unc-filesystem-mcp

The server's primary security mechanism is the `validatePath` function, which normalizes all incoming request paths and verifies they fall strictly within pre-configured 'allowedDirectories'. This robustly defends against path traversal vulnerabilities. All file system operations (`fs.readFile`, `fs.writeFile`, `fs.readdir`, `fs.stat`) are gated by this validation. The `edit_file` tool includes checks for unique occurrences to prevent unintended broad replacements. The `searchFiles` tool uses `glob` but limits user input to a wildcard pattern `**/*${pattern}*` within a validated `cwd`, mitigating risks associated with arbitrary glob patterns. No `eval` or obvious malicious patterns are present. The server operates with the permissions of the executing Node.js process.