Is BACH FileCommander MCP server safe?

Yes, with the usual care.

B75/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

What to know before installing

How BACH FileCommander compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 75/100; higher than 45% of 3,472 Web search servers
Tools that change things: 20%; typical: 0%. Fewer write tools means less an agent can break

What its tools let an agent do: 35 read · 9 change

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

1 high

Code scan11 source files scanned13/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 5 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

highShell command built from a string (injection risk)exec.shell-concat

dist/index.js: … try { const result = execSync(`which ${cmd}`, { encoding: 'utf-8' }).trim(); …

Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Zoteus
Zotero MCP server for Claude and ChatGPT: search, citations, safe writes, PDF passages and pages.
not reviewed
Established
A
Immich Photo Manager
Photo management for self-hosted Immich: search, albums, duplicates, faces, PDF reports. 94 tools.
not reviewed
Established
B
HasData Google Scholar
Google Scholar search results, citation counts and citation export formats, as structured JSON.
not reviewed
Growing
A