Filesystem MCP server
Advanced filesystem operations with strict security boundaries for AI agents
3 stars42 downloads/wk
Reviews
Write oneNobody has reviewed Filesystem yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Filesystem tools (12, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
fs_analyze_disk_usageAnalyze disk usage
fs_batch_operationswrite actionExecute multiple filesystem operations atomically
fs_build_indexBuild file index for fast searching
fs_compute_checksumCompute file checksums
fs_copy_directoryCopy directories recursively
fs_create_symlinkwrite actionCreate symbolic links
fs_get_watch_eventsGet accumulated watch events
fs_search_filesSearch for files by name, content, or metadata
fs_stop_watchStop watching a directory
fs_sync_directorySync directories (copy only newer or missing files)
fs_verify_checksumVerify file checksums
fs_watch_directoryWatch directory for filesystem changes
Public scan report
scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it
- Code scan57 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 176 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/lib/SecurityManager.enhanced.js: …ript tags /eval\s*\(/gi, // eval() calls /exec\s*\(/gi, // ex…
How Filesystem compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 40% of 915 Security servers
- Tools
- 12
- the typical Security server has 6
- Tools that change things
- 17%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 3
- more than 80% of 587 Security servers
- Downloads a week
- 42
- more than 35% of 248 Security servers with a package
What its tools let an agent do: 10 read · 2 change
Install Filesystem in Claude Code, Cursor or VS Code
Runs npx -y @ai-capabilities-suite/mcp-filesystem on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-filesystem -- npx -y @ai-capabilities-suite/mcp-filesystem
What the publisher says
From the Filesystem repository's README, as published. We do not edit it. Read it on GitHub
🚀 AI Capability Extension Suite
What if AI agents could actually see, debug, and control your development environment?
We've built the most comprehensive suite of MCP servers that give AI agents superpowers they've never had before. This isn't just another tool collection—it's a paradigm shift that transforms AI assistants from code generators into intelligent development partners with runtime visibility, system control, and physical world access.
📝 Note: All packages have been split into individual Git submodules with their own repositories for better maintainability and independent versioning. Each package now has its own dedicated repository under the Digital-Defiance organization.
📦 Quick Index
🐛 MCP ACS Debugger
25+ debugging tools for AI agents | VS Code Extension | NPM | Docker
- ✅ VS Code Extension with GitHub Copilot integration
- ✅ 94.53% test coverage, 1,059 tests
- ✅ Performance profiling, hang detection, advanced breakpoints
- 🎯 Kiro Superpower in development - Enhanced AI debugging workflows
📸 MCP ACS Screenshot
Visual UI capture and analysis | VS Code Extension | NPM | Docker
- ✅ Full screen, window, and region capture
- ✅ PII masking with OCR integration
- ✅ 267 tests, cross-platform support
- 🎯 Kiro Superpower in development - AI-powered visual analysis
⚙️ MCP ACS Process
Enterprise-grade process management | VS Code Extension | NPM | Docker
- ✅ 12 process management tools
- ✅ 6 layers of security validation
- ✅ Resource monitoring and service management
- 🎯 Kiro Superpower in development - Intelligent process orchestration
🎯 Akira
Spec-driven development for GitHub Copilot | Repository
- ✅ EARS-compliant requirements engineering
- ✅ Property-based testing integration
- ✅ Structured Requirements → Design → Tasks → Execution workflow
- ✅ MCP-powered persistent context across chat sessions
🎯 Now Available on VS Code Marketplace
⚡ Install the VS Code Extension →
Our flagship MCP ACS Debugger is now available as a native VS Code extension, bringing professional-grade debugging capabilities directly to your editor with zero configuration required.
Why developers love it:
- ✅ One-click installation from VS Code Marketplace
- ✅ GitHub Copilot integration for AI-powered debugging
- ✅ 25+ debugging tools accessible to AI agents
- ✅ Zero configuration - works immediately after install
- ✅ Enterprise-grade quality with 94.53% test coverage
- ✅ 1,059 passing tests
View on VS Code Marketplace →
🤔 The Problem We're Solving
AI agents today are powerful but blind:
- ❌ Can't see what code actually does when it runs
- ❌ Can't capture your screen or record demonstrations
- ❌ Can't manage files beyond basic read/write
- ❌ Can't control processes or applications
- ❌ Can't interact with your actual development environment
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Filesystem: common questions
- Is Filesystem MCP server safe?
- Mostly: it is graded B (75/100). Read the Filesystem safety report
- How do I install Filesystem?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Filesystem need an API key?
- No secret keys are declared. It reads 1 setting from the environment.
- Is Filesystem maintained?
- The last commit was 210 days ago (2026-04-08). The latest release is v0.1.9.
- What can I use instead of Filesystem?
- Servers from other publishers that do the same job: Npm Sentinel MCP server, Firefly Iii MCP server and Skylos MCP server.
- How does Filesystem compare with other Security MCP servers?
- safety score 75/100 (higher than 40% of 915 Security servers); tools 12 (the typical Security server has 6); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Filesystem
Same job from other publishers: the closest match first, then the best rated.
- Npm SentinelAdvanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.not reviewedGrowingA
- Firefly IiiSecurity-first, self-hosted MCP server for Firefly III — 152 operations behind 5 scoped tools.not reviewedGrowingB
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC
- SnykEasily find and fix security issues in your applications leveraging Snyk platform capabilities.not reviewedEstablishedB
- CrowdStrike Falcon MCP ServerConnects AI agents with CrowdStrike Falcon for security analysis and automation.not reviewedEstablishedA