FileMCP is a native macOS app that gives ChatGPT controlled access to a local workspace through MCP
概览
Your local workspace, connected to ChatGPT. On your terms. Get started · Features · Security · Development FileMCP is a native desktop application that gives ChatGPT controlled access to a local workspace through MCP. It can read and modify files, run Git operations, and—only when explicitly enabled—run local shell commands. The MCP server stays bound to 127.0.0.1. FileMCP uses OpenAI Secure MCP Tunnel to make that local server available to supported OpenAI products without opening a public inbound port on your computer. FileMCP can modify or delete files inside the directory you choose. If command execution is enabled, it can also run processes with the permissions of your signed-in OS user. Use a narrowly scoped workspace and enable shell access only when you trust the workflow using it. FileMCP is an independent open-source project. It is not an official OpenAI product. - Native desktop implementations: - on macOS. - on Windows.
README
以下为原文 README 节选，完整内容请查看原文。
Get started · Features · Security · Development
FileMCP is a native macOS and Windows desktop application that gives ChatGPT controlled access to a local workspace through MCP. It can read and modify files, run Git operations, and—only when explicitly enabled—run local shell commands.
The MCP server stays bound to 127.0.0.1. By default, FileMCP uses OpenAI Secure MCP Tunnel to connect supported OpenAI products without a public MCP endpoint. On macOS, you can alternatively use your own Cloudflare Tunnel with a public HTTPS hostname and OAuth. Both options establish an outbound tunnel rather than opening an inbound router port.
[!WARNING] FileMCP can modify or delete files inside the directory you choose. If command execution is enabled, it can also run processes with the permissions of your signed-in OS user. Use a narrowly scoped workspace and enable shell access only when you trust the workflow using it.
FileMCP is an independent open-source project. It is not an official OpenAI product.
Highlights
- Native desktop implementations:
- Swift + AppKit on macOS.
- C# + .NET 8 + WPF on Windows.
- Shared core tools on both platforms: filesystem access, Git, Codex-history import, MCP protocol support, OpenAI tunnel integration and optional command execution. Provider choices and permission controls differ; see Application settings.
- Compact macOS interface with a workspace overview, persistent connection controls and a saved light/dark appearance choice.
- Local MCP server listens on loopback only (
127.0.0.1). - Built-in filesystem tools are restricted to one configured workspace root; optional shell commands are not OS-sandboxed.
- Symlink/reparse-point and canonical-path checks protect the workspace boundary.
- Git operations are available without enabling arbitrary shell execution.
- Optional shell execution is off by default.
- Runtime API keys are stored in the operating system credential store:
- macOS Keychain.
- Windows Credential Manager.
- Process output, request sizes, search scope, and concurrency are bounded.
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →