The registry

A Go binary implementation of the MCP filesystem server by mark3labs. Exposes 14 tools matching the official TypeScript spec. Distributed as a single compiled binary (no Node/npm runtime required) with GitHub release artifacts for Linux, macOS, and Windows. Enforces a directory allowlist passed as positional CLI arguments.

The official Anthropic-maintained filesystem MCP server. Exposes 14 tools for read, write, edit, search, and directory operations. Enforces a configurable allowlist of directories via command-line arguments or the MCP Roots protocol.

A Rust binary MCP filesystem server. Read-only by design (write operations are blocked unless an explicit write flag is set). Exposes 24 tools for file reading, searching, checksum computation, and directory inspection. Distributed as a pre-compiled binary; no runtime dependency required.

The filesystem MCP server from ByteDance's agent-infra / UI-TARS Agent ecosystem. Exposes 11 tools for standard read/write/search/directory operations. Supports stdio, SSE, and HTTP transports. Enforces a configurable directory allowlist via the --allowed-directories CLI flag (repeatable for multiple directories).

The MCP filesystem server distributed by Snaggle AI as part of their commercial product offering. 14-tool implementation with directory allowlist enforcement. Distributed via the mcp-server-filesystem npm package.

A read-only MCP filesystem server from @adpharm. Fork of the mark3labs codebase with all write operations removed. Exposes read, list, search, and directory-inspection tools only. Enforces a directory allowlist.

Official Anthropic filesystem server fork with opt-in gitignore-style filtering for directory listing, traversal, and search. Adds --respect-gitignore and --ignore-file startup flags. Security model, tool contracts, and all 14 tools inherited unchanged from upstream. Maintains an explicit upstream sync baseline for future replay.

Minimal-surface filesystem MCP server hardened for agent use. Read-only by default (FS_WRITE_ALLOWED=true to enable writes). Requires FS_ROOT — refuses to start without it. Two-layer path protection: lexical containment check plus realpathSync to defeat symlink escape.

Filesystem MCP server with directory allowlist enforcement via command-line arguments. 15 tools including read, write, edit, copy, delete, directory operations, and file info. Code structure mirrors the Anthropic reference implementation pattern.

TypeScript filesystem MCP server with directory restriction via FS_BASE_DIRECTORY environment variable. 10 tools including read, write, update, list, delete, and copy/move operations. Supports STDIO and HTTP transports.

A specialized filesystem extension server from Digital-Defiance's AI Capabilities Suite. Provides 12 tools not found in standard filesystem servers: batch copy/move/delete operations, directory watching, content search and indexing, directory sync, checksums, symlink creation, and disk usage analysis. Intended as a complement to, not a replacement for, a standard filesystem server — it has no read_file or write_file tools.

Filesystem MCP server with unrestricted filesystem access and pwd-based relative paths. 13 tools for read, write, directory, and search operations. No directory allowlist: the server grants access to the entire host filesystem.

Enhanced filesystem MCP server forked from the official Anthropic package with fixed glob pattern search, head+tail file reading, and shell command execution via run_command. Adds delete_file and runs on a directory allowlist.