Mcp Filesystem

A hardened local filesystem MCP server that gives an AI assistant jailed, read-only-by-default file access with traversal and symlink protections.

What you can do

Provides an AI assistant with filesystem access confined to a single jailed root directory, so it can read and work with files inside that root without reaching outside it. Access is read-only by default, and path handling is designed to resist directory traversal and symlink escapes. The manifest lists no individual tools, so the exact operations are not documented here.

When to use it

Use it when you want an assistant to read or work with files in a specific local directory while keeping it contained to that directory and avoiding accidental writes by default.

Requirements

Runs as a local process on the user's machine via the npm package @infoinlet/mcp-filesystem over stdio. Desktop only; not executable in a web context. No authentication, environment variables or headers are declared.