Remote File Server MCP

Remote File Server MCP is a production-hardened Model Context Protocol server that gives any MCP client (Claude Desktop, Cursor, etc.) safe read access to SMB/CIFS network file shares. Built for enterprise and air-gapped environments, it enforces SMB packet signing by default, blocks path traversal attacks, redacts sensitive file types automatically, and writes tamper-evident JSON audit logs on every operation. Connection credentials are passed as environment variables and never appear in tool calls or conversation history — making it safe to wire into regulated environments like banking infrastructure.

View Code

Technologies

PythonMCP (Model Context Protocol)SMB/CIFSDockerFastMCP

Key Features

4 MCP tools out of the box: list_files, read_file, get_file_info, and search_files — all paths relative to the share root.
Security-first design: SMB packet signing enforced, path traversal blocked, sensitive files (.env, *.key, id_rsa, etc.) automatically hidden from all tool outputs.
Audit logging: Every tool call is logged in JSON (operation, path, outcome, size) — never file contents — for full compliance traceability.
Flexible deployment: Install via pip, uv, or Docker; connect to multiple SMB shares simultaneously with separate named entries.
Enterprise-ready: Optional full SMB encryption, allowlist-only path access, and sanitised error messages that never leak internal hostnames or credentials.