Filesystem MCP server

Read and write files inside a folder you choose.

What it does

Gives the model a jailed view of one directory. Start read-only if you can; this is the server people install first and the one most likely to leak a secrets file if you point it at $HOME.

Install

Typical Claude Desktop / Cursor command:

npx -y @modelcontextprotocol/server-filesystem /path/to/folder

Secrets it wants: none — pass the allowed directory as an argument

Source repo →

Works with

Claude Desktop, Cursor, Windsurf — any host that can launch a local MCP stdio server.