Filesystem MCP Server — security audit

Risk flags

• Can modify files

  Restrict the working directory to a sandboxed path. Avoid pointing it at your home directory or repo with secrets.

• Community-authored

  Maintained by MCP-Mirror. Confirm the repo and signing before installing.

Capability surface

• Filesystem read

  Medium risk

  Reads files from the local machine — scoped or unscoped depending on configuration.

  Evidence: filesystem

• Filesystem write

  High risk

  Can create, modify, or delete files on disk. High-impact if scope is broad.

  Evidence: filesystem

Trust signals

Total trust score is the sum of these contributions. Each signal carries a fixed weight.

• Verified by Loadout

  +0 / 20

  Not in our manually-verified set yet.

• Official author

  +0 / 15

  Maintained by community contributors.

• Community traction

  +0 / 20

  No star data available.

• Public source

  +15 / 15

  Source is publicly auditable.

• Stability

  +0 / 15

  Stability not yet assessed.

• Capability surface

  +10 / 15

  1 high-risk capability detected.