← All skills
Tencent SkillHub Β· Developer Tools

Filesystem MCP Server

Secure, sandboxed filesystem access enabling agents to list, read, write, create, move, delete, search files and directories within allowed paths.

skill openclawclawhub Free
0 Downloads
0 Stars
0 Installs
0 Score
High Signal

Secure, sandboxed filesystem access enabling agents to list, read, write, create, move, delete, search files and directories within allowed paths.

⬇ 0 downloads β˜… 0 stars Unverified but indexed

Install for OpenClaw

Quick setup
  1. Download the package from Yavira.
  2. Extract the archive and review SKILL.md first.
  3. Import or place the package into your OpenClaw setup.

Requirements

Target platform
OpenClaw
Install method
Manual import
Extraction
Extract archive
Prerequisites
OpenClaw
Primary doc
SKILL.md

Package facts

Download mode
Yavira redirect
Package format
ZIP package
Source platform
Tencent SkillHub
What's included
SKILL.md

Validation

  • Use the Yavira download entry.
  • Review SKILL.md after the package is downloaded.
  • Confirm the extracted package contains the expected setup assets.

Install with your agent

Agent handoff

Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.

  1. Download the package from Yavira.
  2. Extract it into a folder your agent can access.
  3. Paste one of the prompts below and point your agent at the extracted folder.
New install

I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.

Upgrade existing

I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.

Trust & source

Release facts

Source
Tencent SkillHub
Verification
Indexed source record
Version
1.0.0

Documentation

ClawHub primary doc Primary doc: SKILL.md 33 sections Open source page

Filesystem MCP Server

Secure File Operations for AI Agents Official MCP reference implementation providing safe, sandboxed filesystem access with fine-grained permission controls.

πŸ”’ Security-First Design

Sandboxed Access: Agents can only access explicitly allowed directories Permission Controls: Read-only, write, or full access per directory Path Validation: Prevents directory traversal and unauthorized access Audit Trail: All operations logged for security review

πŸ€– Essential for Agent Workflows

Most agent tasks involve files: Reading documentation Writing code files Analyzing logs Generating reports Managing project files Organizing content

πŸ“¦ Zero External Dependencies

Pure implementation using Node.js built-in modules. No external API dependencies or rate limits.

Installation

# Official reference implementation npm install -g @modelcontextprotocol/server-filesystem # Or build from source git clone https://github.com/modelcontextprotocol/servers cd servers/src/filesystem npm install npm run build

Configuration

Add to your MCP client config: { "mcpServers": { "filesystem": { "command": "npx", "args": [ "-y", "@modelcontextprotocol/server-filesystem", "/Users/yourname/Documents", "/Users/yourname/Projects" ] } } } Arguments = allowed directories (one or more paths)

Permission Modes

Read-Only Access: "args": ["--read-only", "/path/to/docs"] Full Access (default): "args": ["/path/to/workspace"]

Example Configurations

Development Workspace { "mcpServers": { "filesystem": { "command": "npx", "args": [ "-y", "@modelcontextprotocol/server-filesystem", "/Users/dev/projects", "/Users/dev/workspace" ] } } } Documentation Access (Read-Only) { "mcpServers": { "filesystem": { "command": "npx", "args": [ "-y", "@modelcontextprotocol/server-filesystem", "--read-only", "/Users/docs/knowledge-base" ] } } }

Directory Operations

1. List Directory (list_directory) Agent: "What files are in my Projects folder?" Agent: "Show contents of /workspace/src" Returns: File names File types (file, directory, symlink) File sizes Last modified timestamps 2. Create Directory (create_directory) Agent: "Create a new folder called 'components'" Agent: "Make directory /workspace/tests" 3. Move/Rename (move_file) Agent: "Rename old-name.txt to new-name.txt" Agent: "Move report.pdf to /Documents/Reports/"

File Operations

4. Read File (read_file) Agent: "Read the contents of config.json" Agent: "Show me the README.md file" Supports: Text files (UTF-8) JSON, YAML, XML Markdown, code files Large files (streaming) 5. Write File (write_file) Agent: "Create a file called notes.txt with meeting notes" Agent: "Write the generated code to src/index.ts" 6. Edit File (edit_file) Agent: "Replace 'version: 1.0' with 'version: 2.0' in package.json" Agent: "Add a new function to utils.js" 7. Get File Info (get_file_info) Agent: "When was report.pdf last modified?" Agent: "What's the size of data.csv?" Returns: File size (bytes) Creation time Last modified time Permissions File type

