Filesystem
Local file access with scoped read and write permissions to configured directories. Path allow-listing enforced at the protocol layer. The safe default for local file operations.
“The reference implementation for file access. Sandbox-scoped, symlink-safe, and boringly reliable. Exactly what you want from filesystem access.”
INSTALL THIS SERVER
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": ["@modelcontextprotocol/server-filesystem", "/Users/you/projects"]
}
}
}
{
"servers": {
"filesystem": {
"type": "stdio",
"command": "npx",
"args": ["@modelcontextprotocol/server-filesystem", "${workspaceFolder}"]
}
}
}
5 TOOLS AVAILABLE
OUR ASSESSMENT
- Path allow-listing enforced at the protocol layer
- Symlink-safe (follows symlinks only within allowed directories)
- Official reference implementation, actively maintained
- Minimal attack surface with clear permission boundaries
- Limited to configured directories (by design)
- No remote filesystem support (local only)
Read-only by default. Write operations require explicit directory allow-listing in the server arguments. Symlinks that escape the allowed directory are blocked.
Scoped, safe file read/write access for local agent workflows
TECHNICAL DETAILS
ADOPTION METRICS
// Reading this84,955 stars belong to the modelcontextprotocol/servers monorepo (10 commits/30d). The Filesystem server is one subdirectory; per-server activity is not separately reported. Audit (2026-05-03) confirmed the URL is correct; star count reflects monorepo aggregate.
// Reading thisThe most-downloaded MCP server. Every Claude Desktop installation with local file access uses this. Growth is platform-driven.
// Reading this#1 globally. The default MCP server for local file access across every major client.
SOURCES & VERIFICATION
We don't take any single directory's word for it. Before scoring, we cross-reference 3 public MCP sources, install the server ourselves against the clients we cover, and record when we last re-verified.
The same server, 3 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.
| Source | Their rating | Their star count | Their downloads | Last synced |
|---|---|---|---|---|
| AutomationSwitch This page | 5editorial | 84,955 | 84.2K / wk | MAY 3, 2026 |
| Official MCP Registry | — unrated | 5,200 | unavailable | APR 12, 2026 |
| PulseMCP | 4.5 community | 5,180 | 62.1K / wk | APR 21, 2026 |
| Smithery | 4.6 installs | 5,200 | 71.4K installs | APR 20, 2026 |
// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.
OTHER FILESYSTEM MCP SERVERS
Kreuzberg MCP
A polyglot document intelligence framework with a Rust core. Extract text, metadata, images, and structured info from PDFs, Office documents, images, and 97+ formats via MCP. 8,241 GitHub stars and 100 commits on main in the last 30 days. Elastic License 2.0.
Desktop Commander MCP
MCP server giving Claude terminal control, filesystem search, and code editing on the local machine. 6,007 GitHub stars and 14 commits on main in the last 30 days.
Google Drive MCP
Google Drive MCP server. Covers Drive plus Docs, Sheets, Slides, and Calendar. OAuth 2.0 with token storage and revocation flows. File revisions tools added in v1.7.0.
Conduit MCP
MCP server to read, write, find, and list across filesystems and the web. Includes web fetching alongside filesystem operations. 65 GitHub stars and 1 commit on main in the last 30 days.
Fast Filesystem MCP
High-performance MCP server for secure filesystem operations. Optimised for large directories and bulk operations. 50 GitHub stars and 4 commits on main in the last 30 days.
DISCUSS YOUR
MCP REQUIREMENTS.
Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.