njbrake/filesystem-mcp-server

部署与 DevOps

本页由 AI 翻译，技术细节请以原文为准。查看原文

8 stars 7 forks 质量 54 趋势 16Apache-2.0

Repository Install

Modern Streamable HTTP supported filesystem MCP server

概览

Filesystem MCP server with Streamable HTTP transport support. Provides comprehensive filesystem operations through the Model Context Protocol. Created as an alternative to the official MCP filesystem server with modern Streamable HTTP transport instead of deprecated SSE. - - Modern MCP protocol - - Read, write, list, create, delete, move, and inspect files/directories - - Configurable root directory with path traversal protection - - Multi-arch images (amd64/arm64) published to GHCR main (latest), v* (releases), main- (commits) Server endpoint: http://localhost:8123/mcp The server exposes 8 MCP tools for filesystem operations: All paths are relative to the configured --allowed-root. The --allowed-root parameter restricts all filesystem operations to the specified directory tree. Path validation prevents directory traversal attacks:

README

以下为原文 README 节选，完整内容请查看原文。

filesystem-mcp-server

Filesystem MCP server with Streamable HTTP transport support. Provides comprehensive filesystem operations through the Model Context Protocol.

Created as an alternative to the official MCP filesystem server with modern Streamable HTTP transport instead of deprecated SSE.

Features

Streamable HTTP Transport - Modern MCP protocol
8 Filesystem Operations - Read, write, list, create, delete, move, and inspect files/directories
Security First - Configurable root directory with path traversal protection
Docker Ready - Multi-arch images (amd64/arm64) published to GHCR

Quick Start

Docker (Recommended)

docker pull ghcr.io/njbrake/filesystem-mcp-server:main

docker run -d \
  --name filesystem-mcp \
  -p 8123:8123 \
  -v /path/to/your/files:/data \
  ghcr.io/njbrake/filesystem-mcp-server:main

Available tags: main (latest), v* (releases), main- (commits)

Python with uv

cd filesystem-mcp-server
uv sync
uv run filesystem-mcp --allowed-root /path/to/files --port 8123

Server endpoint: http://localhost:8123/mcp

Command Line Options

Option	Default	Description
`--port`	8123	Port to listen on
`--allowed-root`	`.`	Root directory for filesystem operations

Available Tools

The server exposes 8 MCP tools for filesystem operations:

Tool	Description	Parameters
`read_file`	Read file contents as text	`path`
`list_directory`	List directory contents with metadata	`path` (optional, default: “.”)
`write_file`	Create or overwrite a file	`path`, `content`
`create_directory`	Create directory (with parents)	`path`
`delete_file`	Delete a file	`path`
`delete_directory`	Delete directory	`path`, `recursive` (optional)
`move_path`	Move or rename file/directory	`source`, `destination`
`get_file_info`	Get file/directory metadata	`path`

All paths are relative to the configured --allowed-root.

Security

The --allowed-root parameter restricts all filesystem operations to the specified directory tree. Path validation prevents directory traversal attacks:

Paths are resolved relative to allowed root
Symlinks and .. components are canonicalized
Final path must be within allowed root
Attempts to escape are rejected (e.g., ../../../etc/passwd)

Important: Never run with system-critical directories as the allowed root.

Docker Details

Custom Configuration

# Different port
docker run -p 8000:8000 \
  -v /my/files:/data \
  ghcr.io/njbrake/filesystem-mcp-server:main \
  --allowed-root /data --port 8000

# Build locally
docker build -t filesystem-mcp-server .

Container Details

Default port: 8123
Default allowed root: /data
Volume mount point: /data

在 GitHub 查看完整 README

安装

docker run -d \

新手？先看 mcpskill.org 教程 →