A Data Security First filesystem MCP server that implements .mcpignore to prevent MCP clients from accessing sensitive data.
.mcpignore
supportProtect your most sensitive data by using this data security first filesystem. This node.js server builds on top of Filesystem MCP Server and lets you control which files your MCP Client can access using .mcpignore
file.
.mcpignore
Note: Create an .mcpignore
file for each direcoties specified via args
.mcpignore
The .mcpignore
file uses the same patterns as .gitignore
# Ignore specific file `.env`
.env
# Ignore all files with a `.safetensor` extension
*.safetensors
# Ignore specific directory, 'assets/logos' and its files
assets/logos/
For details, refer to Filesystem MCP Server API Spec
Tool | Behavior |
---|---|
read_file | Block |
read_multiple_files | Block |
write_file | Block |
edit_file | Block |
create_directory | Block |
list_directory | Block |
directory_tree | Allow |
move_file | Block |
search_files | Allow |
get_file_info | Block |
list_allowed_directories | N/A |
Note: directory_tree
and search_files
are allowed only to retrieve the file names
claude_desktop_config.json
cline_mcp_settings.json
mcp.json
Note: .mcpingore
applies to the list of allowed directories that you provide as args
{
"mcpServers": {
"mcpignore-filesystem": {
"command": "npx",
"args": [
"-y",
"@cyberhaven/mcpignore-filesystem",
"/Users/<username>/Desktop",
"/path/to/other/allowed/dir"
]
}
}
}
This project is licensed under the MIT License. See LICENSE.
See CONTRIBUTING.md for information on contributing to this repository.
See SECURITY.md for information on security.