← Back to search

@modelcontextprotocol/server-filesystem

modelcontextprotocol NOASSERTION 85,953 stars Scanned 5h ago

MCP server for filesystem access

C
61.6 / 100

Versions

1.0.0 latest
May 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 24

create_entities
unchecked low

Create multiple new entities in the knowledge graph

create_relations
unchecked low

Create multiple new relations between entities in the knowledge graph. Relations should be in active voice

add_observations
unchecked low

Add new observations to existing entities in the knowledge graph

delete_entities
unchecked low

Delete multiple entities and their associated relations from the knowledge graph

delete_observations
unchecked low

Delete specific observations from entities in the knowledge graph

delete_relations
unchecked low

Delete multiple relations from the knowledge graph

read_graph
unchecked low

Read the entire knowledge graph

search_nodes
unchecked low

Search for nodes in the knowledge graph based on a query

open_nodes
unchecked low

Open specific nodes in the knowledge graph by their names

sequentialthinking
unchecked low

A detailed tool for dynamic and reflective problem-solving through thoughts. This tool helps analyze problems through a flexible thinking process that can adapt and evolve. Each thought can build on, question, or revise previous insights as understanding deepens. When to use this tool: - Breaking down complex problems into steps - Planning and design with room for revision - Analysis that might need course correction - Problems where the full scope might not be clear initially - Problems that require a multi-step solution - Tasks that need to maintain context over multiple steps - Situations where irrelevant information needs to be filtered out Key features: - You can adjust total_thoughts up or down as you progress - You can question or revise previous thoughts - You can add more thoughts even after reaching what seemed like the end - You can express uncertainty and explore alternative approaches - Not every thought needs to build linearly - you can branch or backtrack - Generates a solution hypothesis - Verifies the hypothesis based on the Chain of Thought steps - Repeats the process until satisfied - Provides a correct answer Parameters explained: - thought: Your current thinking step, which can include: * Regular analytical steps * Revisions of previous thoughts * Questions about previous decisions * Realizations about needing more analysis * Changes in approach * Hypothesis generation * Hypothesis verification - nextThoughtNeeded: True if you need more thinking, even if at what seemed like the end - thoughtNumber: Current number in sequence (can go beyond initial total if needed) - totalThoughts: Current estimate of thoughts needed (can be adjusted up/down) - isRevision: A boolean indicating if this thought revises previous thinking - revisesThought: If is_revision is true, which thought number is being reconsidered - branchFromThought: If branching, which thought number is the branching point - branchId: Identifier for the current branch (if any) - needsMoreThoughts: If reaching end but realizing more thoughts needed You should: 1. Start with an initial estimate of needed thoughts, but be ready to adjust 2. Feel free to question or revise previous thoughts 3. Don't hesitate to add more thoughts if needed, even at the "end" 4. Express uncertainty when present 5. Mark thoughts that revise previous thinking or branch into new paths 6. Ignore information that is irrelevant to the current step 7. Generate a solution hypothesis when appropriate 8. Verify the hypothesis based on the Chain of Thought steps 9. Repeat the process until satisfied with the solution 10. Provide a single, ideally correct answer as the final output 11. Only set nextThoughtNeeded to false when truly done and a satisfactory answer is reached

read_file
unchecked low

Read the complete contents of a file as text. DEPRECATED: Use read_text_file instead.

readOnlyHint true
read_text_file
unchecked low

Read the complete contents of a file from the file system as text.

readOnlyHint true
read_media_file
unchecked low

Read an image or audio file. Returns the base64 encoded data and MIME type.

readOnlyHint true
read_multiple_files
unchecked low

Read the contents of multiple files simultaneously. This is more

readOnlyHint true idempotentHint true destructiveHint true
write_file
unchecked low

Create a new file or completely overwrite an existing file with new content.

readOnlyHint false idempotentHint true destructiveHint true
edit_file
unchecked low

Make line-based edits to a text file. Each edit replaces exact line sequences

readOnlyHint false idempotentHint false destructiveHint true
create_directory
unchecked low

Create a new directory or ensure a directory exists. Can create multiple

readOnlyHint false idempotentHint true destructiveHint false
list_directory
unchecked low

Get a detailed listing of all files and directories in a specified path.

readOnlyHint true
list_directory_with_sizes
unchecked low

Get a detailed listing of all files and directories in a specified path, including sizes.

readOnlyHint true
directory_tree
unchecked low

Get a recursive tree view of files and directories as a JSON structure.

readOnlyHint true
move_file
unchecked low

Move or rename files and directories. Can move files between directories

readOnlyHint false idempotentHint false destructiveHint true
search_files
unchecked low

Recursively search for files and directories matching a pattern.

