{"id":11071423,"name":"@modelcontextprotocol/server-filesystem","ecosystem":"npm","description":"MCP server for filesystem access","homepage":"https://modelcontextprotocol.io","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/modelcontextprotocol/servers","keywords_array":[],"namespace":"modelcontextprotocol","versions_count":16,"first_release_published_at":"2024-11-21T19:14:54.639Z","latest_release_published_at":"2026-01-14T16:03:10.655Z","latest_release_number":"2026.1.14","last_synced_at":"2026-04-03T00:10:55.538Z","created_at":"2024-11-21T22:40:14.096Z","updated_at":"2026-04-03T01:15:25.576Z","registry_url":"https://www.npmjs.com/package/@modelcontextprotocol/server-filesystem","install_command":"npm install @modelcontextprotocol/server-filesystem","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"2026.1.14"}},"repo_metadata":{"id":264668151,"uuid":"890668799","full_name":"modelcontextprotocol/servers","owner":"modelcontextprotocol","description":"Model Context Protocol Servers","archived":false,"fork":false,"pushed_at":"2025-12-19T17:39:55.000Z","size":27946,"stargazers_count":74730,"open_issues_count":239,"forks_count":9072,"subscribers_count":537,"default_branch":"main","last_synced_at":"2025-12-20T12:35:51.009Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://modelcontextprotocol.io","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/modelcontextprotocol.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-11-19T01:10:17.000Z","updated_at":"2025-12-20T12:33:42.000Z","dependencies_parsed_at":"2024-11-25T17:31:27.795Z","dependency_job_id":"03095d17-1b0f-4cc4-8e2f-ef8d308b0c2a","html_url":"https://github.com/modelcontextprotocol/servers","commit_stats":{"total_commits":360,"total_committers":105,"mean_commits":"3.4285714285714284","dds":0.8916666666666666,"last_synced_commit":"3ff22e8c3d477ed25a41306c0139775dd565e0a6"},"previous_names":["modelcontextprotocol/servers"],"tags_count":37,"template":false,"template_full_name":null,"purl":"pkg:github/modelcontextprotocol/servers","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/modelcontextprotocol%2Fservers","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/modelcontextprotocol%2Fservers/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/modelcontextprotocol%2Fservers/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/modelcontextprotocol%2Fservers/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/modelcontextprotocol","download_url":"https://codeload.github.com/modelcontextprotocol/servers/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/modelcontextprotocol%2Fservers/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28167502,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2026-01-02T02:00:06.235Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"modelcontextprotocol","name":"Model Context Protocol","uuid":"182288589","kind":"organization","description":"An open protocol that enables seamless integration between LLM applications and external data sources and tools.","email":null,"website":"https://modelcontextprotocol.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/182288589?v=4","repositories_count":1,"last_synced_at":"2024-11-25T17:24:25.305Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/modelcontextprotocol","funding_links":[],"total_stars":0,"followers":40,"following":0,"created_at":"2024-11-25T17:24:25.327Z","updated_at":"2024-11-25T17:24:25.327Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/modelcontextprotocol","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/modelcontextprotocol/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-04-03T00:24:10.059Z","dependent_packages_count":0,"downloads":1768585,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":25.510038885602754,"dependent_packages_count":36.938718902174124,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":31.22437889388844},"purl":"pkg:npm/%40modelcontextprotocol/server-filesystem","advisories":[{"uuid":"GSA_kwCzR0hTQS1oYzU1LXA3MzktajQ4d84ABJmu","url":"https://github.com/advisories/GHSA-hc55-p739-j48w","title":"@modelcontextprotocol/server-filesystem vulnerability allows for path validation bypass via colliding path prefix","description":"Versions of Filesystem prior to 0.6.3 \u0026 2025.7.1 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to upgrade to 2025.7.1 to resolve the issue.\n\nThank you to Elad Beber (Cymulate) for reporting these issues.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-07-01T20:14:00.