Repository navigation
Tracker: Filesystem v2.3.0 #5269
Description
Summary
Tracks the filesystem server work that ships in v2.3.0.
Sub-issues
- filesystem: a dangling symlink is reported as "Parent directory does not exist" #5191 filesystem: a dangling symlink is reported as "Parent directory does not exist"
- filesystem: list_directory_with_sizes reports an entry it could not stat as 0 B #5190 filesystem: list_directory_with_sizes reports an entry it could not stat as 0 B
- filesystem: search_files silently skips a subdirectory it cannot read #5189 filesystem: search_files silently skips a subdirectory it cannot read
- filesystem: remove the unused glob dependency #5186 filesystem: remove the unused glob dependency
- filesystem: read_text_file with head: 0 or tail: 0 returns the whole file #5184 filesystem: read_text_file with head: 0 or tail: 0 returns the whole file
- filesystem: expandHome() does not handle Windows backslash separator (~\path) #5180 filesystem: expandHome() does not handle Windows backslash separator (~\path)
- filesystem: clarify effective root state after initialization #4912 filesystem: clarify effective root state after initialization
- filesystem: FS_SEARCH_EXCLUDE_PREFIXES is lexical; should excludes be canonical/symlink-aware? #4208 filesystem: FS_SEARCH_EXCLUDE_PREFIXES is lexical; should excludes be canonical/symlink-aware?
- Security: filesystem server path parameters lack traversal constraints enabling prompt injection → arbitrary file read/write #3752 Security: filesystem server path parameters lack traversal constraints enabling prompt injection → arbitrary file read/write
- fix(filesystem): improve search_files description and performance #3419 fix(filesystem): improve search_files description and performance
- Add missing idempotentHint and openWorldHint to server-filesystem #3402 Add missing idempotentHint and openWorldHint to server-filesystem
- Security Audit: 2 finding(s) in mcp-server-filesystem #3317 Security Audit: 2 finding(s) in mcp-server-filesystem
- Filesystem server: Restrict access: Configure a base directory and allowed directories inside that. #3133 Filesystem server: Restrict access: Configure a base directory and allowed directories inside that.
- edit_file tool fails when exact text match not found due to whitespace differences #2034 edit_file tool fails when exact text match not found due to whitespace differences
- [Filesystem] add append tools #1208 [Filesystem] add append tools
- Support read-only paths in filesystem MCP with npx #1160 Support read-only paths in filesystem MCP with npx
- Add depth parameter to directory_tree function in filesystem server #1077 Add depth parameter to directory_tree function in filesystem server
- Confusing
search_filesfunction description leads to misunderstanding of its purpose #896 Confusingsearch_filesfunction description leads to misunderstanding of its purpose - Configurable write permissions for filesystem server #632 Configurable write permissions for filesystem server
- filesystem in the directory mounted with rclone does not work #531 filesystem in the directory mounted with rclone does not work
- Copy for Filesystem #519 Copy for Filesystem
- Improvment: Use resources and resource urls with the filesystem MCP server #297 Improvment: Use resources and resource urls with the filesystem MCP server
Activity
5 remaining items
search_filesfunction description leads to misunderstanding of its purpose #896cliffhall commentedon Oct 29, 2026
All work under this tracker is resolved.
v2/main(releasing with v2.3.0). They were tested together in the rollup chore(filesystem): rollup of the v2.3.0 tracker PRs (#5269), not for merging #5405: no merge conflicts,npm run local:gatepassed, and an Inspector CLI smoke run passed 78 of 78 checks across both protocol eras.