4.0, so nothing needs adapting before you · upgrade. · Fixed · search_text reported the wrong range when…

v2.4.0 · 2026-09-17

A trim release: one over-engineering audit applied across the tree, plus · three confirmation-flow refinements. No tool is renamed and no input field · changes shape. Read Removed before upgrading if a launcher passes…

v2.3.0 · 2026-09-16

A security fix for operator deny rules, three additions, and two write tools · that stop guessing. No tool is renamed or removed and no existing input field · changes shape: create gains append and overwrite…

04 · Who maintains Filesystem MCP

Filesystem MCP is maintained by j0hanz. We track 9 MCP servers from j0hanz - 9 actively maintained, 45 combined GitHub stars, oldest repo from Dec 2025. Full record: all servers from j0hanz.

  1. filesystem-context 🔍 Read-only MCP server for secure filesystem exploration, searching, and analysis ★ 22

05 · Facts

category
filesystem - actively maintained as of 2026-09-18.
release cadence
10+ releases in the last 90 days (latest 2026-09-17)
registry
io.github.j0hanz/filesystem-mcp (active, first published 2026-02-10 · 64 versions)
packages
npm:@j0hanz/filesystem-mcp · oci:ghcr.io/j0hanz/filesystem-mcp:2.4.1

06 · Filesystem MCP FAQ

Is Filesystem MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-17 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

What can Filesystem MCP do?

With this server connected, an agent can list allowed workspace roots. Call this first - all other tools scope to these, list directory contents. Returns entries (dirs-first, alphabetical) and an ASCII tree, find files by glob pattern (e.g. /.ts). Returns matching files with metadata, and get file/directory metadata: size, modified time, permissions, MIME type, token estimate.

How do I install Filesystem MCP?

Run `npx -y @j0hanz/filesystem-mcp`. The README documents one environment variable (FS_ALLOWED_DIRS) to set first. You can also paste the ready-made client config above.

Does Filesystem MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Filesystem MCP

More filesystem MCP servers · Virtual Filesystem · Cairn · Devtools

More TypeScript MCP servers · Roku MCP · Moxie Docs · PullPush Reddit · Scan MCP · Lurq · see all