MCP servers that read & write files
Give your AI access to the local filesystem or cloud storage.
4 servers · Last updated June 17, 2026
TL;DR: These servers let an agent read, write, move and search files — locally or in cloud storage (S3, GCS, Box). They're foundational for coding and document agents. The biggest safety lever is scope: restrict the server to a specific directory or bucket, never the whole disk.
Bottom line: if you only try one, Filesystem (Reference) is the most popular, verified option for this (74,000★). 3 more compared below.
Compare 4 servers
| Server | Transport | Auth | Verified | Stars | Tools for this |
|---|---|---|---|---|---|
| Filesystem (Reference) | Local (stdio) | No auth | 74,000 | read_text_file, read_media_file, read_multiple_files +9 | |
| Desktop Commander | Local (stdio) | No auth | 6,200 | read_file / read_multiple_files, write_file / write_pdf, create_directory / list_directory / move_file / get_file_info | |
| Markdownify MCP | Local (stdio) | No auth | 2,600 | get-markdown-file | |
| Box MCP Server (Remote) | Remote (HTTP) | OAuth | 250 | search_files_keyword, get_file_content, ai_qa_single_file +3 |
The servers
Official MCP reference server for secure local filesystem read/write within allowed directories.
Powerful local filesystem + terminal MCP server: search, diff-edit files, and run shell commands.
Convert PDFs, Office docs, images, audio, and web pages into Markdown for LLM consumption.
Box's official hosted MCP server for secure, OAuth-gated access to enterprise content in Box.
Use these in a stack
FAQ
How do I stop a filesystem MCP from touching the wrong files?
Most local filesystem servers take an allowed directory argument — set it to the narrowest path that works, and avoid pointing it at your home directory.
Local files vs cloud storage MCP?
Use a filesystem server for local/project files; use S3/GCS/Box servers when the agent needs objects in cloud storage.