Filesystem
Local file access with scoped read and write permissions to configured directories. Path allow-listing enforced at the protocol layer. The safe default for local file operations.
INSTALL THIS SERVER
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": ["@modelcontextprotocol/server-filesystem", "/Users/you/projects"]
}
}
}
{
"servers": {
"filesystem": {
"type": "stdio",
"command": "npx",
"args": ["@modelcontextprotocol/server-filesystem", "${workspaceFolder}"]
}
}
}
5 TOOLS AVAILABLE
OUR ASSESSMENT
- Path allow-listing enforced at the protocol layer
- Symlink-safe (follows symlinks only within allowed directories)
- Official reference implementation, actively maintained
- Minimal attack surface with clear permission boundaries
- Limited to configured directories (by design)
- No remote filesystem support (local only)
Read-only by default. Write operations require explicit directory allow-listing in the server arguments. Symlinks that escape the allowed directory are blocked.
Scoped, safe file read/write access for local agent workflows
TECHNICAL DETAILS
ADOPTION METRICS
// Reading thisStar count is modest because it lives in the monorepo. The real signal is download volume, which leads the entire ecosystem.
// Reading thisThe most-downloaded MCP server. Every Claude Desktop installation with local file access uses this. Growth is platform-driven.
// Reading this#1 globally. The default MCP server for local file access across every major client.
SOURCES & VERIFICATION
We don't take any single directory's word for it. Before scoring, we cross-reference 3 public MCP sources, install the server ourselves against the clients we cover, and record when we last re-verified.
The same server, 3 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.
| Source | Their rating | Their star count | Their downloads | Last synced |
|---|---|---|---|---|
| AutomationSwitch This page | 5editorial | 2,100 | 84.2K / wk | APR 22, 2026 |
| Official MCP Registry | — unrated | 5,200 | unavailable | APR 12, 2026 |
| PulseMCP | 4.5 community | 5,180 | 62.1K / wk | APR 21, 2026 |
| Smithery | 4.6 installs | 5,200 | 71.4K installs | APR 20, 2026 |
// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.
DISCUSS YOUR
MCP REQUIREMENTS.
Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.