Model Context Protocol moderate risk

Desktopcommandermcp

Desktop Commander MCP enables AI-driven file management, terminal command execution, and code editing, leveraging host client subscriptions for cost-effective automation.

Connections & Capabilities

Connects To

GitHubDiscordDockerFilesystem

Capabilities

readwriteexecadmin

Quickstart

Install

npx @wonderwhy-er/desktop-commander@latest setup

Config

{
  "mcpServers": {
    "desktop-commander": {
      "command": "npx",
      "args": [
        "-y",
        "@wonderwhy-er/desktop-commander@latest"
      ]
    }
  }
}

Exposed MCP Tools (8)

critical

execute_command

Executes a terminal command on the host system.

Direct access to shell; can run arbitrary commands.

safe

read_file

Reads the content of a file from the file system.

Read-only operation; no modification of data.

high

write_file

Writes content to a file on the file system.

Can modify existing files or create new ones.

safe

list_processes

Lists all currently running processes on the system.

Provides information about running processes; no modification.

critical

kill_process

Terminates a specified process on the system.

Can terminate critical system processes.

safe

search_files

Searches for files matching a specified pattern.

Read-only operation; no modification of data.

safe

get_file_metadata

Retrieves metadata (size, modification date, etc.) for a file.

Read-only operation; no modification of data.

high

update_config

Updates the server's configuration settings.

Modifies server behavior; can impact security.

Safety Assessment

Desktop Commander offers powerful automation capabilities but requires careful configuration. Using the Docker installation provides a safer, sandboxed environment. Exercise caution when executing terminal commands and managing files to avoid unintended consequences.

Audit logging tracks all tool calls.
Docker installation provides sandboxing.
Command timeout support limits execution time.
Configuration management allows for controlled setting adjustments.

Executes terminal commands, posing potential risks.
File system operations can modify or delete data.
No built-in RBAC or permission controls.
Direct access to the file system without explicit sandboxing in some installation methods.
Potential for long-running commands to consume resources.