@infoinlet/mcp-filesystem
v0.1.1
Published
Hardened filesystem access for AI agents — jailed to an allowed root, read-only by default, path-traversal + symlink-escape protected. MCP server.
Readme
@infoinlet/mcp-filesystem
Hardened filesystem access for AI agents — read_file, list_dir, stat, search_files, and write_file (opt-in). Everything is jailed to FS_ROOT: path-traversal (../) and symlink-escape are blocked, and it's read-only by default (FS_WRITE_ALLOWED=true to enable writes). That hardening is the difference from generic filesystem servers.
{ "mcpServers": { "fs": { "command": "npx", "args": ["-y", "@infoinlet/mcp-filesystem"], "env": { "FS_ROOT": "/srv/project" } } } }