MCP CheckMCP servers for file system access
39 servers from the official MCP Registry that work with file system access. 27 need no API key and 1 can run hosted. Each row shows the security checks, the secrets asked for and an install command.
file system access MCP servers 39
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
★ 39k io.github.bytedance/mcp-server-filesystem MCP server for filesystem access | 6/71 warning | 73health of 100 | npmRuns locally | Noneno keys asked | 1.0.0 | ||
★ 81 com.pulsemcp/remote-filesystem MCP server for remote filesystem operations on cloud storage (Google Cloud Storage). | 7/7All passed | 64health of 100 | npmRuns locally | 1secret asked | 0.1.5 | ||
| 6/71 warning | 62health of 100 | npmRuns locally | Noneno keys asked | 2.11.0 | |||
★ 5 io.github.Oncorporation/filesystem-server Secure filesystem access for AI agents with configurable directory and file type restrictions | 7/7All passed | 54health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.4 | ||
★ 3 io.github.lu-zhengda/virtual-fs PostgreSQL-backed virtual filesystem for agents: session isolation, shared stores, POSIX ops, RLS. | 7/7All passed | 41health of 100 | npmRuns locally | 1secret asked | 0.2.2 | ||
★ 3 io.github.Digital-Defiance/mcp-filesystem Advanced filesystem operations with strict security boundaries for AI agents | 6/71 warning | 38health of 100 | npmRuns locally | Noneno keys asked | 0.1.9 | ||
★ 1 io.github.fieldcure/filesystem Secure MCP server for sandboxed filesystem operations with document parsing support. | 4/4All passed | 39health of 100 | NuGetRuns locally | Noneno keys asked | 1.1.2 | ||
★ 70 io.github.es617/obsidian-sync-mcp Give AI agents access to your Obsidian vault via local files or Self-hosted LiveSync. | 7/81 warning | 71health of 100 | npmRuns locally | 3secrets asked | 0.5.2 | ||
★ 59 io.github.apireno/domshell Drive Chrome with filesystem commands (ls, cd, grep, click, type). One MCP tool, multi-agent. | 7/7All passed | 57health of 100 | npmRuns locally | Noneno keys asked | 2.0.10 | ||
★ 37 io.github.gonzaroman/ihmt-memory Long-term memory for AI coding agents, stored as a tree of plain local files. | 7/7All passed | 66health of 100 | PyPIRuns locally | Noneno keys asked | 1.2.1 | ||
★ 34 io.github.shaqmughal/seekstone Filesystem-direct Obsidian MCP server — search and edit your vault with low context-tax. | 7/7All passed | 72health of 100 | npmRuns locally | Noneno keys asked | 0.22.4 | ||
★ 32 io.github.JonathanRReed/apple-files-mcp Inspect and manage local files and folders inside allowed roots on macOS. | 7/7All passed | 59health of 100 | PyPIRuns locally | Noneno keys asked | 1.1.4 | ||
★ 20 io.github.patchloom/patchloom Agent-safe structured edits: JSON/YAML/TOML/md/AST, dry-run, batch/tx. Not a filesystem MCP. | 5/72 warnings | 59health of 100 | CargoRuns locally | Noneno keys asked | 0.37.6 | ||
★ 19 io.github.nhatvu148/video-transcriber-mcp Transcribe videos from 1000+ platforms or local files offline, and search across every transcript | 3/41 warning | 61health of 100 | CargoRuns locally | 1secret asked | 0.10.6 | ||
★ 18 io.github.Muvon/octofs Standalone MCP filesystem tools server — view, edit, shell, workdir. | 6/71 warning | 67health of 100 | npmRuns locally | Noneno keys asked | 0.21.0 | ||
★ 8 io.github.nihmadev/fs-mcp-rs A fast, configurable filesystem server for the Model Context Protocol (MCP), written in Rust. | 6/71 warning | 43health of 100 | npmRuns locally | Noneno keys asked | 1.2.4 | ||
★ 8 io.github.bezata/kobsidian-mcp Filesystem-first MCP for Obsidian — an LLM-maintained wiki inspired by Karpathy's LLM Wiki. | 7/7All passed | 57health of 100 | npmRuns locally | 1secret asked | 0.2.1 | ||
★ 6 dev.memofs/mcp-server Persistent memory and virtual filesystem MCP server for AI agents. | 8/8All passed | 63health of 100 | npmLocal or hosted | 1secret asked | 1.3.0-beta.3 | ||
★ 5 io.github.ellmos-ai/ellmos-filecommander-mcp Filesystem MCP server: files, previews, search, processes, OCR, archives, safe delete, web fetch. | 7/7All passed | 65health of 100 | npmRuns locally | Noneno keys asked | 1.11.4 | ||
★ 5 io.github.lukisch/bach-filecommander-mcp 43 tools for filesystem, process management, sessions, search, OCR, ZIP, and PDF export. | 7/7All passed | 63health of 100 | npmRuns locally | Noneno keys asked | 1.7.0 | ||
★ 4 ai.magnemo/magnemo Governed Memory for AI Agents, in plain local files. No network calls of its own. | 7/7All passed | 64health of 100 | PyPIRuns locally | Noneno keys asked | 0.6.9 | ||
★ 3 io.github.nogoo9/mcp-server-cloud-fs Cloud replacement for mcp-server-filesystem — 20 tools for S3, Azure Blob, and GCS | 7/81 warning | 48health of 100 | npmRuns locally | 3secrets asked | 0.7.0 | ||
★ 3 io.github.marin1321/mcp-devtools MCP server giving AI agents safe access to filesystem, databases, processes, and APIs. | 6/71 warning | 42health of 100 | npmRuns locally | Noneno keys asked | 1.0.1 | ||