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:H/SI:H/SA:H","references":["https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-hc55-p739-j48w","https://github.com/modelcontextprotocol/servers/commit/cc99bdabdcad93a58877c5f3ab20e21d4394423d","https://nvd.nist.gov/vuln/detail/CVE-2025-53110","https://github.com/advisories/GHSA-hc55-p739-j48w"],"source_kind":"github","identifiers":["GHSA-hc55-p739-j48w","CVE-2025-53110"],"repository_url":"https://github.com/modelcontextprotocol/servers","blast_radius":1.0,"created_at":"2025-07-01T21:08:53.128Z","updated_at":"2026-04-03T01:02:10.010Z","epss_percentage":0.00079,"epss_percentile":0.23619,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oYzU1LXA3MzktajQ4d84ABJmu","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oYzU1LXA3MzktajQ4d84ABJmu","packages":[{"ecosystem":"npm","package_name":"@modelcontextprotocol/server-filesystem","versions":[{"first_patched_version":"2025.7.1","vulnerable_version_range":"\u003e= 2025.1.14, \u003c 2025.7.1"},{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.6.2"}],"purl":"pkg:npm/%40modelcontextprotocol%2Fserver-filesystem","statistics":{"dependent_packages_count":0,"dependent_repos_count":0,"downloads":1509271,"downloads_period":"last-month"},"affected_versions":["0.2.0","0.3.0","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","2025.1.14","2025.3.28"],"unaffected_versions":["2025.7.1","2025.7.29","2025.8.18","2025.8.21","2025.11.25","2025.12.18","2026.1.14"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oYzU1LXA3MzktajQ4d84ABJmu/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xNjZxLWZ4MnAtN3c0bc4ABJmt","url":"https://github.com/advisories/GHSA-q66q-fx2p-7w4m","title":"@modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling","description":"Versions of Filesystem prior to 0.6.3 \u0026 2025.7.1 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 2025.7.1 to resolve.\n\nThank you to Elad Beber (Cymulate) for reporting these issues.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-07-01T20:13:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:H/SI:H/SA:H","references":["https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-q66q-fx2p-7w4m","https://github.com/modelcontextprotocol/servers/commit/d00c60df9d74dba8a3bb13113f8904407cda594f","https://nvd.nist.gov/vuln/detail/CVE-2025-53109","https://github.com/advisories/GHSA-q66q-fx2p-7w4m"],"source_kind":"github","identifiers":["GHSA-q66q-fx2p-7w4m","CVE-2025-53109"],"repository_url":"https://github.com/modelcontextprotocol/servers","blast_radius":1.0,"created_at":"2025-07-01T21:08:53.970Z","updated_at":"2026-04-03T01:02:11.142Z","epss_percentage":0.00157,"epss_percentile":0.36654,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xNjZxLWZ4MnAtN3c0bc4ABJmt","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xNjZxLWZ4MnAtN3c0bc4ABJmt","packages":[{"ecosystem":"npm","package_name":"@modelcontextprotocol/server-filesystem","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.6.2"}],"purl":"pkg:npm/%40modelcontextprotocol%2Fserver-filesystem","statistics":{"dependent_packages_count":0,"dependent_repos_count":0,"downloads":1509271,"downloads_period":"last-month"},"affected_versions":["0.2.0","0.3.0","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2"],"unaffected_versions":["2025.1.14","2025.3.28","2025.7.1","2025.7.29","2025.8.18","2025.8.21","2025.11.25","2025.12.18","2026.1.14"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xNjZxLWZ4MnAtN3c0bc4ABJmt/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@modelcontextprotocol/server-filesystem","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@modelcontextprotocol/server-filesystem","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@modelcontextprotocol/server-filesystem/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-01-04T23:02:19.914Z","issues_count":652,"pull_requests_count":3278,"avg_time_to_close_issue":1523442.9608695651,"avg_time_to_close_pull_request":1292380.0642002176,"issues_closed_count":230,"pull_requests_closed_count":1837,"pull_request_authors_count":1530,"issue_authors_count":567,"avg_comments_per_issue":0.8374233128834356,"avg_comments_per_pull_request":0.5417937766931056,"merged_pull_requests_count":1164,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":495,"past_year_pull_requests_count":2718,"past_year_avg_time_to_close_issue":1971593.210191083,"past_year_avg_time_to_close_pull_request":1487070.4179856116,"past_year_issues_closed_count":157,"past_year_pull_requests_closed_count":1389,"past_year_pull_request