Filesystem MCP
Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.
People who work with analysis, filesystem and scanner and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.
VERIFIED ACTIVE
LAST COMMIT 2026-09-17 · ★ 22 · VERIFIED 2026-09-18
MIT · TypeScript servers · how we verify → /methodology
01 · Install Filesystem MCP
before you install - you'll need
FS_ALLOWED_DIRS
Environment variables documented in the project's README - it lists which are required and which have defaults.
Claude Code
claude mcp add j0hanz-filesystem-mcp -- npx -y @j0hanz/filesystem-mcp Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"j0hanz-filesystem-mcp": {
"command": "npx",
"args": [
"-y",
"@j0hanz/filesystem-mcp"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions · container (OCI image) - can be sandboxed away from your filesystem
license MIT - declared in the repository
npm package @j0hanz/filesystem-mcp - published under the repo owner's npm scope (@j0hanz)
registry namespace io.github.j0hanz is GitHub-verified and matches the repo owner
03 · What Filesystem MCP can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
With this server connected, an agent can list allowed workspace roots. Call this first - all other tools scope to these, list directory contents. Returns entries (dirs-first, alphabetical) and an ASCII tree, find files by glob pattern (e.g. /.ts). Returns matching files with metadata, and get file/directory metadata: size, modified time, permissions, MIME type, token estimate.
Capability map
Tools grouped from the project's README - what Filesystem MCP lets an agent do.
read & search
5 tools - e.g. List allowed workspace roots. Call this first - all other tools scope to these.; List directory contents. Returns entries (dirs-first, alphabetical) and an ASCII tree.; Find files by glob pattern (e.g.…
list_roots · list · find_files · search_text · read
update
3 tools - e.g. Apply sequential literal string replacements to one or more files (max 5 per call).; Move, rename, or copy (copy: true) one or more files/directories to explicit destinations.; Apply a single-file unified…
edit · move · patch
Stat
1 tool - e.g. Get file/directory metadata: size, modified time, permissions, MIME type, token estimate.
stat
Diff
1 tool - e.g. Compare two files and return a unified diff with added/removed line counts.
diff
create & write
1 tool - e.g. Create one or more files, creating parent directories as needed. An existing file prompts the user to confirm the overwrite; overwrite: true on an entry skips t
create
delete
1 tool - e.g. Permanently delete one or more files or directories. This action is irreversible.
delete
Replace
1 tool - e.g. Bulk search-and-replace across files matching a glob pattern.
replace_text
Latest releases
v2.4.1 · 2026-09-17
A bug-fix release. One paging line reported the wrong range; the published · surface is byte-identical to 2.4.0, so nothing needs adapting before you · upgrade. · Fixed · search_text reported the wrong range when…
v2.4.0 · 2026-09-17
A trim release: one over-engineering audit applied across the tree, plus · three confirmation-flow refinements. No tool is renamed and no input field · changes shape. Read Removed before upgrading if a launcher passes…
v2.3.0 · 2026-09-16
A security fix for operator deny rules, three additions, and two write tools · that stop guessing. No tool is renamed or removed and no existing input field · changes shape: create gains append and overwrite…
04 · Who maintains Filesystem MCP
Filesystem MCP is maintained by j0hanz. We track 9 MCP servers from j0hanz - 9 actively maintained, 45 combined GitHub stars, oldest repo from Dec 2025. Full record: all servers from j0hanz.
05 · Facts
- repository
- github.com/j0hanz/filesystem-mcp
- category
- filesystem - actively maintained as of 2026-09-18.
- release cadence
- 10+ releases in the last 90 days (latest 2026-09-17)
- registry
- io.github.j0hanz/filesystem-mcp (active, first published 2026-02-10 · 64 versions)
- packages
- npm:@j0hanz/filesystem-mcp · oci:ghcr.io/j0hanz/filesystem-mcp:2.4.1
06 · Filesystem MCP FAQ
Is Filesystem MCP still maintained?
Yes - as of 2026-09-18, its last commit was 2026-09-17 and it shipped 10+ releases in the last 90 days. We re-verify nightly.
What can Filesystem MCP do?
With this server connected, an agent can list allowed workspace roots. Call this first - all other tools scope to these, list directory contents. Returns entries (dirs-first, alphabetical) and an ASCII tree, find files by glob pattern (e.g. /.ts). Returns matching files with metadata, and get file/directory metadata: size, modified time, permissions, MIME type, token estimate.
How do I install Filesystem MCP?
Run `npx -y @j0hanz/filesystem-mcp`. The README documents one environment variable (FS_ALLOWED_DIRS) to set first. You can also paste the ready-made client config above.
Does Filesystem MCP run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Filesystem MCP
Alternatives to Filesystem MCP
Maintained filesystem servers if Filesystem MCP isn't the fit.
- Server Filesystem MCP server for filesystem access ★ 39,038 · 2026-09-11
- Directory A directory of product launch platforms: where your product qualifies and how each form is filled. ★ 297 · 2026-08-19
- Pdf MCP Agentic RAG over one PDF or a whole folder: hybrid search, selective page reads, tables, OCR. ★ 135 · 2026-09-17
- Remote Filesystem MCP server for remote filesystem operations on cloud storage (Google Cloud Storage). ★ 80 · 2026-08-30
- Keibi Drop Give two agents on two machines the same encrypted folder. P2P, no cloud, only read bytes move. ★ 60 · 2026-09-16
- V8 Run JavaScript and TypeScript in sandboxed V8 isolates with policy-controlled host capabilities. ★ 57 · 2026-09-08
More filesystem MCP servers · Virtual Filesystem · Cairn · Devtools
More TypeScript MCP servers · Roku MCP · Moxie Docs · PullPush Reddit · Scan MCP · Lurq · see all