This MCP server has full filesystem access with the permissions of the running user.
By design, this server provides LLMs with powerful system access capabilities. Please understand the security implications before using it.
| Tool | Risk | Description |
|---|---|---|
fc_execute_command |
Critical | Executes arbitrary shell commands |
fc_start_process |
High | Starts background processes |
fc_kill_process |
High | Can terminate any accessible process |
fc_delete_file |
High | Permanently deletes files (no recycle bin) |
fc_delete_directory |
High | Recursively deletes directories |
fc_write_file |
Medium | Can overwrite any accessible file |
fc_ocr |
Low | Reads images (optional tesseract.js) |
fc_archive |
Medium | Creates/extracts ZIP archives |
fc_checksum |
Low | Computes file hashes (read-only) |
-
Enable Safety Mode via
fc_set_safe_mode(true)to route all delete operations through Recycle Bin / Trash automatically. -
Use
fc_safe_deleteinstead offc_delete_file/fc_delete_directorywhen possible - it moves items to the Recycle Bin instead of permanent deletion. -
Be cautious with
fc_execute_command- it runs commands with your full user permissions. Review commands before approving execution in your MCP client. -
Do not expose this server to untrusted networks. It is designed for local use via stdio transport only.
-
Review your MCP client's approval settings. Most MCP clients (like Claude Desktop) prompt before executing destructive operations. Keep these prompts enabled.
This server does not implement:
- Path restrictions or allowlists
- Command filtering or blocklists
- Rate limiting
- Audit logging
These are intentional design decisions to keep the server simple and flexible. Security is delegated to the MCP client layer.
If you discover a security vulnerability, please open an issue on the GitHub repository. For sensitive disclosures, please use GitHub's private vulnerability reporting feature.
| Version | Supported |
|---|---|
| 1.9.x | Yes |
| < 1.9 | No |