Model Context Protocol moderate risk

Filestash

Filestash is a versatile, plugin-based file management platform that supports numerous storage protocols and authentication providers, offering extensive customization and integration capabilities.

Connections & Capabilities

Connects To

GitHubSQLiteFilesystemS3

Capabilities

readwriteexecadmin

Exposed MCP Tools (8)

safe

Ls

Lists files and directories within a specified path.

Read-only operation, no data modification.

safe

Stat

Retrieves metadata about a specific file or directory.

Read-only operation, no data modification.

safe

Cat

Downloads the content of a file.

Read-only operation, no data modification.

moderate

Mkdir

Creates a new directory.

Creates a directory, but does not modify existing data.

critical

Rm

Removes a file or directory.

Deletes data, potentially causing irreversible loss.

high

Mv

Renames a file or directory.

Modifies the file system structure.

high

Save

Saves a file to the specified path.

Writes data to the file system, potentially overwriting existing files.

moderate

Touch

Creates an empty file.

Creates a new file, but does not modify existing data.

Safety Assessment

Filestash offers robust file management with extensive integration capabilities. It is safe when configured with strict RBAC and well-vetted plugins. Risks increase with broader permissions and unverified plugins, especially when exposing data over gateways.

Plugin-based architecture allows for granular control over functionality.
RBAC (Role-Based Access Control) enables permission management.
Virtual filesystem capabilities provide an abstraction layer.
Supports a wide range of authentication providers.

Write operations are supported, potentially leading to data modification or deletion.
Plugin architecture introduces potential vulnerabilities if plugins are not vetted.
Exposure over SFTP, S3, and MCP gateways can increase attack surface.
Access to various storage systems implies broad data access if misconfigured.