B
Bach Filecommander MCP Server
ellmos-filecommander-mcp
43 tools for filesystem, process management, sessions, search, OCR, ZIP, and PDF export.
No known CVEs
MIT license
Actively maintained
Last commit 2d ago
Works with most clients
Transport: stdio, sse, http
43 tools · ~1.3k tok
Grade B · 0.7% of 200K ctx
MCPpedia last refreshed this data
Bach Filecommander MCP Server is an MCP server that 43 tools for filesystem, process management, sessions, search, OCR, ZIP, and PDF export. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 83/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"filecommander": {
"command": "ellmos-filecommander"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-lukisch-bach-filecommander-mcp)
Read me
What Bach Filecommander MCP Server does
Part of the ellmos-ai family.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'ellmos-filecommander-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
83/100across 5 weighted dimensions
0255075100
30
12
16
15
10
−17
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 fixed
CVE-2026-47429critical · fixedCVSS 9.8
When Vitest UI server is listening, arbitrary file can be read and executed
### Summary Arbitrary file can be read on Windows when Vitest UI server is listening, especially when exposed to the network. ### Impact Only users that match either of the following conditions are affected: - explicitly exposes the Vitest UI server to the network (using `--api.host` or [`api.host` config option](https://vitest.dev/config/api.html)) - running the Vitest UI or Browser Mode on Windows ### Details The API handler for `/__vitest_attachment__` uses the deprecated `isFileServingAll
CVE-2025-24964critical · fixedCVSS 9.6
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
### Summary Arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking (CSWSH) attacks. ### Details When [`api` option](https://vitest.dev/config/#api) is enabled (Vitest UI enables it), Vitest starts a WebSocket server. This WebSocket server did not check Origin header and did not have any authorization mechanism and was vulnerable to CSWSH attacks. https://github.com/vitest-dev/vitest/blob/9a581e1c43e5c02b11e2a8026
Inventory
Tools (43)
Click any tool to inspect its schema.
~1.3k tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Bach Filecommander MCP Server safe to use?
- Bach Filecommander MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install Bach Filecommander MCP Server?
- Bach Filecommander MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Bach Filecommander MCP Server do?
- Bach Filecommander MCP Server provides 43 tools: fc_read_file, fc_read_multiple_files, fc_write_file, fc_edit_file, fc_str_replace and 38 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Bach Filecommander MCP Server?
- Bach Filecommander MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is Bach Filecommander MCP Server actively maintained?
- Bach Filecommander MCP Server is actively maintained — last commit was 2 days ago. It has 4 GitHub stars.
Related
Similar servers
Others in developer-tools / productivity
Context797Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
61.2k 2
G
Mcp Gitlab96MCP server for using the GitLab API
1.9k 12
Supabase MCP Server96Manage Supabase projects — databases, auth, storage, and edge functions
2.9k 4
Chrome Devtools Mcp96Chrome DevTools for coding agents
49.7k 10
MCP Security Weekly
Get CVE alerts and security updates for Bach Filecommander MCP Server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.