FreeRDC

io.github.danielarif26由 GitHub 帳號 danielarif26 發布v0.2.0更新於 Nov 2, 2026

Safe folder access for ChatGPT and Claude: read, write and search files, risky tools opt-in.

已驗證Streamable HTTP可網頁執行檔案與儲存開發者工具

概覽

AI 產生的概覽

FreeRDC 讓 ChatGPT 和 Claude 在你核准的資料夾內讀取、寫入、搜尋與編輯檔案,並拒絕存取其他位置。

可以做什麼
  • 在已核准的資料夾內讀取、寫入、搜尋與編輯檔案和文件
  • 拒絕根目錄以外的路徑,包括目錄穿越與符號連結逃逸,並封鎖受保護路徑
  • 僅在明確開啟本機權限後才執行 shell、圖形介面與系統工具
  • 將每次操作寫入雜湊鏈稽核日誌,並提供 STOP 檔案作為緊急停止開關
  • 透過短期配對碼將本機與託管連接器配對
適用情境
適合讓助理直接處理本機上某個專案或文件資料夾中的真實檔案,同時具備存取限制與稽核紀錄,而不是開放整個檔案系統。
執行需求
可使用 freerdc.sjaman.deno.net 的遠端端點並以 OAuth 登入,或在本機安裝。桌面擴充功能需要 macOS 與 Node.js 22+;從原始碼執行需要 Node.js 22+、npm 與 Git。必須至少指定一個允許的根資料夾,託管連接器還需下載代理並保持執行。
安裝前請注意
此伺服器可在已核准的根目錄內寫入、編輯與刪除檔案,應選擇範圍最小的資料夾,切勿加入憑證、快取或無關專案。shell、圖形介面與系統工具預設關閉,開啟後權限大幅擴大。託管代理是預先建置的執行檔,原始碼未包含在儲存庫中,安裝腳本跟隨可變的 main 分支。請勿將本機監聽埠暴露到公開網際網路。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 FreeRDC,將其新增到工作區。
  2. 連接 所需的 憑證。它們會被私密儲存,絕不會在公開頁面上展示。
  3. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.danielarif26%2Ffreerdc/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。 客戶端會在首次連接時完成 OAuth 登入。

{
  "mcpServers": {
    "freerdc": {
      "type": "http",
      "url": "https://freerdc.sjaman.deno.net/mcp"
    }
  }
}

README

FreeRDC

Give ChatGPT and Claude access to the folders you choose — and nothing else.

FreeRDC is an MCP server for file work with AI assistants. It reads, writes, searches and edits files and documents inside the folders you approve, and refuses everything outside them. Anything that can run commands, click the screen or shut the machine down is off unless you turn it on.

Demo video · Website · Privacy · Listed on the official MCP Registry as io.github.danielarif26/freerdc

Why FreeRDC

  • Containment first. Paths outside your approved folders, .. traversal and symlink escapes are rejected before any file is touched. Protected paths such as device keys are denied even inside a root.
  • Risky tools are opt-in. Shell, GUI and system tools are disabled by default. The desktop extension exposes 23 file and document tools out of the box and 84 only when you enable local power.
  • Every tool is described and annotated. In the desktop extension, each tool has a title, a description, input and output schemas, and read-only / destructive / open-world hints, so the assistant knows what it is about to do.
  • Local. The desktop extension runs on your Mac. Your files are not sent to FreeRDC servers.
  • Audited. Every operation is written to a hash-chained audit log, with a STOP file kill switch.

Get started

Claude Desktop (desktop extension)

  1. Download freerdc-0.1.0.mcpb from Releases.
  2. Open it with Claude Desktop and pick the folder(s) FreeRDC may use.
  3. Leave local power tools off unless you need shell or GUI access.

Requires macOS and Node.js 22+. Details and privacy policy: mcpb/README.md.

ChatGPT (self-hosted)

Run the server locally and reach it privately through OpenAI Secure MCP Tunnel. Do not expose the local listener to the public internet. See docs/OPENAI-INTEGRATION.md and docs/DEPLOYMENT.md.

ChatGPT hosted connector (early access)

The hosted connector is in review for the ChatGPT app directory. Until it is listed, add it in ChatGPT developer mode with the MCP URL https://freerdc.sjaman.deno.net/mcp.

  1. Connect FreeRDC in ChatGPT. The sign-in page shows a 10-character pairing code (letters A–Z and digits 2–9).

  2. Download freerdc-agent-hosted.mjs from Releases. Requires Node.js 22+.

  3. Pair this computer, choosing the folder ChatGPT may use:

    sh
    node freerdc-agent-hosted.mjs connect --server https://freerdc.sjaman.deno.net/mcp --code YOUR_CODE --device-id my-mac --root /absolute/allowed/folder
  4. Keep the agent running while you use FreeRDC:

    sh
    node freerdc-agent-hosted.mjs run --device-id my-mac

The pairing code expires after about 10 minutes. The agent is a prebuilt binary; its source is not included in this repository.

Run from source

Requires Node.js 22+, npm and Git.

sh
npm cinpm run buildnode packages/server/dist/src/cli.js --root /absolute/allowed/folder --port 8787

The server binds to 127.0.0.1 only, requires at least one explicit root, stores state under ~/.freerdc, and leaves process tools disabled. Create ~/.freerdc/STOP to activate the kill switch. Pick the narrowest folder that fits the task — never add credentials, caches or unrelated projects to a root.

Installer scripts

macOS or Linux:

sh
curl -fsSLo install.sh https://raw.githubusercontent.com/danielarif26/freerdc/main/install.shsh install.sh

Windows PowerShell:

powershell
Invoke-WebRequest https://raw.githubusercontent.com/danielarif26/freerdc/main/install.ps1 -OutFile install.ps1.\install.ps1

The installers follow the mutable main branch. For higher assurance, review a commit or tag and pin it with FREERDC_REF=<tag-or-commit>. Rerun with --uninstall (macOS/Linux) or -Uninstall (Windows) to remove an installer-managed copy.

Packages

PackagePurpose
@freerdc/protocolWire schemas, RPC contracts, errors, redaction, negotiation
@freerdc/guardPath containment, protected-path denylist, concurrency primitives
@freerdc/agentFilesystem, process policy, RPC dispatcher, authenticated connector
@freerdc/serverMCP tools, HTTP host, OAuth, audit log, runtime CLI
sh
npm run typecheck && npm run build && npm test

Security

  • Secrets belong in environment variables or file references — never in this repository, profiles, shell history or tunnel metadata.
  • Report vulnerabilities privately; see SECURITY.md.

License

Released under AGPL-3.0-or-later. See docs/EDITIONS.md for what the Community Edition includes.

來源:README.md,提交 794fc02

工具

0
該伺服器需要登入,因此 SourceWeft 無法在沒有帳號的情況下讀取其工具,也未收錄。已連接帳號所能看到的內容可能因帳號及其權限而異。

版本歷史

1
  1. v0.2.0最新Sep 21, 2026

評分

已滿足適用檢查項的 85%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分