Filesystem MCP server
Gives the model read and write access to directories you name. The most useful MCP server and the one that deserves the most thought before you install it.
Tested on Claude Sonnet · 4.5 ·
MCP · Free, open source
Most people install this server first, so it pays to know what it does. The model can list, read, create, move and overwrite files inside the directories you pass as arguments. Everything under those paths, and nothing outside them.
What it does well. Reading a project without you pasting files is a different way to work. Refactoring across several files stops being copy and paste. Paired with a config file, the model sees your real conventions, including the ones you forgot to mention.
What it does badly. There is no undo. A write is a write, and the model does not ask twice. It also has no idea which files matter, so a request to tidy up can rewrite something you had not committed.
Before you install it. Point it at one directory under version control and nothing else. Never your home directory, never anything holding credentials. For extra care, give it a copy of the repository and keep the working tree out of reach.
Notes from the author
Every path after the package name is a directory the model can write to. A second path is how most accidents start. Use one directory under git and read git status before you accept a batch of changes.
For information only, not professional advice. You use it at your own risk and we are not liable for any loss or damage. See the disclaimer.
Tagged