files v0.1.0
·
5 commits
to main
since this release
@abhishekmcp/files v0.1.0 — sandboxed filesystem MCP server
A robust, security-first filesystem server for any MCP client. Pure-JS, no native deps, no API keys.
Highlights
- Read & navigate: read_file (head/tail/line-window), read_media, stat, list_dir, tree, changed_since
- Search: find_files (glob) + search_content (regex/substring grep, skips binaries)
- Token-efficient edits: edit_file (unique find/replace) + edit_lines (hash-guarded line ranges), with dryRun unified-diff previews
- Organize: move, copy, create_dir, and soft-delete to trash (delete → list_trash → restore → empty_trash)
- Archive & integrity: zip/unzip (zip-slip protected), file_hash, find_duplicates
Security
Everything is sandboxed to FS_ROOTS: lexical + realpath containment, symlink-escape rejection on reads and writes, atomic writes that never act through symlinks, zip-slip protection, size/depth caps, and a read-only mode (FS_READONLY). The server refuses to start without FS_ROOTS.
Install
claude mcp add files --env FS_ROOTS=$HOME/projects -- npx -y @abhishekmcp/files, the Claude Code plugin (/plugin install files), or via the MCP registry (io.github.Abhishekkumar2021/files).
Published with provenance via OIDC.