rclone-mcp

MCP (Model Context Protocol) server for the Rclone RC API. Gives AI assistants the ability to manage cloud storage remotes, copy/sync files, list directories, and more — all through natural language.

Tools are auto-generated from the rclone-openapi spec using the rclone-sdk client. 98 endpoints, organized into selectable toolsets.

Prerequisites

A running rclone remote control daemon:

rclone rcd --rc-no-auth
# or with auth:
rclone rcd --rc-user=admin --rc-pass=secret

Installation

Cursor / Claude Desktop (stdio)

Add to your .cursor/mcp.json or claude_desktop_config.json:

{
  "mcpServers": {
    "rclone": {
      "command": "npx",
      "args": ["-y", "rclone-mcp"],
      "env": {
        "RCLONE_URL": "http://localhost:5572"
      }
    }
  }
}

With authentication

{
  "mcpServers": {
    "rclone": {
      "command": "npx",
      "args": ["-y", "rclone-mcp"],
      "env": {
        "RCLONE_URL": "http://localhost:5572",
        "RCLONE_USER": "admin",
        "RCLONE_PASS": "secret"
      }
    }
  }
}

Docker

docker build -t rclone-mcp .

docker run -i --rm \
  -e RCLONE_URL=http://host.docker.internal:5572 \
  rclone-mcp

Streamable HTTP transport

For remote hosting or web-based MCP clients:

npx rclone-mcp http --port 3000

Configuration

Environment Variables

| Variable | Description | Default | |---|---|---| | RCLONE_URL | rclone RC daemon URL | http://localhost:5572 | | RCLONE_USER | HTTP Basic Auth username | — | | RCLONE_PASS | HTTP Basic Auth password | — | | RCLONE_TOOLSETS | Comma-separated toolset list | default | | RCLONE_READ_ONLY | Set to 1 to disable write tools | — |

CLI Arguments

rclone-mcp [command]

Commands:
  rclone-mcp stdio  Run with stdio transport (default)
  rclone-mcp http   Run with Streamable HTTP transport

Options:
  --toolsets   Comma-separated list of toolsets
  --read-only  Only expose read-only tools
  --port       HTTP port (http command only, default: 3000)

Toolsets

Tools are grouped by API path prefix. Enable only what you need to keep the tool list focused.

| Toolset | Paths | Default | |---|---|---| | core | /core/*, /rc/* | Yes | | config | /config/* | Yes | | operations | /operations/* | Yes | | sync | /sync/* | Yes | | jobs | /job/* | No | | vfs | /vfs/* | No | | mount | /mount/* | No | | serve | /serve/* | No | | cache | /cache/* | No | | debug | /debug/* | No | | backend | /backend/* | No | | options | /options/* | No | | plugins | /pluginsctl/* | No | | fscache | /fscache/* | No |

Special values:

• default — the four default toolsets (core, config, operations, sync)
• all — every toolset

Examples

# Default toolsets (55 tools)
npx rclone-mcp

# Everything (98 tools)
RCLONE_TOOLSETS=all npx rclone-mcp

# Just file operations and config
npx rclone-mcp --toolsets operations,config

# Default + mount
npx rclone-mcp --toolsets default,mount

# Read-only mode (no copy, delete, sync, etc.)
npx rclone-mcp --read-only

Read-Only Mode

When --read-only or RCLONE_READ_ONLY=1 is set, only non-mutating tools are registered. This excludes operations like file copy/move/delete, sync, config creation, mount/unmount, etc. Useful for giving AI assistants safe, read-only access.

License

MIT