← Back to search

@j0hanz/filesystem-mcp

GitHub Actions Scanned 25d ago

Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.

A
90.4 / 100

Versions

1.19.1latest
Apr 11, 2026
1.19.0
Apr 11, 2026
1.18.0
Apr 11, 2026
1.17.1
Apr 10, 2026
1.17.0
Apr 10, 2026
+ show 50 moreshow less
1.16.3
Apr 10, 2026
1.16.2
Apr 10, 2026
1.16.1
Apr 10, 2026
1.16.0
Apr 10, 2026
1.15.5
Apr 10, 2026
1.15.4
Apr 10, 2026
1.15.3
Apr 10, 2026
1.15.2
Apr 10, 2026
1.15.1
Apr 10, 2026
1.15.0
Apr 10, 2026
1.14.1
Apr 10, 2026
1.14.0
Mar 11, 2026
1.13.2
Mar 9, 2026
1.13.1
Mar 9, 2026
1.13.0
Mar 9, 2026
1.12.0
Mar 6, 2026
1.11.1
Mar 6, 2026
1.11.0
Mar 6, 2026
1.10.0
Mar 6, 2026
1.9.1
Mar 5, 2026
1.9.0
Mar 5, 2026
1.8.0
Mar 1, 2026
1.7.3
Feb 28, 2026
1.7.2
Feb 27, 2026
1.7.1
Feb 25, 2026
1.7.0
Feb 25, 2026
1.6.2
Feb 25, 2026
1.6.1
Feb 24, 2026
1.6.0
Feb 24, 2026
1.5.4
Feb 23, 2026
1.5.3
Feb 23, 2026
1.5.2
Feb 23, 2026
1.5.1
Feb 22, 2026
1.5.0
Feb 21, 2026
1.4.0
Feb 21, 2026
1.3.2
Feb 21, 2026
1.3.1
Feb 21, 2026
1.3.0
Feb 21, 2026
1.2.4
Feb 20, 2026
1.2.3
Feb 20, 2026
1.2.2
Feb 19, 2026
1.2.1
Feb 19, 2026
1.2.0
Feb 19, 2026
1.1.2
Feb 13, 2026
1.1.1
Feb 11, 2026
1.1.0
Feb 11, 2026
1.0.4
Feb 11, 2026
1.0.3
Feb 11, 2026
1.0.1
Feb 10, 2026
1.0.0
Feb 10, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 13

list_roots
annotations: verified low

List the allowed workspace root directories. Call this first to discover what paths are accessible; all other tools are scoped to these roots. Allowed directories are configured via CLI arguments, the FS_ALLOWED_DIRS environment variable, or --allow-cwd.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
search_text
annotations: verified low

Search file contents by text or regex (grep-style). Returns matching lines with file path,

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
list
annotations: verified low

List sorted directory entries and an ASCII tree. maxDepth=1 is top-level.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
replace_text
annotations: verified low

Bulk search-and-replace across files matching a glob pattern.

readOnlyHint false openWorldHint false idempotentHint false destructiveHint true
delete
annotations: verified low

Permanently delete one or more files, directories, or symlinks (max 1000 per call). This action is irreversible.

readOnlyHint false openWorldHint false idempotentHint false destructiveHint true
edit
annotations: verified low

Apply sequential literal string replacements to one or more files (max 5 files per call).

readOnlyHint false openWorldHint false idempotentHint false destructiveHint true
stat
annotations: verified low

Get metadata for one or more files or directories: size, type, permissions, MIME type, timestamps, and tokenEstimate.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
patch
annotations: verified low

Apply a single-file unified diff to one file and write the result. Pass { path, diff }.

readOnlyHint false openWorldHint false idempotentHint false destructiveHint true
create
annotations: verified low

Create one or more files (max 100), creating parent directories as needed.

readOnlyHint false openWorldHint false idempotentHint false destructiveHint true
diff
annotations: verified low

Compare two files and return a unified diff with line counts. Pass the two paths as a and b.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
read
annotations: verified low

Read one or more text files and return content.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
move
annotations: verified low

Move, rename, or copy files and directories to explicit destination paths (max 100 operations per call).

readOnlyHint false openWorldHint false idempotentHint false destructiveHint true
find_files
annotations: verified low

Find files matching a glob pattern. Returns matched paths with optional metadata.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs.promises
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 40

info
Tool 'list_roots' annotations are consistent annotation_checker · 80%
info
Tool 'search_text' annotations are consistent annotation_checker · 80%
info
Tool 'list' annotations are consistent annotation_checker · 80%
info
Tool 'replace_text' annotations are consistent annotation_checker · 80%
info
Tool 'delete' annotations are consistent annotation_checker · 80%
info
Tool 'edit' annotations are consistent annotation_checker · 80%
info
Tool 'stat' annotations are consistent annotation_checker · 80%
info
Tool 'patch' annotations are consistent annotation_checker · 80%
info
Tool 'create' annotations are consistent annotation_checker · 80%
info
Tool 'diff' annotations are consistent annotation_checker · 80%
info
Tool 'read' annotations are consistent annotation_checker · 80%
info
Tool 'move' annotations are consistent annotation_checker · 80%
info
Tool 'find_files' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in j0hanz-filesystem-mcp-b4c97e2/__tests__/tools.test.ts:85 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in j0hanz-filesystem-mcp-b4c97e2/__tests__/tools.test.ts:63 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in j0hanz-filesystem-mcp-b4c97e2/__tests__/tools.test.ts:64 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: list_roots manifest_parser · 75%
info
Tool: search_text manifest_parser · 75%
info
Tool: list manifest_parser · 75%
info
Tool: replace_text manifest_parser · 75%
info
Tool: delete manifest_parser · 75%
info
Tool: edit manifest_parser · 75%
info
Tool: stat manifest_parser · 75%
info
Tool: patch manifest_parser · 75%
info
Tool: create manifest_parser · 75%
info
Tool: diff manifest_parser · 75%
info
Tool: read manifest_parser · 75%
info
Tool: move manifest_parser · 75%
info
Tool: find_files manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (18) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 272 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%