ellmos-filecommander-mcp

## Last-checked: 2026-09-23

# ellmos-filecommander-mcp - MCP Server for Filesystem and Process Access

> FileCommander is a comprehensive MCP (Model Context Protocol) server that gives AI assistants full filesystem access, bounded metadata-first inline preview, multi-file content search, default-app path opening, process management, interactive shell sessions, and async filename search capabilities. 50 tools in a single server -- everything an AI agent needs to interact with the local system. Part of the ellmos MCP family alongside codecommander and clatcher. Fully verified with 299 automated tests (228 Vitest + 71 standalone i18n checks) across Node 20-24.

Why it exists: most filesystem MCP servers only cover basic read/write. FileCommander goes further with Safe Delete (Recycle Bin on Windows, Trash on macOS/Linux instead of permanent deletion), a metadata-first 1 MiB-bounded remote preview using standard MCP content blocks (`fc_preview_file`), read-only literal or regex search across an explicit ordered list of files, validated local file/directory opening through the operating system default application (`fc_open_path`), interactive REPL sessions (Python, Node.js, shells) accessible through the MCP protocol, async search of large directory trees running in the background while the AI continues other work, process management (list, start, terminate), string-replace editing with context validation, format conversion across JSON / CSV / INI / YAML / TOML / XML / TOON, ZIP archive create/extract/list, SHA-256 / MD5 / SHA-1 / SHA-512 checksums with compare, optional tesseract.js OCR for image text extraction, runtime language selection and introspection (i18n de/en/es/zh/ja/ru), global safety mode to route all deletes through Recycle Bin / Trash, and Markdown-to-HTML/PDF export. Cross-platform with platform-specific optimizations.

Node.js >= 20, MIT. Published as `ellmos-filecommander-mcp` on npm and indexed by jsDelivr; registries may briefly lag behind the current release. Visible on LobeHub as an MCP server. Listed on Glama at https://glama.ai/mcp/servers/ellmos-ai/ellmos-filecommander-mcp. README/package metadata are the canonical current 50-tool source for the repository. Official MCP Registry name: `io.github.ellmos-ai/ellmos-filecommander-mcp`. Discovery files: `server.json` for the MCP Registry, `glama.json` for Glama-compatible MCP directories, and this `llms.txt` for LLM/documentation crawlers.

`fc_open_path` returns structured `launcher_accepted`, the invariant `user_visible: "unknown"`, and a machine-readable fallback. Files point to metadata-only `fc_preview_file`; directories point to `fc_list_directory`. `fc_preview_file` reads no file content by default and exposes an explicit `include_content=true` follow-up only for supported files at or below 1 MiB. Larger and unsupported files never enter the inline Base64 path.

`fc_search_content` searches at most 50 explicit UTF-8 text files in input order. Literal matching is the default; regex, case sensitivity, context lines, global limits, and per-file limits are optional. It performs no recursion or glob expansion, skips binary and files over 10 MB, reports partial per-file errors, redacts common secret formats, and returns deterministic bounded JSON.

## Docs

- [README (English)](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/README.md): Tools, installation, configuration for Claude Desktop / Claude Code
- [README (Deutsch)](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/README_de.md): German version
- [SECURITY.md](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/SECURITY.md): Bilingual security policy for local stdio, explicit `fc_web_fetch` egress, process risks, and safe-mode boundaries
- [CHANGELOG.md](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/CHANGELOG.md): Release history and audit log
- [MARKETING-LOG.txt](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/MARKETING-LOG.txt): Discoverability, target personas, 10 runtime invariants, and verification matrix
- [THIRD_PARTY_LICENSES.md](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/THIRD_PARTY_LICENSES.md): Third-party dependencies and licensing review
- [NOTICE](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/NOTICE): Open-source legal attribution and open-bricks umbrella notice
- [LICENSE](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/LICENSE): MIT license text
- [npm package](https://www.npmjs.com/package/ellmos-filecommander-mcp): Published artifact
- [server.json](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/server.json): Official MCP Registry metadata
- [glama.json](https://github.com/ellmos-ai/ellmos-filecommander-mcp/blob/master/glama.json): Glama-compatible MCP directory metadata

## Governance & Runtime Invariants

- **INV-LOCAL-01: Local Stdio & Explicit Egress** — Local stdio transport, zero telemetry, no open listening ports. Outbound HTTP(S) network egress strictly occurs through explicit client calls to `fc_web_fetch`.
- **INV-SAFE-02: Safe Deletion & Trash Protection** — `fc_safe_delete` and global `fc_set_safe_mode` route file removals through OS Recycle Bin (Windows) / Trash (macOS/Linux).
- **INV-LOCK-03: Cloud-Lock Resilient Move** — `fc_move` automatically executes copy + SHA-256 verify + source unlink fallback when sync filters (OneDrive, Dropbox, iCloud) cause EPERM/EBUSY.
- **INV-DIAG-04: Cloud-Lock Diagnosis** — `fc_check_cloud_lock` provides read-only static path inspection and reparse point detection without mutating filesystem state.
- **INV-SRCH-05: Bounded Multi-File Content Search** — `fc_search_content` caps input at 50 explicit files, 10 MB per file, max 200 matches, 200k chars without recursive glob explosions.
- **INV-MASK-06: Automated Secret & Token Redaction** — Common API keys, bearer tokens, AWS keys, and authorization headers are automatically masked in search snippets.
- **INV-PREV-07: Bounded Inline Preview & Safe Open** — `fc_preview_file` is metadata-first with an explicit 1 MiB inline content boundary; `fc_open_path` invokes default application via shell-safe OS launchers.
- **INV-REPL-08: Interactive REPL & Session Isolation** — Stateful interactive sessions (`fc_start_session`, `fc_send_input`, `fc_read_output`) employ bounded circular ring buffers to prevent memory exhaustion.
- **INV-PROC-09: Unprivileged RunAsInvoker Non-Elevation** — Executes entirely in standard unprivileged user-mode; zero administrative elevation or root rights required.
- **INV-SLA-10: 48h Security Response, 5-Day Triage & 30-Day Remediation SLA** — Enforces formal security response, triage, and 30-day remediation commitments with multi-channel contacts (`security@open-bricks.org`, `security@ellmos.ai`).

