filesystem

Filesystem lets an AI assistant read and change files, but only inside directories you allow. It covers reading text and media, writing, pattern-based edits with a dry-run preview, creating and listing directories, moving files, search and directory trees.

Set the allowed paths as arguments, or let a client that supports MCP Roots update them at runtime. It starts with npx, or in Docker with mounts you can mark read-only. Local and free.

The MCP steering group maintains it as a reference implementation, not a production product. For local work it is the obvious first install. Point it at a narrow folder, because write_file overwrites existing files.