readOnlyHint true
get_file_info
unchecked low

Retrieve detailed metadata about a file or directory. Returns comprehensive

readOnlyHint true
list_allowed_directories
unchecked low

Returns the list of directories that this server is allowed to access.

readOnlyHint true

Permissions 4

network medium
Server uses network capabilities via: fetch(), httpx, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil
shell high
Server uses shell capabilities via: child_process, spawn(), subprocess
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 85

info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: create_entities manifest_parser · 85%
info
Tool: create_relations manifest_parser · 85%
info
Tool: add_observations manifest_parser · 85%
info
Tool: delete_entities manifest_parser · 85%
info
Tool: delete_observations manifest_parser · 85%
info
Tool: delete_relations manifest_parser · 85%
info
Tool: read_graph manifest_parser · 85%
info
Tool: search_nodes manifest_parser · 85%
info
Tool: open_nodes manifest_parser · 85%
info
Tool: sequentialthinking manifest_parser · 85%
info
Tool: read_file manifest_parser · 85%
info
Tool: read_text_file manifest_parser · 85%
info
Tool: read_media_file manifest_parser · 85%
info
Tool: read_multiple_files manifest_parser · 85%
info
Tool: write_file manifest_parser · 85%
info
Tool: edit_file manifest_parser · 85%
info
Tool: create_directory manifest_parser · 85%
info
Tool: list_directory manifest_parser · 85%
info
Tool: list_directory_with_sizes manifest_parser · 85%
info
Tool: directory_tree manifest_parser · 85%
info
Tool: move_file manifest_parser · 85%
info
Tool: search_files manifest_parser · 85%
info
Tool: get_file_info manifest_parser · 85%
info
Tool: list_allowed_directories manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (7) manifest_parser · 80%
low
Tool 'create_entities' has no annotations annotation_checker · 100%
low
Tool 'create_relations' has no annotations annotation_checker · 100%
low
Tool 'add_observations' has no annotations annotation_checker · 100%
low
Tool 'delete_entities' has no annotations annotation_checker · 100%
low
Tool 'delete_observations' has no annotations annotation_checker · 100%
low
Tool 'delete_relations' has no annotations annotation_checker · 100%
low
Tool 'read_graph' has no annotations annotation_checker · 100%
low
Tool 'search_nodes' has no annotations annotation_checker · 100%
low
Tool 'open_nodes' has no annotations annotation_checker · 100%
low
Tool 'sequentialthinking' has no annotations annotation_checker · 100%
info
Tool 'read_file' annotations are consistent annotation_checker · 80%
info
Tool 'read_text_file' annotations are consistent annotation_checker · 80%
info
Tool 'read_media_file' annotations are consistent annotation_checker · 80%
medium
Tool 'read_multiple_files' claims destructive but name implies read-only operation annotation_checker · 80%
info
Tool 'write_file' annotations are consistent annotation_checker · 80%
info
Tool 'edit_file' annotations are consistent annotation_checker · 80%
info
Tool 'create_directory' annotations are consistent annotation_checker · 80%
info
Tool 'list_directory' annotations are consistent annotation_checker · 80%
info
Tool 'list_directory_with_sizes' annotations are consistent annotation_checker · 80%
info
Tool 'directory_tree' annotations are consistent annotation_checker · 80%
info
Tool 'move_file' annotations are consistent annotation_checker · 80%
info
Tool 'search_files' annotations are consistent annotation_checker · 80%
info
Tool 'get_file_info' annotations are consistent annotation_checker · 80%
info
Tool 'list_allowed_directories' annotations are consistent annotation_checker · 80%
high
Remote transport without authentication auth_checker · 70%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: vitest@2.1.8 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.1 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.1 (GHSA-3ppc-4f35-3m26) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.1 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: markdownify@0.13.1 (GHSA-7mpr-5m44-h73r) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.3 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.3 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.3 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.32.3 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.32.3 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: gitpython@3.1.45 (GHSA-7545-fcxq-7j24) dependency_analyzer · 95%
medium
Vulnerable dependency: gitpython@3.1.45 (GHSA-mv93-w799-cj2w) dependency_analyzer · 95%
medium
Vulnerable dependency: gitpython@3.1.45 (GHSA-rpm5-65cw-6hj4) dependency_analyzer · 95%
medium
Vulnerable dependency: gitpython@3.1.45 (GHSA-v87r-6q3f-2j67) dependency_analyzer · 95%
medium
Vulnerable dependency: gitpython@3.1.45 (GHSA-x2qx-6953-8485) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Buffer.from base64 in src/everything/__tests__/resources.test.ts:95 entropy_analyzer · 75%
medium
Buffer.from base64 in src/everything/__tests__/tools.test.ts:217 entropy_analyzer · 75%
info
SLSA Build Level 3 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 321 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%