MCP Reference Filesystem

Reference server for controlled filesystem read/write access within an approved root.

highautomated scan

Danger score

6.7 / 10

Transparency

high

Last scanned

2026-06-28 15:28:19

Engine

mcpaudit 2.1.0

Source

npm: @modelcontextprotocol/server-filesystem

Homepage

https://github.com/modelcontextprotocol/servers/tree/main/src/filesystem

Automated danger grade: this page reports detected or inferred risk from a scan. It is not an endorsement, certification, or claim that the server is malicious.

Add this badge to your README

Copy the Markdown below only if you want to link readers to the latest danger grade and scan caveats:

[![MCP Trust](https://img.shields.io/endpoint?url=https://mcp-trust.vercel.app/servers/mcp-reference-filesystem/badge.json)](https://mcp-trust.vercel.app/ui/servers/mcp-reference-filesystem)

Findings

Severity	Rule	Title	Category
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
medium	`MCP001`	File read capability	file_read
high	`MCP002`	File write capability	file_write
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
medium	`MCP001`	File read capability	file_read
high	`MCP002`	File write capability	file_write
low	`MCP004`	Shell execution capability	shell_execution
low	`MCP003`	Network access capability	network
high	`MCP001`	File read capability	file_read
high	`MCP002`	File write capability	file_write
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
medium	`MCP006`	Data exfiltration capability	exfiltration
low	`MCP003`	Network access capability	network
high	`MCP001`	File read capability	file_read
high	`MCP002`	File write capability	file_write
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network
low	`MCP001`	File read capability	file_read
low	`MCP005`	Destructive operation capability	destructive
low	`MCP003`	Network access capability	network