MarcusJellinghaus/mcp-workspace

A simple Model Context Protocol (MCP) server providing file system operations. This server offers a clean API for performing file system operations within a specified project directory, following the MCP protocol design.
## Overview
This MCP server enables AI assistants like Claude (via Claude Desktop) or other MCP-compatible systems to interact with your local file system. With these capabilities, AI assistants can:
Read your existing code and project files
Write new files with generated content
Update and modify existing files with precision using exact string matching
Make selective edits to code without rewriting entire files
Delete files when needed
Review repositories to provide analysis and recommendations
Debug and fix issues in your codebase
Generate complete implementations based on your specifications
All operations are securely contained within your specified project directory, giving you control while enabling powerful AI collaboration on your local files.
By connecting your AI assistant to your filesystem, you can transform your workflow from manual coding to a more intuitive prompting approach - describe what you need in natural language and let the AI generate, modify, and organize code directly in your project files.
## Path Confinement
Every path is validated against the project directory before any file operation. Validation resolves symlinks and rejects the path if the resolved location lies outside the project directory. A .. segment is rejected outright rather than followed. Reference projects are validated the same way against their own directory.
Two kinds of path are rejected that earlier versions accepted:
A .. segment anywhere in the path, not only a leading one. readfile("src/../README.md") is rejected; use readfile("README.md").
A path that leaves the project through a symlink. A symlinked file inside the project whose target is outside it, or an intermediate symlinked directory component, is rejected even though the path contains no ... To read content that lives outside the project, configure it with --reference-project (read-only) or run a second server instance pointed at it.
One limitation: if the operating system cannot resolve a path at all, validation falls back to the lexical checks alone — the path must contain no .. and must lie under the project directory by name — so a symlink pointing outside the project is not detected in that case.
## Features
listdirectory: List all files and directories in the project directory
readfile: Read a file, or a line slice via startline/endline.
savefile: Write a file, creating parent directories as needed.
appendfile: Append content to the end of a file
deletethisfile: Delete a single specified file from the filesystem
deletedirectory: Delete a directory (empty by default, whole tree with recursive=True)
editfile: Edit a file by exact string match; replaceall for multiple matches.
movefile: Move or rename files and directories (git-aware: uses git mv for tracked files, else filesystem move)
getreferenceprojects: Discover available reference projects
listreferencedirectory: List files in reference projects
readreferencefile: Read a reference-project file, or a line slice via startline/endline.