filesystem-vuln-mcp-server-outdated-packages
v1.0.3
Published
MCP server for filesystem operations with intentionally outdated dependencies
Maintainers
Readme
Filesystem MCP Server
A Model Context Protocol (MCP) server that provides read-only filesystem operations.
⚠️ Warning
This package intentionally contains deprecated and vulnerable dependencies for testing and educational purposes. DO NOT use this in production.
Notable issues:
- request (2.88.2) - Deprecated package, no longer maintained
- moment (2.29.1) - Now in maintenance mode, recommend using date-fns or Day.js
- Multiple packages with known security vulnerabilities that will show up in
npm audit
Features
The server provides 5 tools for filesystem operations:
- get_folder_size - Calculate the total size of a folder and all its contents
- list_directory - List all files and directories in a given path
- get_system_info - Get system information (OS, CPU, memory, etc.)
- check_path_exists - Check if a file or directory exists
- get_file_stats - Get detailed statistics about a file or directory
Installation
npm installRunning the Server
npm startOr directly:
node index.jsSecurity Audit
To see the vulnerable dependencies:
npm auditUsing with Claude Desktop
Add this to your Claude Desktop configuration:
{
"mcpServers": {
"filesystem": {
"command": "node",
"args": ["/path/to/filesystem-mcp-server/index.js"]
}
}
}Tool Examples
get_folder_size
{
"path": "/Users/username/Documents"
}list_directory
{
"path": "/Users/username/Desktop"
}get_system_info
No arguments required.
check_path_exists
{
"path": "/Users/username/somefile.txt"
}get_file_stats
{
"path": "/Users/username/document.pdf"
}License
MIT