_authors_count":1363,"past_year_issue_authors_count":443,"past_year_avg_comments_per_issue":0.6101010101010101,"past_year_avg_comments_per_pull_request":0.5209713024282561,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":866,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/modelcontextprotocol%2Fservers/issues","maintainers":[{"login":"olaservo","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olaservo"},{"login":"jspahrsummers","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jspahrsummers"},{"login":"dsp-ant","count":12,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dsp-ant"},{"login":"domdomegg","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/domdomegg"},{"login":"ashwin-ant","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ashwin-ant"},{"login":"cliffhall","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cliffhall"},{"login":"koic","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koic"},{"login":"evalstate","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evalstate"},{"login":"slimslenderslacks","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/slimslenderslacks"},{"login":"SilverRainZ","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SilverRainZ"}],"active_maintainers":[{"login":"olaservo","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olaservo"},{"login":"domdomegg","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/domdomegg"},{"login":"cliffhall","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cliffhall"},{"login":"jspahrsummers","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jspahrsummers"},{"login":"ashwin-ant","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ashwin-ant"},{"login":"koic","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koic"},{"login":"evalstate","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evalstate"},{"login":"slimslenderslacks","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/slimslenderslacks"},{"login":"SilverRainZ","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SilverRainZ"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@modelcontextprotocol%2Fserver-filesystem/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@modelcontextprotocol%2Fserver-filesystem/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@modelcontextprotocol%2Fserver-filesystem/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@modelcontextprotocol%2Fserver-filesystem/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@modelcontextprotocol%2Fserver-filesystem/codemeta","maintainers":[{"uuid":"ochafik","login":"ochafik","name":null,"email":"olivier.chafik@gmail.com","url":null,"packages_count":33,"html_url":"https://www.npmjs.com/~ochafik","role":null,"created_at":"2026-02-11T04:02:29.948Z","updated_at":"2026-02-11T04:02:29.948Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ochafik/packages"},{"uuid":"pcarleton","login":"pcarleton","name":null,"email":"paulcarletonjr@gmail.com","url":null,"packages_count":33,"html_url":"https://www.npmjs.com/~pcarleton","role":null,"created_at":"2025-11-13T01:18:14.941Z","updated_at":"2025-11-13T01:18:14.941Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/pcarleton/packages"},{"uuid":"jspahrsummers","login":"jspahrsummers","name":null,"email":"justin@jspahrsummers.com","url":null,"packages_count":51,"html_url":"https://www.npmjs.com/~jspahrsummers","role":null,"created_at":"2024-11-21T22:41:31.093Z","updated_at":"2024-11-21T22:41:31.093Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/jspahrsummers/packages"},{"uuid":"thedsp","login":"thedsp","name":null,"email":"experimentalworks@gmail.com","url":null,"packages_count":44,"html_url":"https://www.npmjs.com/~thedsp","role":null,"created_at":"2024-11-21T22:41:30.778Z","updated_at":"2024-11-21T22:41:30.778Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/thedsp/packages"},{"uuid":"ashwin-ant","login":"ashwin-ant","name":null,"email":"ashwin@anthropic.com","url":null,"packages_count":44,"html_url":"https://www.npmjs.com/~ashwin-ant","role":null,"created_at":"2024-11-21T22:41:30.506Z","updated_at":"2024-11-21T22:41:30.506Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ashwin-ant/packages"},{"uuid":"fweinberger","login":"fweinberger","name":null,"email":"fweinberger@anthropic.com","url":null,"packages_count":31,"html_url":"https://www.npmjs.com/~fweinberger","role":null,"created_at":"2026-02-11T04:02:29.854Z","updated_at":"2026-02-11T04:02:29.854Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/fweinberger/packages"}]}