Summary
A filesystem with a fence, and the fence has a default worth changing.
Six ordinary operations, all confined to one directory — which is the reason to pick this over a general file server. Set the base directory before the first write: without it the root is /tmp/mcp_file_system, and your files land somewhere the machine may clear.
What it is
A small Python server exposing six file operations. Every path is resolved inside a base directory, and attempts to climb out of it with .. are refused.
What you get
- read_file and write_file
- list_directory for a folder's contents
- delete_file
- move_file for a move or a rename, copy_file for a copy
- Paths resolved relative to the base directory; access outside it is blocked
- Errors returned as messages that say what went wrong
Requirements
Python with uv, run from a clone. An environment variable sets the sandbox root — if it is not set, everything happens under /tmp/mcp_file_system.