Pathgate
pathgate is a Python Model Context Protocol (MCP) server that exposes a controlled filesystem interface to MCP clients such as Claude Desktop, Cursor, VS Code, and inspector tools. The server only permits access to directories that are explicitly allow-listed at startup.
What it does
The server exposes:
- File resources via
file://... - Directory resources via
directory://... - Tools for reading, writing, listing, creating, deleting, moving, copying, searching, and inspecting files/directories
- Built-in prompts for directory analysis and file discovery
Security model
Access is restricted by allow-listed paths. At startup, the server resolves the supplied paths and only permits operations within those directories.
- Paths are checked with
os.path.realpath()and prefix matching - Symlinks are resolved before comparison
- The server can be run in read-only mode to disable mutating operations
Installation
git clone https://github.com/geekgod382/pathgate.git
cd pathgate
python -m pip install -e .
This installs the pathgate console command from pyproject.toml.
Usage
Start with allowed directories
pathgate "C:\Users\<username>\Documents" "C:\Users\<username>\Projects"
Read-only mode
pathgate --read-only "C:\Users\<username>\Documents"
Environment variable alternative
$env:FS_MCP_ALLOWED_PATHS = "C:\Users\<username>\Documents;C:\Users\<username>\Projects"
pathgate
On macOS/Linux, use : instead of ; for the path separator.
Tools
The current implementation exposes these tools:
read_file_tool— read a file and return its content, size, and encodingwrite_file_tool— write content to a filelist_directory_tool— list directory contents, optionally recursivelycreate_directory_tool— create a directory tree if neededdelete_file_tool— delete a single filedelete_directory_tool— delete a directory, optionally recursivelymove_file_tool— move or rename a file/directorycopy_file_tool— copy a file/directorysearch_files_tool— search for files matching a patternget_file_info_tool— return metadata for a file or directory
MCP client configuration
Example Claude Desktop configuration:
{
"mcpServers": {
"filesystem": {
"command": "pathgate",
"args": ["C:\\Users\\<username>\\Documents"]
}
}
}
Example requests
Once connected, clients can ask:
List the files in C:\Users\<username>\Documents
Read C:\Users\<username>\Documents\notes.txt
Search for *.py files under C:\Users\<username>\Projects
Create a file at C:\Users\<username>\Documents\todo.txt with the content "Ship release"
Project layout
pathgate/
├── pathgate/
│ ├── __init__.py
│ ├── __main__.py
│ ├── config.py
│ ├── prompts.py
│ ├── resources.py
│ ├── server.py
│ ├── tool_schemas.py
│ └── tools.py
├── tests/
│ └── test_server.py
├── pyproject.toml
├── README.md
└── LICENSE
Requirements
- Python 3.10+
mcp>=1.25
References
Metadata
Release files for pathgate 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| pathgate-0.1.1.tar.gz | 8.4 kB | Without provenance | Details for pathgate-0.1.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| pathgate-0.1.1-py3-none-any.whl | Python 3 | none | any | Details for pathgate-0.1.1-py3-none-any.whl |
Total release size: 18.7 kB
Release files / pathgate-0.1.1.tar.gz
| Download URL | pathgate-0.1.1.tar.gz |
|---|---|
| Size | 8.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
83b4b30904a00dd15e132eba6c88136c727e3ebbad47e53eb168868a10c6ab15
|
|
BLAKE2b-256 checksum How to use checksums |
840a2b4ee82f5b7e5e0cdecfb6e38fbb3f3c4149be1808dd77941d9d922c9772
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.10
|
Release files / pathgate-0.1.1-py3-none-any.whl
| Download URL | pathgate-0.1.1-py3-none-any.whl |
|---|---|
| Size | 10.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
749f1e02d2529373b855b75ee57c6db270f2193cb734a22918915c91da87248a
|
|
BLAKE2b-256 checksum How to use checksums |
12928fc6385eef5f25325fde8b4c007d61034460e54aa6b04589e628d0b2f11b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.10
|
Security for pathgate 0.1.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.