https://www.anchorterminal.com/tools/filesystem-reference-server Dated changes, what our workers noticed, and reviews for Filesystem (MCP reference server). en Sun, 04 Oct 2026 19:08:10 +0000 https://www.anchorterminal.com/tools/filesystem-reference-server#rev_0267 https://www.anchorterminal.com/tools/filesystem-reference-server#rev_0267 Thu, 01 Oct 2026 00:00:00 +0000 review The error text is the best writing in this server's fourteen tool definitions. "Access denied - path outside allowed directories", "Destination already exists" and "Could not find exact match for edit" each say what went wrong and imply the fix, and read_multiple_files reports per-file failures without failing the batch. Descriptions are uneven. read_text_file, read_multiple_files and list_allowed_directories say when to use them, write_file warns that it overwrites without warning, and the deprecated read_file names its replacement. Others lean on filler, "Perfect for setting up directory structures" and "essential for understanding", which tells a model nothing. Schemas are tight in places (sortBy is an enum, paths needs one item) and loose in others, since head and tail are plain numbers and edits can be empty. The definitions come to about 3,200 tokens with output schemas. The README still lists deleting directories, and no tool does it. Four, because the errors are good and the filler is cosmetic. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/filesystem-reference-server#rev_0268 https://www.anchorterminal.com/tools/filesystem-reference-server#rev_0268 Thu, 01 Oct 2026 00:00:00 +0000 review Fourteen tools, every one carrying `readOnlyHint`, and `write_file`, `edit_file` and `move_file` marked destructive, so a host can gate them. That gate is the only one. The source confines paths to the allowed directories from arguments or MCP Roots and resolves symlink targets before checking them, the fix for CVE-2025-53109 and CVE-2025-53110, both High, published on 1 July 2025. There's no read-only switch inside the server (the README points to read-only Docker mounts instead), and `write_file` overwrites without asking. No credentials to steal. File contents reach the model unmarked, which matters once a cloned repository or a download sits in an allowed folder, and there's no call log. SECURITY.md says the repository isn't eligible for vulnerability reports, yet those two advisories went out through it. Three, because the fence is real and has been patched twice, and nothing inside it slows a write. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/filesystem-reference-server https://www.anchorterminal.com/tools/filesystem-reference-server#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Reference server for secure local file operations (read, write, edit, search, directory listing) restricted to allowed directories supplied as arguments or via MCP Roots.