## Audience

- **AI engineers** integrating local filesystem tools into Claude Desktop, Claude Code, or custom MCP clients
- **Developers** who want safe-delete, OCR, ZIP, session management, or cloud-lock-safe file ops in their AI workflows
- **Power users** running Claude Code or similar agents and wanting full OS-level file access via MCP
- **Teams** deploying AI assistants on Windows/macOS/Linux that need cross-platform filesystem control
- **Security-conscious users** who want Recycle Bin / Trash semantics and a global safety mode before any deletion

## Search Phrases

```
MCP filesystem server
safe delete MCP server
Recycle Bin MCP
async file search MCP
multi-file content search MCP
search text in multiple files MCP
process management MCP
open file with default application MCP
remote headless file preview MCP
metadata first MCP file resource
interactive shell MCP
OCR MCP server
cloud lock safe file operations
cloud-lock MCP server
OneDrive safe MCP file operations
Markdown to PDF MCP
ZIP archive MCP
file checksum MCP
ellmos filecommander
ellmos-filecommander-mcp
FileCommander MCP
```

## ellmos MCP family (sibling servers)

- [ellmos-codecommander-mcp](https://github.com/ellmos-ai/ellmos-codecommander-mcp): Code analysis, AST parsing, import management (22 tools)
- [ellmos-clatcher-mcp](https://github.com/ellmos-ai/ellmos-clatcher-mcp): Utility tools -- repair, convert, detect, batch ops (12 tools)
- [n8n-manager-mcp](https://github.com/ellmos-ai/n8n-manager-mcp): n8n workflow management via MCP (19 tools)
- [ellmos-controlcenter-mcp](https://github.com/ellmos-ai/ellmos-controlcenter-mcp): MCP stack discovery, profile management, and control plane (31 tools)
- [ellmos-homebase-mcp](https://github.com/ellmos-ai/ellmos-homebase-mcp): LLM memory, knowledge, state, routing, and orchestration (45 tools)
- [ellmos-servercommander-mcp](https://github.com/ellmos-ai/ellmos-servercommander-mcp): Server deployment, health checks, and mail access tools (8 tools)
- [ellmos-blender-use-mcp](https://github.com/ellmos-ai/ellmos-blender-use-mcp): Headless Blender asset QA and FBX reimport verification (5 tools)
- [open-compute-mcp](https://github.com/ellmos-ai/open-compute-mcp): Model-agnostic computer use and OS interaction (16 tools)

## Broader ellmos ecosystem

- [BACH](https://github.com/ellmos-ai/bach): Full text-based OS for LLMs -- primary consumer of the MCP servers
- [Rinnsal](https://github.com/ellmos-ai/rinnsal): Lightweight LLM agent infrastructure
- [clutch](https://github.com/ellmos-ai/clutch): Multi-provider AI routing and failover
- [USMC](https://github.com/ellmos-ai/usmc): Shared memory primitive

## open-bricks sibling applications

- [ProFiler](https://github.com/file-bricks/ProFiler): High-speed dual-pane file manager with AI integration
- [ExplorerPro](https://github.com/file-bricks/ExplorerPro): Intelligent file explorer with smart filters
- [WinStorePackager](https://github.com/file-bricks/WinStorePackager): MSIX and Store packaging for Windows desktop apps
- [DokuZen](https://github.com/doc-bricks/DokuZen): Lightweight markdown & document processing utility
- [MediaBrain](https://github.com/doc-bricks/MediaBrain): Media metadata, audio/video transcription and cataloging
- [UniversalInvoiceMail](https://github.com/doc-bricks/UniversalInvoiceMail): Email invoice extraction & attachment processing
- [DevCenter](https://github.com/dev-bricks/DevCenter): Centralized developer tool suite
- [CodeBox](https://github.com/dev-bricks/CodeBox): Multi-language code editor with LLM augmentation
- [safe-start-for-codex](https://github.com/dev-bricks/safe-start-for-codex): Hardened runtime security & pre-flight checker
- [automation-master](https://github.com/dev-bricks/automation-master): High-reliability background task automation runner

## Optional

- [GitHub Issues](https://github.com/ellmos-ai/ellmos-filecommander-mcp/issues): Bug reports and feature requests