BrowseFull catalogOutcomesSolve a specific problemRolesStack by teamTrustFilter by risk tier
← Back to the Claude Observatory

MCP Filesystem Server

Connector Productivity Solid
Works inClaude Code Claude Cowork Claude Chat
Solid Reviewed

The canonical building block for local AI workflows.

Official Anthropic-published MCP server giving Claude scoped read/write access to the local filesystem: file operations, directory management, search, and diff capabilities.

91,574 starsSEE LICENSE IN LICENSEFreeNo code needed
Official tool maintained by Anthropic, PBC.

The canonical building block for local AI workflows. Every developer benefits from an AI that can read, write, and organize files — this is the foundational skill that makes Claude Code-like workflows possible with any MCP-compatible tool.

Any developer wanting Claude to read, write, or manage local files as part of a workflow — universal prerequisite for most AI-assisted development setups.

Claude Code Claude Cowork Claude Chat

https://github.com/modelcontextprotocol/servers/tree/main/sr...

By Anthropic, PBC

How to Get It

Option 1: Claude Desktop AppOpen the Customize panel in the sidebar → browse connectors → search and add. Works in Claude Code, Claude Cowork, and Claude Chat.
Option 2: Paste into Claude CodeCopy the command below and paste it into a Claude Code conversation. Claude will run it for you.
Command
npx -y @modelcontextprotocol/server-filesystem /path/to/allowed/dir

Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.

First thing to try

Once it’s connected, paste this into Claude:

Organize files in a folder by date or type
PrerequisitesNode.js; specify allowed directories as arguments — requiredTime to functional5 minutesCostFree

Trust Signals Reviewed

Stars91,574Contributors1072Last updated2026-10-25LicenseSEE LICENSE IN LICENSEWeekly downloads428,015Known CVEsNone foundSources: GitHub Advisory Database + OSV.dev · Scanned 2026-10-26 · scanner vattempted-no-data

Data & Access

Data processingPrompts sent to Anthropic API. Enterprise/Team plans exclude training.Connects toAnthropic, PBC servers (official integration)

Community Pulse Active

Discussed on Hacker News, Reddit

1 mentions across 1 sources

Reviewer notes

Reviewed review. These are observations, not a security certification.

catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 90,617 GitHub stars; 1064 contributors; last commit 3d ago; license SEE LICENSE IN LICENSE.

2026-04-02: LIMITATION: Misconfiguring the directory allowlist (e.g., allowing / or /home) would expose the entire filesystem to read/write/delete. Enterprise deployments must enforce strict directory scoping.

Things to check

  • Filesystem access is scoped to directories you explicitly allow, but misconfiguration can expose sensitive files (keys, secrets, credentials). Requires careful scope management in production environments.

How to evaluate tools before deploying →

Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.

Evaluation

Ease of Use
2/5
Versatility
5/5
Reliability
5/5
Security
4/5
Overall score3.80 / 5.00 SolidEvaluatedSep 2026
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 90,617 GitHub stars; 1064 contributors; last commit 3d ago; license SEE LICENSE IN LICENSE.

← Back to the Claude Observatory

Rolling Claude out in your org? Let's talk.

Start a conversation →