@modelcontextprotocol/server-filesystem vs agent-dir
agent-dir has broader access than @modelcontextprotocol/server-filesystem — can run shell commands on your computer. If @modelcontextprotocol/server-filesystem does what you need, it gives an AI agent less to misuse.
| @modelcontextprotocol/server-filesystem | agent-dir | |
|---|---|---|
| Access level | Review before use | Broad access |
| Runs shell commands | — | Yes |
| Starts other programs | — | — |
| Writes or deletes files | Yes | Yes |
| Reads files | Yes | Yes |
| Controls a web browser | — | — |
| Queries a database | — | — |
| Calls internet services | — | Yes |
| Needs API keys or tokens | — | — |
| Tools it offers | 14 | — |
| Code patterns to review | 1 | 1 |
| Downloads last week | 1,313,293 | 411 |
| Version checked | 2.1.0 | 2.1.0 |
Based on an automated read of each package's published code (never run), checked November 2, 2026. Access level describes what a server can do, not whether it is trustworthy.