server-filesystem
One of the official MCP reference implementations, a filesystem access server that allows AI models to securely read and write local files through the MCP protocol, with built-in security mechanisms such as path restrictions.
Timeline (last 90 days)
The TypeScript servers themselves do not carry CA certificates and rely entirely on the Node.js runtime they run on for certificate validation; among them, only server-everything makes outbound HTTPS requests (via the gzip-file-as-resource tool), while server-filesystem, server-memory, and server-sequential-thinking establish no network connections at all.
server-filesystem 2.1.0 fixed case variants of allowed directories being accepted after filesystem confirmation, tail no longer counting the trailing newline as a line, head normalizing CRLF lines to LF, get_file_info added hard link count reporting, bounds added to realpath and readdir waits and recursive traversal, a failed realpath retried once, moving files across filesystems going through the EXDEV copy path, and identity comparison for overwrites switched to BigInt stats, among other changes.
server-filesystem fixed three issues related to roots updates: revoking access permissions when there is no valid root directory, accepting only the latest roots refresh response, and suspending tool calls during refresh.
v1.0.0 includes the TypeScript/npm-side servers server-everything, server-filesystem, server-memory, and server-sequential-thinking, with version number 1.0.0.
server-filesystem fixed a path resolution issue that existed only in Unicode form, and added support for allowed directories under UNC share roots.
All Facts (5)
The TypeScript servers themselves do not carry CA certificates and rely entirely on the Node.js runtime they run on for certificate validation; among them, only server-everything makes outbound HTTPS requests (via the gzip-file-as-resource tool), while server-filesystem, server-memory, and server-sequential-thinking establish no network connections at all.
50%Unverifiedserver-filesystem fixed three issues related to roots updates: revoking access permissions when there is no valid root directory, accepting only the latest roots refresh response, and suspending tool calls during refresh.
50%Unverifiedv1.0.0 includes the TypeScript/npm-side servers server-everything, server-filesystem, server-memory, and server-sequential-thinking, with version number 1.0.0.
50%Unverifiedserver-filesystem fixed a path resolution issue that existed only in Unicode form, and added support for allowed directories under UNC share roots.
50%Unverifiedserver-filesystem 2.1.0 fixed case variants of allowed directories being accepted after filesystem confirmation, tail no longer counting the trailing newline as a line, head normalizing CRLF lines to LF, get_file_info added hard link count reporting, bounds added to realpath and readdir waits and recursive traversal, a failed realpath retried once, moving files across filesystems going through the EXDEV copy path, and identity comparison for overwrites switched to BigInt stats, among other changes.
50%