Skip to main content

Pathgate

pathgate is a Python Model Context Protocol (MCP) server that exposes a controlled filesystem interface to MCP clients such as Claude Desktop, Cursor, VS Code, and inspector tools. The server only permits access to directories that are explicitly allow-listed at startup.

What it does

The server exposes:

  • File resources via file://...
  • Directory resources via directory://...
  • Tools for reading, writing, listing, creating, deleting, moving, copying, searching, and inspecting files/directories
  • Built-in prompts for directory analysis and file discovery

Security model

Access is restricted by allow-listed paths. At startup, the server resolves the supplied paths and only permits operations within those directories.

  • Paths are checked with os.path.realpath() and prefix matching
  • Symlinks are resolved before comparison
  • The server can be run in read-only mode to disable mutating operations

Installation

git clone https://github.com/geekgod382/pathgate.git
cd pathgate
python -m pip install -e .

This installs the pathgate console command from pyproject.toml.

Usage

Start with allowed directories

pathgate "C:\Users\<username>\Documents" "C:\Users\<username>\Projects"

Read-only mode

pathgate --read-only "C:\Users\<username>\Documents"

Environment variable alternative

$env:FS_MCP_ALLOWED_PATHS = "C:\Users\<username>\Documents;C:\Users\<username>\Projects"
pathgate

On macOS/Linux, use : instead of ; for the path separator.

Tools

The current implementation exposes these tools:

  • read_file_tool — read a file and return its content, size, and encoding
  • write_file_tool — write content to a file
  • list_directory_tool — list directory contents, optionally recursively
  • create_directory_tool — create a directory tree if needed
  • delete_file_tool — delete a single file
  • delete_directory_tool — delete a directory, optionally recursively
  • move_file_tool — move or rename a file/directory
  • copy_file_tool — copy a file/directory
  • search_files_tool — search for files matching a pattern
  • get_file_info_tool — return metadata for a file or directory

MCP client configuration

Example Claude Desktop configuration:

{
  "mcpServers": {
    "filesystem": {
      "command": "pathgate",
      "args": ["C:\\Users\\<username>\\Documents"]
    }
  }
}

Example requests

Once connected, clients can ask:

List the files in C:\Users\<username>\Documents
Read C:\Users\<username>\Documents\notes.txt
Search for *.py files under C:\Users\<username>\Projects
Create a file at C:\Users\<username>\Documents\todo.txt with the content "Ship release"

Project layout

pathgate/
├── pathgate/
│   ├── __init__.py
│   ├── __main__.py
│   ├── config.py
│   ├── prompts.py
│   ├── resources.py
│   ├── server.py
│   ├── tool_schemas.py
│   └── tools.py
├── tests/
│   └── test_server.py
├── pyproject.toml
├── README.md
└── LICENSE

Requirements

  • Python 3.10+
  • mcp>=1.25

References

Metadata

Release files for pathgate 0.1.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pathgate 0.1.1
File Size Uploaded Provenance Actions
pathgate-0.1.1.tar.gz 8.4 kB Without provenance Details for pathgate-0.1.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for pathgate 0.1.1
File Interpreter ABI Platform Actions
pathgate-0.1.1-py3-none-any.whl Python 3 none any Details for pathgate-0.1.1-py3-none-any.whl

Total release size: 18.7 kB

Release files / pathgate-0.1.1.tar.gz

Download URL pathgate-0.1.1.tar.gz
Size 8.4 kB
Tags Source
SHA-256 checksum
How to use checksums
83b4b30904a00dd15e132eba6c88136c727e3ebbad47e53eb168868a10c6ab15
BLAKE2b-256 checksum
How to use checksums
840a2b4ee82f5b7e5e0cdecfb6e38fbb3f3c4149be1808dd77941d9d922c9772
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.10

Release files / pathgate-0.1.1-py3-none-any.whl

Download URL pathgate-0.1.1-py3-none-any.whl
Size 10.3 kB
Tags Python 3
SHA-256 checksum
How to use checksums
749f1e02d2529373b855b75ee57c6db270f2193cb734a22918915c91da87248a
BLAKE2b-256 checksum
How to use checksums
12928fc6385eef5f25325fde8b4c007d61034460e54aa6b04589e628d0b2f11b
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.10

Security for pathgate 0.1.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page