← Back to search

io.github.j0hanz/filesystem-context

j0hanz Scanned 20d ago

๐Ÿ” Read-only MCP server for secure filesystem exploration, searching, and analysis

A
90.4 / 100

Versions

1.0.9latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 13

list_roots
annotations: verified low

List the directories this server can access, as absolute paths, including any the user granted during this session.

readOnlyHint true openWorldHint false
list
annotations: verified low

List a directory's files and subdirectories as a tree of names, like ls or tree.

readOnlyHint true openWorldHint false
diff
annotations: verified low

Compare two text files and return a unified diff from a to b, like diff -u.

readOnlyHint true openWorldHint false
create
annotations: verified low

Write whole text files: create new ones, overwrite, or append. Missing parent directories are created.

readOnlyHint false openWorldHint false destructiveHint true
replace_text
annotations: verified low

Find and replace every occurrence of literal text or an RE2 regex, like sed -i, in one file or all files

readOnlyHint false openWorldHint false destructiveHint true
stat
annotations: verified low

Get metadata without reading contents, like ls -ld: type, size (a directory reports its own entry, not its contents),

readOnlyHint true openWorldHint false
read
annotations: verified low

Read text files, like cat: whole, or one slice via head, tail, or startLine/endLine.

readOnlyHint true openWorldHint false
delete
annotations: verified low

Permanently delete files, directories, or symlinks, like rm or rm -r. Paths are exact; globs are not expanded.

readOnlyHint false openWorldHint false destructiveHint true
edit
annotations: verified low

Edit text files in place by replacing exact oldText with newText, like str_replace.

readOnlyHint false openWorldHint false destructiveHint true
find_files
annotations: verified low

Find files by name or glob pattern; returns file paths relative to the searched directory.

readOnlyHint true openWorldHint false
search_text
annotations: verified low

Search file contents for literal text or an RE2 regex, like grep; returns matching lines with line numbers

readOnlyHint true openWorldHint false
move
annotations: verified low

Move, rename, or copy files and directories, like mv or cp -r.

readOnlyHint false openWorldHint false destructiveHint true
patch
annotations: verified low

Apply a single-file unified diff to one existing text file, like git apply.

readOnlyHint false openWorldHint false destructiveHint true

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs.promises
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 40

info
Tool 'create' annotations are consistent annotation_checker ยท 80%
info
Tool 'replace_text' annotations are consistent annotation_checker ยท 80%
info
Tool 'stat' annotations are consistent annotation_checker ยท 80%
info
Tool 'read' annotations are consistent annotation_checker ยท 80%
info
Tool 'delete' annotations are consistent annotation_checker ยท 80%
info
Tool 'edit' annotations are consistent annotation_checker ยท 80%
info
Tool 'find_files' annotations are consistent annotation_checker ยท 80%
info
Tool 'search_text' annotations are consistent annotation_checker ยท 80%
info
Tool 'move' annotations are consistent annotation_checker ยท 80%
info
Tool 'patch' annotations are consistent annotation_checker ยท 80%
info
Tool 'list_roots' annotations are consistent annotation_checker ยท 80%
info
Tool 'list' annotations are consistent annotation_checker ยท 80%
info
Tool 'diff' annotations are consistent annotation_checker ยท 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier ยท 100%
medium
Buffer.from base64 in j0hanz-filesystem-mcp-d1f7f43/__tests__/tools.test.ts:85 entropy_analyzer ยท 75%
medium
Hex string literal (>50 chars) in j0hanz-filesystem-mcp-d1f7f43/__tests__/tools.test.ts:63 entropy_analyzer ยท 70%
medium
Hex string literal (>50 chars) in j0hanz-filesystem-mcp-d1f7f43/__tests__/tools.test.ts:64 entropy_analyzer ยท 70%
info
package.json metadata manifest_parser ยท 100%
info
Tool: create manifest_parser ยท 75%
info
Tool: replace_text manifest_parser ยท 75%
info
Tool: stat manifest_parser ยท 75%
info
Tool: read manifest_parser ยท 75%
info
Tool: delete manifest_parser ยท 75%
info
Tool: edit manifest_parser ยท 75%
info
Tool: find_files manifest_parser ยท 75%
info
Tool: search_text manifest_parser ยท 75%
info
Tool: move manifest_parser ยท 75%
info
Tool: patch manifest_parser ยท 75%
info
Tool: list_roots manifest_parser ยท 75%
info
Tool: list manifest_parser ยท 75%
info
Tool: diff manifest_parser ยท 75%
info
Transport: streamable-http manifest_parser ยท 80%
info
Required env vars (18) manifest_parser ยท 80%
info
Sandbox failed to start for output poisoning scan output_poisoning ยท 100%
medium
Permission: network access detected permission_analyzer ยท 70%
low
Permission: filesystem access detected permission_analyzer ยท 90%
high
Permission: shell access detected permission_analyzer ยท 95%
low
Permission: env_vars access detected permission_analyzer ยท 90%
info
SBOM generated: 272 components sbom_generator ยท 100%
medium
No build provenance detected (SLSA L0) slsa_assessor ยท 90%