Skip to content

File System MCP Server

Filestash

Remote Storage Access: SFTP, S3, FTP, SMB, NFS, WebDAV, GIT, FTPS, gcloud, azure blob, sharepoint, etc.

Scan flagged something by mickael-kerjean13,879AGPL-3.0GoIntermediatestdio
View on GitHub Install Guide

Install

No auto-install command available for this server.

Check the GitHub repository for setup instructions

Safety Report

100% Scan flagged something
Scanned 5 months ago
5 passed
Security
Authentication
details

Authentication delegated to Filestash's existing session/credential system; MCP tools operate within authenticated Filestash sessions

Pass
CORS Policy
details

SSE transport exposed at /sse endpoint; CORS configuration inherits from Filestash server settings

Info
Rate Limiting
details

No MCP-specific rate limiting documented; inherits from Filestash server configuration

Info
Known CVEs
details

No MCP-specific CVEs; Filestash main project has had past vulnerabilities — review release notes

Info
Code Quality
Dependency Audit
details

Go-based plugin with minimal external dependencies; part of the larger Filestash codebase

Info
Dangerous Patterns
details

No dangerous code patterns detected

Pass
License
details

AGPL-3.0 (Filestash core)

Pass
Code Source
details

Open source on GitHub (mickael-kerjean/filestash); MCP plugin in server/plugin/plg_handler_mcp/

Pass
Community
Maintenance Status
details

Actively maintained by primary author; MCP plugin added April 2025

Pass

Learn about our security methodology →

Compatibility

Claude CodeSSE transport available at configurable endpoint; Claude Code supports SSE-based MCP
Partial
CursorSSE transport should work with Cursor's MCP configuration
Partial
VS CodeSSE endpoint compatible with VS Code MCP extension configurations
Partial
WindsurfSSE transport should work; not explicitly documented
Partial
Claude DesktopSSE transport supported; requires running Filestash instance
Partial

Tools Provided (9)

ls

Lists files and subdirectories in a specified remote directory. Based on the Unix ls command, works across FTP, SFTP, S3, WebDAV, SMB, GIT, NFS, and other configured backends.

cat

Reads and returns the contents of a file at a specific path on the remote storage backend.

pwd

Returns the current working directory path in the remote storage session.

cd

Changes the current working directory so subsequent file operations run relative to a different path on the remote storage.

mv

Moves or renames a file or directory from one path to another on the remote storage backend.

mkdir

Creates a new directory at the specified path on the remote storage backend.

touch

Creates an empty file at the specified path on the remote storage backend.

rm

Removes a file or directory at the specified path on the remote storage backend. Use with caution.

save

Writes or overwrites the contents of a file at a specified path on the remote storage backend.

Frequently Asked Questions

What is Filestash?

Remote Storage Access: SFTP, S3, FTP, SMB, NFS, WebDAV, GIT, FTPS, gcloud, azure blob, sharepoint, etc.

What tools does Filestash provide?

Filestash provides 9 tools including ls, cat, pwd, cd. Each tool can be called by AI agents to perform specific operations.

Is Filestash safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone Filestash and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. At least one matched — the specific finding is in the scan report on this page. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to Filestash?

Similar MCP servers include Markitdown, MCP Filesystem Server, MCP Everything Search. Each serves a similar purpose but may differ in features, language, and compatibility.

Similar MCP Servers

Markitdown

Scan found nothing
by microsoft Official

MCP tool access to MarkItDown -- a library that converts many file formats (local or remote) to Markdown for LLM consumption.

file system Python stdio
claude mcp add markitdown -- uvx markitdown-mcp
90.8k 1 tools
View

MCP Filesystem Server

Scan flagged something
by mark3labs

Golang implementation for local file system access.

file system Go stdio
617 5 tools
View

MCP Everything Search

Scan flagged something
by mamertofabian

Fast Windows file search using Everything SDK

file system Python stdio
314
View
Was this helpful?

Free AI writing tools

Check a draft for AI tells, then fix what the check finds.

Stay Updated on MCP Servers

New servers, safety alerts, and install guides — weekly.