MCP Server Policy

FILESYSTEM MCP POLICY

Enforce policies on every tool call to the Filesystem MCP Server. 12 tools listed, categorised, and ready for rules.

modelcontextprotocol/server-filesystem 7 read 5 write 12 tools total
filesystem files directories local-storage

GET STARTED

Download this policy scaffold and add your rules. Intercept enforces them on every tool call before it reaches Filesystem.

terminal

# Download policy scaffold

curl -o filesystem.yaml https://raw.githubusercontent.com/policylayer/intercept/main/policies/filesystem.yaml

# Run with Intercept

intercept --policy filesystem.yaml -- npx -y @modelcontextprotocol/server-filesystem

Server documentation: https://github.com/modelcontextprotocol/servers/tree/main/src/filesystem

READ TOOLS

7

read_text_file

read_text_file Read complete contents of a file as text

WRITE TOOLS

4

OTHER TOOLS

1

POLICY YAML

This scaffold lists every tool with empty rules. Add conditions — rate limits, argument validation, deny rules — then deploy with Intercept.

filesystem.yaml 
version: "1"
description: "Policy for modelcontextprotocol/server-filesystem"
default: "allow"
tools:
    get_file_info:
        rules: []
    list_allowed_directories:
        rules: []
    list_directory:
        rules: []
    read_media_file:
        rules: []
    read_multiple_files:
        rules: []
    read_text_file:
        rules: []
    search_files:
        rules: []
    create_directory:
        rules: []
    edit_file:
        rules: []
    move_file:
        rules: []
    write_file:
        rules: []
    directory_tree:
        rules: []

RELATED POLICIES

Box 80 tools
files
Google Workspace Drive (gws CLI) 57 tools
files
Google Drive 1 tools
files

FREQUENTLY ASKED QUESTIONS

What tools does the Filesystem MCP server expose?

The Filesystem MCP Server exposes 12 tools across 3 categories: Read, Write, Other. Each tool can be individually controlled with Intercept policies.

How do I enforce policies on Filesystem?

Download the policy scaffold, add rules (rate limits, argument validation, deny rules), then run Intercept as a proxy in front of the Filesystem MCP server. Every tool call is evaluated against your YAML policy before execution.

Is the Filesystem policy free to use?

Yes. All Intercept policies are open source under the Apache 2.0 licence. Download, modify, and deploy without restrictions.

ENFORCE POLICIES ON FILESYSTEM

Open source. One binary. Zero dependencies.

VIEW ON GITHUB Browse all policies →