FieldCure.Mcp.Filesystem 0.5.0

There is a newer version of this package available.
See the version list below for details.
dotnet tool install --global FieldCure.Mcp.Filesystem --version 0.5.0
                    
This package contains a .NET tool you can call from the shell/command line.
dotnet new tool-manifest
                    
if you are setting up this repo
dotnet tool install --local FieldCure.Mcp.Filesystem --version 0.5.0
                    
This package contains a .NET tool you can call from the shell/command line.
#tool dotnet:?package=FieldCure.Mcp.Filesystem&version=0.5.0
                    
nuke :add-package FieldCure.Mcp.Filesystem --version 0.5.0
                    

FieldCure.Mcp.Filesystem

Secure MCP server for local filesystem operations — read, write, search, copy, move files and directories with path sandboxing. Supports MCP roots protocol for runtime directory changes.

NuGet License: MIT

Install

dotnet tool install -g FieldCure.Mcp.Filesystem

Quick Start

fieldcure-mcp-filesystem "C:\Users\me\Documents" "C:\Projects"

Pass one or more directories as arguments to define the sandbox boundary.

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "filesystem": {
      "command": "fieldcure-mcp-filesystem",
      "args": ["C:\\Users\\me\\Documents", "C:\\Projects"]
    }
  }
}

VS Code (Copilot)

Add to .vscode/mcp.json:

{
  "servers": {
    "filesystem": {
      "command": "fieldcure-mcp-filesystem",
      "args": ["${workspaceFolder}"]
    }
  }
}

Tools (15)

Category Tools
File read_file, read_multiple_files, read_file_lines, write_file, append_file, modify_file, copy_file, move_file, delete_file
Directory list_directory, create_directory, directory_tree
Search & Info search_files, search_within_files, get_file_info

MCP Roots Protocol

Supports runtime directory changes via the MCP roots protocol. Clients can send notifications/roots/list_changed to switch allowed directories without restarting the server. CLI args serve as the initial value; roots override them entirely.

Security

All paths are validated through a sandbox before any filesystem operation:

  • Allowed directories — CLI args define the initial sandbox boundary (overridable via roots)
  • Path traversal prevention.. resolved and validated
  • Symlink resolution — final target must be within allowed directories
  • NTFS ADS blocking — alternate data stream paths rejected
  • Windows reserved namesCON, PRN, AUX, NUL, etc. rejected

Requirements

Product Compatible and additional computed target framework versions.
.NET net8.0 is compatible.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net9.0 was computed.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 was computed.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

This package has no dependencies.

Version Downloads Last Updated
1.1.1 128 4/21/2026
1.1.0 96 4/20/2026
1.0.0 111 4/6/2026
0.5.1 113 4/3/2026
0.5.0 126 3/27/2026
0.4.0 101 3/24/2026
0.3.0 101 3/23/2026
0.2.0 98 3/22/2026
0.1.0 97 3/22/2026