mcp-server-filesystem

MCP server exposing Linux filesystem operations as tools for LLM agents,built with FastMCP. Designed as a lightweight,low-dependency test server for the mcprackMCP proxy/catalog tool.

Configuration

No credentials are needed. All configuration is via environment variables,read once at startup:

Variable	Required	Description
`FS_ROOT`	no	Directory all paths are confined to (default: current working directory at startup)
`FS_READONLY`	no	`true` (default) blocks mutating tools; set to `false` to allow writes/deletes/moves

All paths given to tools are resolved against FS_ROOT and rejected if theywould escape it (via .. or a symlink). This is an application-levelboundary, not a hardened sandbox (no chroot/mount namespace).

Tools

Read-only: list_dir, read_file, stat, exists, glob_search.

Mutating (require FS_READONLY=false): write_file, mkdir, delete,move, copy.

Usage

Recommended — Debian package from VitexSoftware repository

sudo curl -fsSL http://repo.vitexsoftware.com/KEY.gpg -o /usr/share/keyrings/vitexsoftware-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/vitexsoftware-archive-keyring.gpg] http://repo.vitexsoftware.com trixie main backports" \
  | sudo tee /etc/apt/sources.list.d/vitexsoftware.list
sudo apt update
sudo apt install mcp-server-filesystem

The backports component is required, not optional: python3-mcp (apython3-fastmcp dependency) needs python3-jsonschema >= 4.20.0, which isnewer than the version Debian trixie ships in main — it's only availablein backports. Without it, apt install fails with an unmet-dependencyerror on python3-jsonschema.

This installs python3-fastmcp and mcp-server-filesystem in a single step.

Alternative — pip

pip install -e .
export FS_ROOT=/path/to/sandbox
mcp-server-filesystem

mcprack integration

Command: mcp-server-filesystem
Env: FS_ROOT=/path/to/sandbox, FS_READONLY=false (if writes are needed)

mcprack spawns it as a stdio subprocess and proxies it over HTTP per user.

Development

pytest

mcp-server-filesystem