How do I install Fileport?

Fileport is a local plugin. Install it using npm package: @reneturcios/fileport and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Fileport safe to use?

Fileport was flagged by MCP Marketplace's security scan, scoring 4.4/10 (high risk). It has 2 high or critical findings to review. Review the security report on this page carefully before installing it.

What AI apps work with Fileport?

Fileport uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Fileport MCP Server

by CloudCorpRecords

Developer ToolsUse Caution4.4MCP RegistryLocal

Free

Server data from the Official MCP Registry

Sandboxed file access: read, write, edit and search in allowed dirs.

About

Sandboxed file access: read, write, edit and search in allowed dirs.

Security Report

4.4

Use Caution4.4High Risk

fileport is a local stdio filesystem server that confines all tool access to allowed roots through realpath-based checks, and it makes no network calls, which fits its stated purpose. The main issues are a medium-severity symlink weakness in directory_tree, where symlinked directories are followed outside the sandbox and can loop, plus a low-severity edit_file bug where String.replace interprets '$' patterns in newText and can corrupt content. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-fileport": {
      "args": [
        "-y",
        "@reneturcios/fileport"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

fileport

fileport gives an agent careful, sandboxed access to the local filesystem. It can read and write text, return media as base64, apply exact-match edits, walk directory trees, and search by glob — but only inside the directories you allow. Anything outside those roots is refused, including paths that escape through .. segments or symlinks.

Install

npx @reneturcios/fileport list .

Or run the container image:

docker run -i ghcr.io/cloudcorprecords/fileport

The container defaults to the MCP server. Pass CLI arguments to use it as a CLI instead.

Allowed directories

The sandbox is the whole point of this tool, so it is configured explicitly:

fileport mcp /data/docs /data/notes — the arguments after mcp are the allowed roots.
FILEPORT_ROOTS — a path-delimiter-separated list used when no arguments are given.
With neither set, the current working directory is the only root.

Every path a tool receives is canonicalised (symlinks resolved; new files resolved through their parent) and checked against the roots before any read or write happens.

CLI

fileport list <path>     # entries as [FILE] / [DIR] lines
fileport read <path>     # print a file's text contents
fileport mcp [dirs...]   # start the stdio MCP server
fileport --version

Exit codes: 0 on success, 1 when an operation fails (for example a path outside the allowed directories), 2 for usage errors. The list and read helpers resolve paths against the working directory.

MCP server

npx -y @reneturcios/fileport mcp /path/to/allowed/dir

MCP client configuration:

{
  "mcpServers": {
    "fileport": {
      "command": "npx",
      "args": ["-y", "@reneturcios/fileport", "mcp", "/path/to/allowed/dir"]
    }
  }
}

Tools

Tool	Input	What it returns
`read_file`	`path`	The file's full text contents.
`read_text_file`	`path`, optional `head` or `tail` (line counts, mutually exclusive)	The file text, or just its first/last lines.
`read_media_file`	`path`	Base64 image, audio, or blob content chosen by extension.
`read_multiple_files`	`paths`	Each file's contents; a failure for one file is reported in-band and does not stop the others.
`write_file`	`path`, `content`	Writes the text, creating parent folders as needed.
`edit_file`	`path`, `edits` (`oldText`/`newText` pairs), optional `dryRun`	Applies each exact-match replacement, or returns a diff-like preview when `dryRun` is set. Errors if an `oldText` is not found.
`create_directory`	`path`	Creates the directory and any missing parents.
`list_directory`	`path`	Entries as `[FILE] name` / `[DIR] name` lines.
`list_directory_with_sizes`	`path`, optional `sortBy` (`name` or `size`)	Entries with sizes; directories report their recursive total.
`directory_tree`	`path`, optional `excludePatterns`	A nested JSON tree of `{name, type, children?}` nodes.
`move_file`	`source`, `destination`	Moves or renames within the sandbox.
`search_files`	`path`, `pattern`, optional `excludePatterns`	Recursive glob search over file names (`*`, ``, `?`).
`get_file_info`	`path`	Size, created/modified/accessed times, type, and permissions.
`list_allowed_directories`	—	The roots currently in force.

Development

npm install
npm run build   # tsc -> dist/
npm test        # node test runner over test/*.test.ts, no network
npm run dev     # run the CLI from source via tsx

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.