File Storage MCP server

The File Storage server at /MCP/Files gives each authenticated account a separate persistent file area. It publishes files as MCP resources and supplies tools for controlled mutation.

Resources

The server supports resource listing and reading when the caller has:

OAUTH.Scope.MCP.Files.Resources.List
OAUTH.Scope.MCP.Files.Resources.Read

Resource URIs are local to the account and must not be shared as public download URLs.

Tools

Tool	Behavior	Privilege suffix
Create Text File	Create or replace UTF-8 text with BOM	`.Tools.Create`
Create Binary File	Create or replace decoded binary content	`.Tools.Create`
Append Text File	Append text; create if absent	`.Tools.Append`
Append Binary File	Append bytes; create if absent	`.Tools.Append`
Update Text File	Replace an existing text file	`.Tools.Update`
Update Binary File	Replace an existing binary file	`.Tools.Update`
Delete File	Delete an existing file	`.Tools.Delete`
Search	Match file names with `*` and `?` wildcards	`.Tools.Search`
Edit	Apply an edit to an existing file	`.Tools.Edit`

Path and type rules

Local names cannot start with a path separator.
.. path traversal is rejected.
File extensions must agree with the Internet content type.
Executable files must not be stored.
Folders can organize an account’s area, but cannot escape it.

Safe role examples

Read-only retrieval:

OAUTH.Scope.MCP.Files.Resources.List
OAUTH.Scope.MCP.Files.Resources.Read
OAUTH.Scope.MCP.Files.Tools.Search

Document authoring without deletion:

OAUTH.Scope.MCP.Files.Resources.List
OAUTH.Scope.MCP.Files.Resources.Read
OAUTH.Scope.MCP.Files.Tools.Create
OAUTH.Scope.MCP.Files.Tools.Update
OAUTH.Scope.MCP.Files.Tools.Edit

Mark sensitive content through the tool’s sensitivity input where available, and never use the file area as a secret vault.

Choose a tool

MCP

Contract tools

Resources

Tools

Path and type rules

Safe role examples

​Resources

​Tools

​Path and type rules

​Safe role examples

Resources

Tools

Path and type rules

Safe role examples