Advanced Operations

8. Search Files (search_files) Agent: "Find all Python files in the project" Agent: "Search for files containing 'API_KEY'" Search by: File name pattern (glob) File content (regex) File type Date modified 9. Delete File (delete_file) Agent: "Delete the temporary log files" Agent: "Remove old-backup.zip" Safety: Requires confirmation for large files Cannot delete files outside allowed directories Logged for audit

Code Generation

Human: "Create a React component for a login form" Agent: 1. create_directory("/workspace/components") 2. write_file("/workspace/components/LoginForm.tsx", generated_code) 3. write_file("/workspace/components/LoginForm.test.tsx", test_code) 4. "Created LoginForm component at components/LoginForm.tsx"

Log Analysis

Human: "Analyze error logs and summarize issues" Agent: 1. list_directory("/var/log/app") 2. read_file("/var/log/app/error.log") 3. search_files(pattern="ERROR", path="/var/log/app") 4. generate_summary() 5. write_file("/reports/error-summary.md", summary)

Project Organization

Human: "Organize my documents by type" Agent: 1. list_directory("/Documents") 2. For each file: - get_file_info(file) - Determine file type - create_directory("/Documents/[type]") - move_file(file, destination_folder)

Documentation Generation

Human: "Generate API documentation from code comments" Agent: 1. search_files(pattern="*.ts", path="/src") 2. For each file: - read_file(file) - extract_doc_comments() 3. Generate markdown docs 4. write_file("/docs/API.md", generated_docs)

Sandbox Enforcement

What Agents CAN Do: βœ… Access explicitly allowed directories βœ… Create/read/write files within allowed paths βœ… List directory contents βœ… Search within allowed paths What Agents CANNOT Do: ❌ Access parent directories (../) ❌ Access system files (/etc/, /sys/) ❌ Follow symlinks outside allowed paths ❌ Execute binaries or scripts ❌ Modify file permissions

Path Validation

Allowed: /Users/dev/projects Agent tries: /Users/dev/projects/src/index.ts β†’ βœ… Allowed Agent tries: /Users/dev/projects/../secret β†’ ❌ Blocked Agent tries: /etc/passwd β†’ ❌ Blocked

Best Practices

Principle of Least Privilege Grant only necessary directories Use --read-only when write not needed Never Allow Root Access Don't add / or system directories Restrict to user workspace Audit Agent Actions Review MCP server logs regularly Monitor for unexpected file access patterns Separate Sensitive Data Keep credentials, keys in separate directories Don't include in allowed paths

πŸ“ Content Management

Agents generate blog posts, reports, documentation and save to organized folders.

πŸ€– Code Assistants

Read project files, generate code, create tests, update configurations.

πŸ“Š Data Analysis

Read CSV/JSON data files, analyze, generate reports and visualizations.

πŸ—‚οΈ File Organization

Scan directories, categorize files, move to appropriate folders, cleanup duplicates.

πŸ“š Knowledge Base

Index markdown files, search documentation, extract information, update wikis.

πŸ” Log Analysis

Parse log files, identify errors, generate summaries, create alerts.

Large Files

Streaming for files >10MB Incremental reads supported Memory-efficient processing

Directory Scanning

Recursive search optimized Glob pattern matching Ignore patterns (e.g., node_modules/)

Concurrent Operations

Safe for parallel file access Atomic write operations File locking where needed

"Permission denied" Error

Verify path is in allowed directories Check filesystem permissions Ensure MCP server has read/write access

"Path not found" Error

Confirm directory exists Check for typos in path Verify path format (absolute vs relative)

Read-Only Mode Issues

Can't write in --read-only mode Reconfigure server with write access if needed

vs Other File Access Methods

MethodSecurityAgent IntegrationSetupFilesystem MCPβœ… Sandboxedβœ… Auto-discoveredSimpleDirect FS Access❌ Full system❌ ManualNoneFile Upload/Downloadβœ… Manual control⚠️ LimitedComplexCloud Storage APIβœ… API-level⚠️ Requires SDKComplex

Resources

GitHub: https://github.com/modelcontextprotocol/servers/tree/main/src/filesystem MCP Docs: https://modelcontextprotocol.io/ Security Best Practices: https://modelcontextprotocol.io/docs/concepts/security

Advanced Configuration

{ "mcpServers": { "filesystem": { "command": "node", "args": [ "/path/to/filesystem-server/build/index.js", "/workspace", "/documents" ], "env": { "MAX_FILE_SIZE": "10485760", "ENABLE_LOGGING": "true", "LOG_PATH": "/var/log/mcp-filesystem.log" } } } } Safe, secure filesystem access for agents: From code generation to log analysis, Filesystem MCP is the foundation for agent file operations.

Category context

Code helpers, APIs, CLIs, browser automation, testing, and developer operations.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package
1 Docs
  • SKILL.md Primary doc