MCP server for filesystem operations with intentionally outdated dependencies
npm install filesystem-vuln-mcp-server-outdated-packagesA Model Context Protocol (MCP) server that provides read-only filesystem operations.
This package intentionally contains deprecated and vulnerable dependencies for testing and educational purposes. DO NOT use this in production.
Notable issues:
- request (2.88.2) - Deprecated package, no longer maintained
- moment (2.29.1) - Now in maintenance mode, recommend using date-fns or Day.js
- Multiple packages with known security vulnerabilities that will show up in npm audit
The server provides 5 tools for filesystem operations:
1. get_folder_size - Calculate the total size of a folder and all its contents
2. list_directory - List all files and directories in a given path
3. get_system_info - Get system information (OS, CPU, memory, etc.)
4. check_path_exists - Check if a file or directory exists
5. get_file_stats - Get detailed statistics about a file or directory
``bash`
npm install
`bash`
npm start
Or directly:
`bash`
node index.js
To see the vulnerable dependencies:
`bash`
npm audit
Add this to your Claude Desktop configuration:
`json`
{
"mcpServers": {
"filesystem": {
"command": "node",
"args": ["/path/to/filesystem-mcp-server/index.js"]
}
}
}
json
{
"path": "/Users/username/Documents"
}
`$3
`json
{
"path": "/Users/username/Desktop"
}
`$3
No arguments required.$3
`json
{
"path": "/Users/username/somefile.txt"
}
`$3
`json
{
"path": "/Users/username/document.pdf"
}
``MIT