io.github.ellmos-ai/ellmos-filecommander-mcp (MCP) Server
This MCP server provides filesystem-related capabilities, including file handling plus support for processes and sessions. It also includes asynchronous search, OCR, archive operations, and a “safe delete” capability. Overall, it is designed to interact with local filesystem content and related workflows.
🛠️ Key Features
Filesystem access
Processes and sessions support
Async search
OCR
Archive operations
Safe delete
🚀 Use Cases
Searching filesystem content asynchronously
Performing OCR on supported inputs
Working with archived files
Deleting files using safer delete semantics
Managing or interacting with filesystem-associated processes and sessions
⚡ Developer Benefits
Consolidated filesystem tooling through an MCP server
Enables async search workflows and OCR within the same interface
Supports archive handling and safer deletion operations
⚠️ Limitations
No additional tooling details (e.g., specific tool count or supported formats) were provided.
A comprehensive Model Context Protocol (MCP) server that gives AI assistants full filesystem access, process management, interactive shell sessions, and async file search capabilities.
46 tools in a single server - everything an AI agent needs to interact with the local system.
Discovery keywords: local filesystem MCP server, safe delete MCP, Recycle Bin MCP server, process management MCP, interactive shell MCP, async file search for AI agents, cloud-lock-safe file operations, Markdown to PDF MCP, OCR MCP server, ZIP archive MCP.
Registry status: published on npm, indexed by jsDelivr, visible on LobeHub, listed on Glama, and prepared for the official MCP Registry via server.json. Some third-party directories still show older 43-tool metadata, so the canonical README/npm metadata should remain the source of truth until their reindex catches up.
NOTE
For AI Agents & LLM Integrations:
FileCommander provides 46 specialized tools accessible via standard stdio transport. All tool names use the fc_ prefix to prevent namespace collisions. For LLMs, compact context and schema overviews are available in llms.txt and server.json.
Why FileCommander?
Most filesystem MCP servers only cover basic read/write operations. FileCommander goes further:
Safe Delete - Moves files to Recycle Bin (Windows) or Trash (macOS/Linux) instead of permanent deletion
Interactive Sessions - Start and interact with REPLs (Python, Node.js, shells) through the MCP protocol
Async Search - Search large directory trees in the background while the AI continues working
Process Management - List, start, and terminate system processes
String Replace - Edit files by matching unique strings with context validation
Format Conversion - Convert between JSON, CSV, INI, YAML, TOML, XML, and TOON
ZIP Archives - Create, extract, and list ZIP archives
File Checksums - SHA-256, MD5, SHA-1, SHA-512 hashing with compare
OCR - Extract text from images (optional tesseract.js dependency)
Safety Mode - Toggle to route all deletes through Recycle Bin / Trash
Markdown Export - Convert Markdown to professional HTML/PDF with code blocks, tables, nested lists, blockquotes
Cloud-Lock Safe - Automatic copy+delete fallback when cloud sync filters (OneDrive, Dropbox, Google Drive, iCloud) block rename operations
Cloud Lock Diagnosis - Check whether a path is at risk of sync-filter conflicts before operating
Cross-platform - Works on Windows, macOS, and Linux with platform-specific optimizations
Convert between JSON, CSV, INI, YAML, TOML, XML, and TOON formats
fc_detect_duplicates
Find duplicate files using SHA-256 hashing
fc_checksum
File hashing (MD5, SHA-1, SHA-256, SHA-512) with optional compare
Archive (1 tool)
Tool
Description
fc_archive
Create, extract, and list ZIP archives
OCR (1 tool)
Tool
Description
fc_ocr
Extract text from images via tesseract.js (optional dependency)
Cloud Sync (1 tool)
Tool
Description
fc_check_cloud_lock
Diagnose whether a path may be blocked by cloud sync filters (Windows)
System (2 tools)
Tool
Description
fc_get_time
Get current system time with timezone info
fc_set_safe_mode
Toggle safe mode: all deletes go through Recycle Bin / Trash
Export (2 tools)
Tool
Description
fc_md_to_html
Markdown to standalone HTML with CSS styling (headers, code blocks, tables, nested lists, blockquotes, images, checkboxes)
fc_md_to_pdf
Markdown to PDF via headless browser (Edge/Chrome). Falls back to HTML if no browser is available
Web (1 tool)
Tool
Description
fc_web_fetch
Fetch a web page and return content by mode: extract (clean main text), raw (HTTP body), links, forms, or headers. Read-only network tool; SSRF guard blocks internal/private targets by default.
External discovery notes: npm and jsDelivr already show the current package metadata. LobeHub indexes the GitHub repo as an MCP server. Some secondary MCP directories still cache older 43-tool descriptions; use the package description and this README as the canonical 46-tool reference.
Security
This server has full filesystem access with the running user's permissions.
See SECURITY.md for detailed security information and recommendations.
Key points:
fc_execute_command runs arbitrary shell commands
fc_delete_* tools perform permanent deletion by default (use fc_safe_delete or enable safe mode via fc_set_safe_mode to route all deletes through Recycle Bin / Trash)
No built-in sandboxing - security is delegated to the MCP client layer
Designed for local use via stdio transport only
Development
bash
# Install dependencies
npm install
# Watch mode (auto-rebuild on changes)
npm run dev
# One-time build
npm run build
# Start the server
npm start
# Run test suite
npm test
Testing
The project includes a comprehensive test suite with 154 tests covering filesystem operations, format conversion, encoding repair, archive handling, duplicate detection, i18n language packs, and more.
bash
npm test# Run all tests
npx vitest run # Same as above
npx vitest --watch # Watch mode
Tests are verified on Windows, macOS, and Linux.
Pushes and pull requests run CI on Node.js 20, 22, and 24 with npm ci, TypeScript build, Vitest, and an npm package dry-run.
This project was originally developed as BACH FileCommander (bach-filecommander-mcp). It has been renamed to ellmos FileCommander (ellmos-filecommander-mcp) as part of the ellmos-ai organization.
The legacy package name bach-filecommander-mcp is deprecated. Please use ellmos-filecommander-mcp instead:
Testing framework for LLM operating systems (7 dimensions)
Desktop Software
Our partner organization open-bricks bundles AI-native desktop applications — a modern, open-source software suite built for the age of AI. Categories include file management, document tools, developer utilities, and more.
Haftung / Liability
Dieses Projekt ist eine unentgeltliche Open-Source-Schenkung im Sinne der §§ 516 ff. BGB. Die Haftung des Urhebers ist gemäß § 521 BGB auf Vorsatz und grobe Fahrlässigkeit beschränkt. Ergänzend gilt der Haftungsausschluss der MIT-Lizenz.
Nutzung auf eigenes Risiko. Keine Wartungszusage, keine Verfügbarkeitsgarantie, keine Gewähr für Fehlerfreiheit oder Eignung für einen bestimmten Zweck.
This project is an unpaid open-source donation. Liability is limited to intent and gross negligence (§ 521 German Civil Code). The MIT license disclaimer also applies. Use at your own risk. No warranty, no maintenance guarantee, no fitness-for-purpose assumed.