Filesys MCP Server

Filesys becomes available to MCP clients through the filesys mcp server. A secure, single-binary MCP server for filesystem operations. No runtime dependencies — download, configure allowed directories, and connect to any MCP client.

What Filesys does

A secure, single-binary MCP server for filesystem operations. No runtime dependencies — download, configure allowed directories, and connect to any MCP client.

Key capabilities

• Single binary — — no Node.js, Python, or other runtime needed. Download and run
• Tested with real AI workflows — — battle-tested with Claude Desktop and Claude Code for day-to-day coding tasks
• 18 tools — — goes beyond basic read/write with regex search, pattern-based replacement, auto-indented code insertion, and batch operations
• Dry-run preview — — preview changes before applying them for replacement and insertion tools
• Secure by default — — sandboxed to configured directories with symlink attack prevention and path traversal protection
• Detailed error messages — — when access is denied, errors explain why and suggest fixes

Tools it exposes

Once connected, the assistant can call these 2 tools directly:

• Reading — The Reading tool exposed by this server
• Writing — The Writing tool exposed by this server

Installing the filesys mcp server

Setup follows the standard MCP pattern: clone or install the server, then register it in your client's configuration file and restart the client. The configuration snippets on this page cover Claude Desktop, Claude Code and Cursor.

Configuration

The server reads one environment variable: MCP_ALLOWED_DIRS. Keep credentials in your client's env block or a secrets manager rather than committing them.

Where it fits

Developer-tool servers are usually the first ones people connect, because they turn "help me with this code" into an assistant that can actually read the repo and act on it. Filesys sits in that group, and the shape of its toolset — Reading, Writing — tells you what it is really for. Worth comparing against the other developer tools servers in this directory before you commit to one, since several overlap in scope but differ sharply in setup cost and permissions.

Practical notes

• This server runs locally, so it operates with whatever access your machine and its credentials already have. Scope that deliberately rather than by default.
• Maintained by gomcpgo, written in Python.
• MCP clients ask for confirmation before each tool call by default. Keep that on while you learn what the filesys mcp server actually does with your data.
• Every entry in this directory is reviewed by hand before it goes live, and details are checked against the project's own documentation.