tools / mcp audit / rules / filesystem server rooted at a drive, root or home directory · v0.1.0 · View source · Edit on GitHub
MCP audit rule · v0.1.0
Filesystem server rooted at a drive, root or home directory
Giving a file server your whole disk or home directory exposes SSH keys, cloud credentials and every other project to the model.
- each server checks
- 7 test fixtures
high fs-root
Flagged
6 "-y",
7 "@modelcontextprotocol/server-filesystem@2025.8.21",
8 > "/"
9 ]
10 }Fix
Point it at the one project folder it needs, e.g. "/home/me/projects/app".
Fine
{
"mcpServers": {
"s": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-filesystem@2025.8.21",
"/home/me/projects/app"
]
}
}
}