Fast Filesystem MCP
fast-filesystem-mcp · by efforthye
A high-performance Model Context Protocol (MCP) server that provides secure filesystem access for Claude and other AI assistants.
2 open CVEs
Apache-2.0 license
Maintained
Last commit 96d ago
Works with most clients
Transport: stdio, sse, http
26 tools · ~1.3k tok
Grade B · 0.7% of 200K ctx
MCPpedia last refreshed this data
Fast Filesystem MCP is an MCP server that a high-performance Model Context Protocol (MCP) server that provides secure filesystem access for Claude and other AI assistants. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 69/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"fast-filesystem": {
"args": [
"-y",
"fast-filesystem-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/fast-filesystem-mcp)
Read me
What Fast Filesystem Mcp does
Advanced filesystem operations for Claude Desktop with large file handling capabilities and Claude-optimized features.
Test This Server
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
69/100across 5 weighted dimensions
0255075100
23
16
15
10
−31
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 open
CVE-2026-5327mediumCVSS 6.3
fast-filesystem-mcp is vulnerable to command injection through handleGetDiskUsage function
A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. The affected element is the function handleGetDiskUsage of the file src/index.ts. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected:
>= 0source →CVE-2025-67364highCVSS 7.5
fast-filesystem-mcp has a Path Traversal vulnerability
fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including fast_read_file. This vulnerability arises from improper path validation that fails to resolve symbolic links to their actual physical paths. The safePath and isPathAllowed functions use path.resolve() which does not handle symlinks, allowing attackers to bypass directory access restrictions by creating symlinks within allowed directories that point to restricted system paths.
Affected:
>= 0source →Inventory
Tools (26)
Click any tool to inspect its schema.
~1.3k tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Fast Filesystem Mcp safe to use?
- Fast Filesystem Mcp has 2 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "fast-filesystem-mcp". Review the Security section above for details before installing.
- How do I install Fast Filesystem Mcp?
- Fast Filesystem Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Fast Filesystem Mcp do?
- Fast Filesystem Mcp provides 26 tools: fast_read_file, fast_read_multiple_files, fast_write_file, fast_large_write_file, fast_get_file_info and 21 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Fast Filesystem Mcp?
- Fast Filesystem Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is Fast Filesystem Mcp actively maintained?
- Fast Filesystem Mcp is less actively maintained — last commit was 96 days ago. It has 59 GitHub stars.
Related
Similar servers
Others in developer-tools
Context797Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
61.2k 2
G
Mcp Gitlab96MCP server for using the GitLab API
1.9k 12
Supabase MCP Server96Manage Supabase projects — databases, auth, storage, and edge functions
2.9k 4
Chrome Devtools Mcp96Chrome DevTools for coding agents
49.7k 10
MCP Security Weekly
Get CVE alerts and security updates for Fast Filesystem Mcp and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.