★ 2 io.github.astrogilda/waitbus Workstation-local event bus: agents wait on or emit CI/pytest/Docker/filesystem events, no polling. | 7/7All passed | 56health of 100 | PyPIRuns locally | Noneno keys asked | 0.2.0 | ||
★ 1 io.github.writeitai/mountable Manage persistent AI-agent filesystems. Paid hosted service; Apache-2.0 client. | 4/4All passed | 55health of 100 | npmRuns locally | 1secret asked | 0.8.0 | ||
 ★ 1 io.github.HrRodan/agent-workspace-mcp A sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution. | 4/4All passed | 45health of 100 | DockerRuns locally | Noneno keys asked | 1.4.129 | ||
★ 1 io.github.atabekdemurtaza/papyrio-mcp Compress, convert, merge, split and OCR PDFs from an assistant, using local files. | 7/7All passed | 52health of 100 | npmRuns locally | 1secret asked | 0.1.4 | ||
★ 1 io.github.tothienbao6a0/upnext One audio queue across Spotify, the browser, local files and whatever is already playing. | 7/7All passed | 60health of 100 | npmRuns locally | Noneno keys asked | 0.3.1 | ||
★ 1 io.github.ariaxhan/agentmailkit Run scheduled LLM-written email digests from local files and feeds. Local-first MCP server. | 7/7All passed | 52health of 100 | PyPIRuns locally | Noneno keys asked | 0.2.2 | ||
★ 1 io.github.zoster81/mcp-file-tools Secure encoding-aware filesystem tools with atomic writes, legacy encodings, and typed errors | 3/41 warning | 51health of 100 | MCPBRuns locally | Noneno keys asked | 2.0.0 | ||
★ 1 io.github.Abhishekkumar2021/files Sandboxed local filesystem: read, search, edit, copy, archive, and safely manage files. | 6/71 warning | 39health of 100 | npmRuns locally | Noneno keys asked | 0.2.0 | ||
★ 1 io.github.brunosrz/vectora AI assistant with RAG, web search, filesystem and memory. MCP sub-agent for Claude Code. | 6/82 warnings | 54health of 100 | PyPIRuns locally | 6secrets asked | 0.1.0rc3 | ||
io.github.MartinGryner/diff-anything Compare local files, folders and API schemas through the installed Diff Anything CLI. | 7/7All passed | 53health of 100 | npmRuns locally | Noneno keys asked | 0.1.0 | ||
io.github.speechweave/mcp Transcribe local files and URLs with SpeechWeave's OpenAI-compatible Speech-to-Text API. | 7/7All passed | 50health of 100 | npmRuns locally | 1secret asked | 1.10.0 | ||
tools.audiolab/audiolab Loudness, true-peak and voice-quality analysis of URLs and local files via the hosted AudioLab API. | 7/7All passed | 57health of 100 | npmRuns locally | 1secret asked | 0.4.5 | ||
io.github.peter4leadson/local-workspace-mcp Bounded, read-oriented filesystem, git and named-task tools over authorized workspace roots. | 6/71 warning | 56health of 100 | npmRuns locally | Noneno keys asked | 0.2.2 | ||
io.github.damejeras/agentgrasp Yes/no questions about local files, and relevant-file search, with TypeSafe Jev | 3/41 warning | 39health of 100 | CargoRuns locally | Noneno keys asked | 0.1.0 | ||
io.github.0Mattias/bettermemory Memory for coding agents, checked against the filesystem and git before it is believed. | 7/7All passed | 64health of 100 | PyPIRuns locally | Noneno keys asked | 8.0.0 | ||
io.github.tylern91/obsidian-mcp-server Filesystem-based MCP server for Obsidian vaults — read, search, and edit notes, no app required. | 4/4All passed | 52health of 100 | MCPBRuns locally | Noneno keys asked | 0.3.0 |
Showing 1 to 39 of 39. These are the most recently updated; search or pick a category for the rest.
file system access MCP servers: what to know before you pick one
Which file system access MCP server should I use?
On GitHub stars, mcp-server-filesystem (★ 39k), remote-filesystem (★ 81) and Filesystem MCP (★ 26) lead the 39 we list. remote-filesystem is named for file system access and passed every check we run.
Is it safe to give an AI a file system access MCP server?
24 of the 39 passed every registry check. Reading the package code or tool descriptions of 32 of them turned up 8 with something to look at, from install scripts to obfuscated code. A clean result means none of our patterns matched, not that a server is safe.
Hosted or local: how do file system access MCP servers run?
1 can run hosted, so you only paste a URL into Claude, Cursor or VS Code. The 39 that run locally ship as 24 npm, 8 PyPI, 3 Cargo, 2 MCPB bundle, 1 NuGet and 1 Docker packages.
Are file system access MCP servers kept up to date?
17 of the 39 were updated in the 30 days before 31 Oct 2026. The latest was Octofs, on 28 October.
Is there an official file system access MCP server?
Not in the official MCP Registry as of 31 Oct 2026. All 39 file system access servers are community builds from 39 different publishers, so check who is behind one before you hand it a file system access key.
More topics: every “MCP server for…” page. Prefer a skill? Claude skills for this (70).