MCP servers that read & write files
Give your AI access to the local filesystem or cloud storage.
11 servers · Last updated August 1, 2026
TL;DR: These servers let an agent read, write, move and search files — locally or in cloud storage (S3, GCS, Box). They're foundational for coding and document agents. The biggest safety lever is scope: restrict the server to a specific directory or bucket, never the whole disk.
Bottom line: if you only try one, Filesystem (Reference) is the most popular, verified option for this (74,000★). 10 more compared below.
Compare 11 servers
| Server | Transport | Auth | Verified | Stars | Tools for this |
|---|---|---|---|---|---|
| Filesystem (Reference) | Local (stdio) | No auth | 74,000 | read_text_file, read_media_file, read_multiple_files +9 | |
| Desktop Commander | Local (stdio) | No auth | 6,200 | read_file / read_multiple_files, write_file / write_pdf, create_directory / list_directory / move_file / get_file_info | |
| Markdownify MCP | Local (stdio) | No auth | 2,600 | get-markdown-file | |
| MCP Filesystem Server | Local (stdio) | No auth | — | 654 | read_file, read_multiple_files, write_file +9 |
| Ebook-MCP | Local (stdio) | No auth | — | 372 | get_all_epub_files, get_all_pdf_files |
| Google Drive MCP Server | Local (stdio) | OAuth | — | 283 | gdrive_read_file |
| Box MCP Server (Remote) | Remote (HTTP) | OAuth | 250 | search_files_keyword, get_file_content, ai_qa_single_file +3 | |
| MCP Text Editor Server | Local (stdio) | No auth | — | 191 | get_text_file_contents, patch_text_file_contents, edit_text_file_contents |
| Qiniu MCP Server | Local (stdio) | API key | — | 37 | List files, Upload file, Read file |
| Safe Docx | Local (stdio) | No auth | — | 32 | read_file |
| File Merger MCP Server | Local (stdio) | No auth | — | 26 | merge_files |
The servers
Official MCP reference server for secure local filesystem read/write within allowed directories.
Powerful local filesystem + terminal MCP server: search, diff-edit files, and run shell commands.
Convert PDFs, Office docs, images, audio, and web pages into Markdown for LLM consumption.
Secure local filesystem access for MCP clients — read, write, search, and manage files within allowed directories.
Chat with your EPUB and PDF books — extract metadata, table of contents, chapters, and pages as Markdown.
List, read, and search Google Drive files plus read and write Google Sheets cells.
Box's official hosted MCP server for secure, OAuth-gated access to enterprise content in Box.
Line-oriented text file editing for LLMs with token-efficient partial reads and hash-based conflict detection.
Access Qiniu Cloud storage, smart multimedia, CDN, and live streaming from your AI client.
Local MCP server for surgical, formatting-preserving edits to existing Word (.docx) and OpenDocument (.odt) files.
Combine multiple files into one — fast, secure, and limited to directories you allow.
Use these in a stack
FAQ
How do I stop a filesystem MCP from touching the wrong files?
Most local filesystem servers take an allowed directory argument — set it to the narrowest path that works, and avoid pointing it at your home directory.
Local files vs cloud storage MCP?
Use a filesystem server for local/project files; use S3/GCS/Box servers when the agent needs objects in cloud storage.