Reference server from the Model Context Protocol project.

Read, write, list, and search files within explicitly allowed directories.

Runs locally as a Node process next to your files.

Whenever an agent must touch the local filesystem safely.

Grants file access without handing an agent your whole machine.

Node.js and an allow-list of directories.

Reference server in the official modelcontextprotocol org. No credentials and no outbound calls; reads and writes files inside an explicit directory allow-list, so risk is set by what you list.