Filesystem MCP server

FieldCure MCP Filesystem Server

A secure Model Context Protocol (MCP) server that exposes local filesystem operations to AI clients. Built with C# and the official MCP C# SDK.

Features

• 17 filesystem tools: read, write, append, delete, search, copy, move, convert-to-markdown, and more
• Sandboxed access: all operations restricted to explicitly allowed directories
• MCP roots protocol: clients can change allowed directories at runtime without restarting the server
• Security hardened: path traversal prevention, symlink resolution, NTFS ADS blocking, Windows reserved name rejection
• Atomic writes: temp-file-then-rename pattern prevents data corruption
• Binary detection: automatically returns base64 for binary files, UTF-8 for text
• Built-in document parsing: supported document formats can be read directly and converted to markdown on disk
• Stdio transport: standard MCP subprocess model via JSON-RPC over stdin/stdout

Installation

dotnet tool

dotnet tool install -g FieldCure.Mcp.Filesystem

From source

git clone https://github.com/fieldcure/fieldcure-mcp-filesystem.git
cd fieldcure-mcp-filesystem
dotnet build

Requirements

• .NET 8.0 Runtime or later

Configuration

Claude Desktop

{
  "mcpServers": {
    "filesystem": {
      "command": "fieldcure-mcp-filesystem",
      "args": [
        "C:\\Users\\me\\Documents",
        "C:\\Projects"
      ]
    }
  }
}

VS Code

{
  "servers": {
    "filesystem": {
      "command": "fieldcure-mcp-filesystem",
      "args": [
        "${workspaceFolder}"
      ]
    }
  }
}

Tools

File Operations

Directory Operations

Search & Info

MCP Roots Protocol

The server supports the MCP roots protocol for runtime directory changes. When the client changes roots:

1. The server requests the updated roots list.
2. Allowed directories are replaced entirely.
3. CLI args provide the initial sandbox.
4. An empty roots list means all file access is denied.

Security Model

All paths are validated through IPathValidator before any filesystem operation:

Shortened. The full README is on GitHub.