# Filesystem MCP servers

MCP servers that let an agent list, read, write and search files on your machine.

## Before you choose

Filesystem servers are local packages (L0): they run on your computer and reach only the directories you allow when you start them.

Allow the project directory rather than your home directory, and prefer servers that refuse paths outside the allowed roots.

## Servers (20)

What search for "filesystem" returns, without listings scored poor, published under many names from one repository, or with nothing to connect to.

- [Filesystem MCP](https://protogrid.dev/servers/io.github.j0hanz/filesystem-mcp.md) `io.github.j0hanz/filesystem-mcp`: class L0, quality – (not scored), trust 94. Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.
- [FileSystem MCP Server](https://protogrid.dev/servers/io.github.Oncorporation/filesystem-server.md) `io.github.Oncorporation/filesystem-server`: class L0, quality – (not scored), trust 91. Secure filesystem access for AI agents with configurable directory and file type restrictions
- [Filesystem](https://protogrid.dev/servers/io.github.domdomegg/filesystem-mcp.md) `io.github.domdomegg/filesystem-mcp`: class L0, quality – (not scored), trust 78. Read, create, and edit files.
- [io.github.fieldcure/filesystem](https://protogrid.dev/servers/io.github.fieldcure/filesystem.md) `io.github.fieldcure/filesystem`: class L0, quality – (not scored), trust 81. Secure MCP server for sandboxed filesystem operations with document parsing support.
- [io.github.Digital-Defiance/mcp-filesystem](https://protogrid.dev/servers/io.github.Digital-Defiance/mcp-filesystem.md) `io.github.Digital-Defiance/mcp-filesystem`: class L0, quality – (not scored), trust 76. Advanced filesystem operations with strict security boundaries for AI agents
- [com.politicalcomms/docs](https://protogrid.dev/servers/com.politicalcomms/docs.md) `com.politicalcomms/docs`: class R0, quality 92 (strong), trust 80. Political Comms documentation MCP server: search docs, query the docs filesystem. No auth.
- [DarkFunnels documentation](https://protogrid.dev/servers/ai.darkfunnels/docs.md) `ai.darkfunnels/docs`: class R0, quality 92 (strong), trust 93. Search and read the DarkFunnels docs: WhatsApp AI sales agents connected by QR, no Meta Cloud API.
- [io.github.mzizi-dev/mzizi-mcp](https://protogrid.dev/servers/io.github.mzizi-dev/mzizi-mcp.md) `io.github.mzizi-dev/mzizi-mcp`: class R0, quality 69 (needs work), trust 97. Mzizi design system MCP: components, tokens, skills and docs. Free; sign-in only for Fundi.
- [Cerebrium Docs](https://protogrid.dev/servers/ai.cerebrium/docs.md) `ai.cerebrium/docs`: class R0, quality 92 (strong), trust 93. Search the Cerebrium docs: deployment, cerebrium.toml, hardware, endpoints. Also sends feedback.
- [TheRundown Documentation MCP](https://protogrid.dev/servers/io.github.TheRundown/documentation.md) `io.github.TheRundown/documentation`: class R0, quality 92 (strong), trust 94. Official TheRundown API documentation search. No live data or authenticated Product API calls.
- [Metabind Docs](https://protogrid.dev/servers/ai.metabind/docs.md) `ai.metabind/docs`: class R0, quality 92 (strong), trust 83. Search and read the Metabind documentation: MCP Apps, BindJS, the SDKs, the CLI, and the APIs.
- [SiteGPT Docs](https://protogrid.dev/servers/io.github.sitegpt/sitegpt-docs.md) `io.github.sitegpt/sitegpt-docs`: class R0, quality 92 (strong), trust 94. Search the SiteGPT documentation: setup, features, API reference, troubleshooting.
- [Mintlify Docs](https://protogrid.dev/servers/com.mintlify/searchmcp.md) `com.mintlify/searchmcp`: class R0, quality 90 (new), trust 83. Search Mintlify's own documentation: setup, the mint CLI, docs.json, components, and pricing.
- [com.ntop/docs](https://protogrid.dev/servers/com.ntop/docs.md) `com.ntop/docs`: class R0, quality 92 (good), trust 73. Search and query nTop's knowledge base and engineering guides from AI applications.
- [ellmos FileCommander](https://protogrid.dev/servers/io.github.ellmos-ai/ellmos-filecommander-mcp.md) `io.github.ellmos-ai/ellmos-filecommander-mcp`: class L0, quality – (not scored), trust 91. Filesystem MCP server: files, processes, sessions, async search, OCR, archives, safe delete.
- [Virtual Filesystem](https://protogrid.dev/servers/io.github.lu-zhengda/virtual-fs.md) `io.github.lu-zhengda/virtual-fs`: class L0, quality – (not scored), trust 80. PostgreSQL-backed virtual filesystem for agents: session isolation, shared stores, POSIX ops, RLS.
- [Linux Filesystem](https://protogrid.dev/servers/io.github.rghsoftware/linux-filesystem.md) `io.github.rghsoftware/linux-filesystem`: class L0, quality – (not scored), trust 49. Enhanced Linux filesystem access with symlinks, permissions, and chmod support
- [io.github.peter4leadson/local-workspace-mcp](https://protogrid.dev/servers/io.github.peter4leadson/local-workspace-mcp.md) `io.github.peter4leadson/local-workspace-mcp`: class L0, quality – (not scored), trust 91. Bounded, read-oriented filesystem, git and named-task tools over authorized workspace roots.
- [MCP File Tools](https://protogrid.dev/servers/io.github.zoster81/mcp-file-tools.md) `io.github.zoster81/mcp-file-tools`: class L0, quality – (not scored), trust 86. Secure encoding-aware filesystem tools with atomic writes, legacy encodings, and typed errors
- [PkgSeek Linux Intelligence](https://protogrid.dev/servers/io.github.yeagoo/pkgseek.md) `io.github.yeagoo/pkgseek`: class R0, quality 91 (strong), trust 94. Linux package, file, command, vulnerability, lifecycle, migration, and repository intelligence.

All use cases: https://protogrid.dev/mcp.md